Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: J+iyPQd2mh+wv3Rpf+qZslYdYa32/loah92ztQawM54=
Subject key identifier: 8E:DE:C3:86:EC:4A:79:FE:5B:C2:3E:29:70:D1:DF:BD:1C:E9:3B:2C
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 019D25BA7D767F0F71757DEE6F6ACA27BC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:01:11 +0000
Manifest this update: Wed 25 Mar 2026 16:01:11 +0000
Manifest next update: Thu 26 Mar 2026 16:01:11 +0000
Files and hashes: 1: 1uE9x6kErVCemmvGtU5h92iTdMY.roa (hash: aInWw6Wfhot9N2dvPiHCOhDAZMsuEWsBTYzGqfwz6bI=)
2: gTuD19nmTp2j0NfdVM92eulUz50.roa (hash: m8yAhVyb51tG8BtWITG5vAfuqvzjN7V08miYWQPPSis=)
3: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: K4RsFUEUlpkrgDxUr3yD21Fm5r8QQU1BmYWyApJAUTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7d:76:7f:0f:71:75:7d:ee:6f:6a:ca:27:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Mar 25 16:01:11 2026 GMT
Not After : Mar 26 16:01:11 2026 GMT
Subject: CN=8edec386ec4a79fe5bc23e2970d1dfbd1ce93b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:b9:3b:ce:b3:85:a0:c0:d7:59:a0:00:5e:
d6:87:7f:d7:eb:31:18:3e:6d:ae:86:24:51:2b:dc:
fc:56:7f:9f:36:ff:3c:d9:7b:9f:5f:21:ca:82:78:
5b:35:4d:11:0b:e9:ca:cd:71:7b:c0:00:bc:7e:e5:
f3:3f:38:5b:62:8c:7f:16:50:75:b4:3a:c9:c6:72:
3f:59:92:26:44:24:51:ee:ff:ad:45:58:c1:20:ea:
66:b7:7b:49:b3:8c:ab:a9:c3:ea:0e:7f:56:c4:05:
87:a1:99:e0:ba:90:61:84:3a:ea:e3:d9:07:25:ba:
1f:54:4f:ca:7b:06:5d:77:31:de:b7:3d:72:f0:ca:
d9:55:6d:ac:d7:ae:31:a3:08:dd:82:6a:94:92:de:
c3:8f:46:06:e5:f4:9c:b6:c1:cc:b8:b0:2d:b6:e0:
40:30:41:2a:c1:53:06:fc:57:f3:5a:36:f1:24:e6:
c2:46:25:3a:ca:c8:c0:d9:ac:c2:56:e2:40:21:06:
3a:da:85:98:1d:df:98:f9:d6:be:11:f5:b0:63:13:
cc:be:1d:58:2a:0a:48:58:88:f0:3f:27:b8:42:7e:
80:86:d3:44:41:12:b3:1d:9e:c0:5c:3b:98:43:57:
b5:53:f4:06:ce:16:59:de:31:dd:9c:fc:d4:d1:94:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DE:C3:86:EC:4A:79:FE:5B:C2:3E:29:70:D1:DF:BD:1C:E9:3B:2C
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:99:2c:0c:51:72:c1:eb:ff:f3:cd:a4:d6:36:3e:32:87:
8c:49:59:44:70:f8:d4:de:b6:8d:a9:e5:34:61:a0:e6:53:fd:
4c:64:c4:de:83:6a:c1:ff:03:13:cb:f8:c8:ff:16:c6:80:73:
31:24:63:63:9e:03:9e:31:6a:c5:64:4d:93:07:93:ab:7d:e8:
91:41:ff:a9:61:4a:c5:5b:ca:72:bd:cc:2b:fd:56:f4:a3:b7:
5b:d4:e0:3d:e9:c8:1d:93:ba:48:b1:65:84:94:89:57:22:a4:
bb:5b:bc:af:c4:0f:79:c6:66:ff:59:90:85:55:c3:fb:d2:1d:
0d:9a:1c:60:46:6d:4d:65:31:51:a1:91:d9:6c:91:a5:77:78:
4b:25:98:37:86:26:37:81:78:96:6f:69:39:59:8e:af:72:7c:
d2:c6:a8:13:21:9b:41:b6:61:21:7c:d5:4b:fb:80:b1:b5:17:
7d:84:ac:67:2f:7a:a4:6b:4a:3a:7b:54:25:ea:b4:b0:b6:86:
f8:0d:ed:c4:66:b6:bc:01:33:0f:3f:a8:e2:14:f8:93:e8:77:
92:52:6f:30:82:56:10:af:d5:54:9b:f7:65:43:fe:be:05:f8:
fe:84:7a:c9:fd:d2:d3:ec:c4:91:0f:77:05:61:f1:dc:18:2c:
0d:2c:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:01 2026 by rpki-client