Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: 0L27F3lqTmMaUnn5iSQIspFQrEkrDWk5F3AlpXrG8rI=
Subject key identifier: CA:08:EE:54:A8:D8:B1:84:46:2F:D8:2D:64:02:F9:DC:DF:4A:5F:B0
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019D26964B9298576D3B9270762EC53ACC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 1163
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: gMde_Z2AYAfDjgfQgADaIVzJfHA.roa (hash: ohh0Sm+ArlanntYsQ32zJOzQvbfP0sXTcTAxiE+zWSU=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: gtcrdIRsERhiKfwpxhkrtDAmU3MkFIS8WIb2XLuo5G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4b:92:98:57:6d:3b:92:70:76:2e:c5:3a:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=ca08ee54a8d8b184462fd82d6402f9dcdf4a5fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:9c:9d:ad:2f:54:c3:b0:bc:40:99:73:8b:
12:4b:88:1a:b9:7d:f3:69:4b:1b:b1:2b:9c:4f:e6:
54:2a:ef:cd:fa:a0:47:54:d2:fd:bf:c3:93:dd:50:
dd:66:c1:87:0d:69:a0:ba:bf:38:5a:49:0a:36:ff:
85:cc:a3:03:a7:bc:e9:3c:64:9e:57:ec:9c:1f:c7:
f7:60:f2:db:da:6a:0c:fc:6b:51:7c:4e:fe:e0:bc:
a4:82:b6:9b:4c:c6:56:32:d1:7d:d5:b5:e9:c2:bb:
4d:77:15:23:70:a5:dd:d5:7d:54:dd:78:7a:cb:38:
4e:95:c5:d7:f6:e8:62:5a:2c:22:aa:3d:e3:53:f7:
bf:da:00:a4:ff:00:c9:78:0e:29:86:15:51:10:ad:
39:bb:be:d7:eb:36:b7:ea:c1:2e:fb:d1:99:50:25:
2c:fd:26:ba:fb:86:1f:fc:06:5b:d9:e3:1c:31:12:
cf:5d:ed:67:67:7a:05:1a:c8:bf:68:73:06:a7:00:
03:ad:87:dd:10:41:34:35:54:98:71:c4:5c:28:cd:
a1:68:f0:33:98:44:0c:5d:85:34:4e:1d:c2:4c:d6:
c7:5d:7e:d6:36:c8:27:70:cc:43:6a:88:19:e5:1e:
19:be:b1:a0:90:26:f1:dc:86:7c:a6:cf:33:76:e9:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:EE:54:A8:D8:B1:84:46:2F:D8:2D:64:02:F9:DC:DF:4A:5F:B0
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9a:13:38:0e:ea:82:29:4c:8b:29:ee:2c:cb:08:ad:f6:21:
57:66:2d:3a:af:c4:1d:14:b4:22:9f:f3:7c:34:55:40:06:cb:
d5:79:f0:5d:9c:87:87:f3:41:63:b1:0b:40:ad:94:91:95:6a:
b6:83:58:9a:66:9a:17:bd:91:db:63:2d:d2:be:02:e0:98:61:
7d:71:1f:67:64:90:ba:32:2b:19:b3:f9:17:ce:cb:10:42:41:
36:94:ac:5a:05:f6:84:56:f5:34:03:d3:58:04:21:95:dc:34:
8b:b7:ac:9e:cf:74:6e:76:bf:4f:83:a1:57:9a:d7:a2:be:ae:
fd:69:9b:db:a1:d3:5b:5c:ca:b0:14:07:44:cf:33:96:64:2f:
64:73:9e:0b:e0:1a:45:2d:9d:1c:ee:75:82:47:7d:8b:7c:52:
bb:c0:63:13:8b:45:63:75:28:c4:a9:55:a0:53:aa:97:28:f0:
5a:e3:9b:2b:fe:a7:ed:d5:16:a6:9b:4a:79:e0:c1:6e:21:21:
02:02:1f:d0:08:52:b2:1e:16:90:83:60:a4:1f:a2:e3:1f:55:
33:83:db:cf:c9:8e:05:85:90:00:f4:42:10:01:a0:0e:1b:cf:
77:0c:05:06:8c:44:e2:08:9e:2c:ff:f2:82:89:31:62:06:27:
f4:4f:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:14 2026 by rpki-client