Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
File: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft (raw, json)
Hash identifier: zNGZcW2bJQolO+Vlb3TCJp237Cv5i8jt9eMczWpC/Sc=
Subject key identifier: BF:EE:44:2B:2F:BC:99:E1:2B:60:4E:ED:38:13:28:47:B1:D3:BC:C0
Authority key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
Certificate issuer: /CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Certificate serial: 019D2704C3DB4AE463303877D2C6065F5762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
Manifest number: 09D6
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl (hash: oGc0mbBiywkdyrFyx0gwNZECGptWpBm1hcrnxnilqQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c3:db:4a:e4:63:30:38:77:d2:c6:06:5f:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=bfee442b2fbc99e12b604eed38132847b1d3bcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:d6:f2:5b:b5:76:c5:b7:d7:77:46:54:00:
6a:46:4e:f2:bd:d6:94:ed:42:b2:54:60:70:88:3b:
13:7b:8e:84:a9:8c:20:4d:57:45:b3:c9:9a:24:73:
66:28:8b:bf:8a:fa:1d:6b:a9:19:1c:a9:d9:09:21:
9c:6a:02:6b:e7:8e:6e:88:4e:75:e9:1c:12:ae:77:
73:60:9f:f1:f0:99:eb:44:9f:a8:5a:68:4f:3b:d6:
5b:37:c5:08:e8:b0:93:e2:c0:fe:de:6e:8a:ed:56:
91:d9:14:b7:99:9b:e8:3f:79:82:61:98:47:db:d5:
c6:dc:99:17:8e:d7:b3:0e:d3:ac:1b:e9:8c:8b:00:
8d:b9:e0:7a:b5:6d:8b:95:36:33:4c:4a:b9:77:71:
20:2b:c7:c9:06:b4:27:a8:e2:40:69:c2:c3:23:78:
52:47:1b:bb:67:2d:8c:1a:83:64:f1:92:a0:56:90:
64:9c:62:42:09:fb:a8:26:b9:8b:92:41:3d:da:f3:
65:1b:d4:b9:14:c1:7b:fd:81:e9:0b:db:fb:ad:ff:
c2:56:04:ee:b6:90:ba:f4:51:4c:ea:49:bc:48:1b:
13:f0:c7:42:a8:d1:60:33:88:24:42:97:c3:3e:a0:
83:1c:3e:57:67:68:1c:1b:5f:87:eb:78:f0:98:88:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:44:2B:2F:BC:99:E1:2B:60:4E:ED:38:13:28:47:B1:D3:BC:C0
X509v3 Authority Key Identifier:
keyid:90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:31:55:97:bd:31:f4:70:d5:eb:0d:79:d6:83:2b:71:8f:f2:
d3:91:c7:76:64:db:22:ca:80:ae:bd:ea:72:cd:0e:27:bc:ea:
06:2c:75:0b:f0:68:11:57:bb:6d:d4:e7:1e:22:7d:99:6d:9b:
ff:f0:ea:b5:84:4e:2d:20:8b:64:d7:b1:98:df:21:84:ad:29:
53:99:4a:1b:c8:cd:a0:f3:2c:64:c1:78:53:17:55:13:dd:46:
5b:2c:8c:f0:7f:5e:23:4d:4c:10:a0:69:f8:6b:d9:9a:a5:79:
7f:59:8c:c3:36:97:e0:c3:66:ed:07:ce:82:e3:84:54:cc:3e:
e4:d1:d1:f9:57:fc:7c:04:1d:77:30:f9:6d:a7:ae:7d:d5:75:
bf:8f:26:9f:ab:41:5c:68:72:72:da:f6:74:02:8c:b9:e1:8d:
8c:8e:84:ba:af:02:e0:43:f8:31:f6:fd:7a:2d:35:e1:5a:2f:
f2:fe:12:f3:4a:05:a2:1d:67:fe:cc:b1:9f:4b:f0:11:26:27:
a8:da:d9:b6:6e:c0:d8:5c:25:97:7f:1c:d4:9a:64:97:f9:b0:
d9:dc:0f:66:d8:9e:fc:35:8f:2b:38:3d:fb:4e:6a:fd:7f:ff:
76:02:cd:c0:d4:0b:a3:21:20:57:a8:1c:28:8a:92:ff:8d:4a:
49:5f:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:01 2026 by rpki-client