Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: 5f21jVEEV+6CEBS/p9inOMe+ITV5ibiJi/EoLNHWPTk=
Subject key identifier: 58:9F:CE:66:3A:70:F1:49:86:BC:20:6C:EF:E7:22:68:A6:1D:CE:DF
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019D38D29AEFA5EC51B5F42E20D87075EDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa (hash: ceH7xNtIASBG/OmWLD8LM3MYEGRNf6JiHbcW322GG3k=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: YFpYSR7lTYWDaAMrxV6XZi6vOLaZ1jEcNSaG3yqDxLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9a:ef:a5:ec:51:b5:f4:2e:20:d8:70:75:ed:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=589fce663a70f14986bc206cefe72268a61dcedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:0d:40:2f:c1:8f:bd:d8:93:b8:e8:2d:aa:
42:63:3a:62:05:e1:51:c3:ba:e4:1d:2f:53:45:80:
d8:9a:9b:25:07:33:e6:75:89:20:4c:fa:cc:01:f1:
27:f5:9c:79:cd:99:e7:6f:5a:36:94:d6:e0:4e:08:
3f:d4:f1:01:e6:a8:18:d4:00:e5:bc:c0:60:46:58:
59:35:a0:17:7d:11:11:13:89:db:15:df:a9:d0:ed:
ea:6a:30:db:87:0f:44:9b:b4:bf:7f:69:09:c8:ff:
82:25:92:17:a8:b9:2a:58:22:22:00:21:03:5b:25:
91:11:de:cd:aa:af:46:f1:e8:0d:3d:76:dc:46:37:
a0:d3:65:f2:01:97:38:9f:85:46:ef:a6:75:18:39:
7a:5c:29:c6:ec:29:69:52:86:dc:59:ea:aa:04:d2:
61:35:b9:b2:62:22:4c:58:65:24:2c:16:84:63:bf:
b0:5b:f9:a4:19:a6:13:10:c8:b5:e4:b2:6e:57:78:
f0:93:85:ac:54:6f:ac:a7:68:21:f4:18:f3:5b:3b:
66:20:bb:61:52:c7:f4:49:97:e2:e9:d0:c3:19:3a:
f4:6f:2a:b1:14:70:ae:c6:f5:81:72:53:9b:ac:95:
3d:24:fa:fc:b9:0e:76:56:89:ed:e4:07:0c:11:16:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:CE:66:3A:70:F1:49:86:BC:20:6C:EF:E7:22:68:A6:1D:CE:DF
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:98:e8:12:01:4f:2f:37:6b:d6:72:fc:4f:02:6f:0e:47:
93:91:45:78:26:55:9d:c5:81:60:da:4d:9a:9d:21:35:cf:39:
b7:14:63:da:d1:cb:53:1e:2f:3d:1f:bd:d8:0f:59:cc:56:cf:
57:9f:9d:f6:d8:4f:0e:b8:3e:22:de:bd:aa:84:01:51:d8:b7:
55:ac:74:b2:e4:ee:4a:df:2c:89:5d:be:76:c6:b9:d8:9a:7a:
fd:19:43:be:6c:97:f4:af:e5:1e:a3:14:e7:80:c1:1e:85:6d:
d0:64:a2:bd:13:e6:e2:f5:57:b4:eb:09:77:ae:b2:f3:66:64:
f2:69:a1:45:44:96:74:5f:90:a5:b1:03:30:d0:a1:5e:e2:e6:
28:26:6b:78:b8:88:66:85:cc:c7:5b:05:dc:17:1a:8c:46:97:
0b:f3:08:dd:b6:35:00:af:99:66:73:1d:dd:9e:a0:24:bf:32:
e8:3c:7c:b8:00:10:57:9b:f4:18:30:4b:0f:aa:ac:49:7e:f6:
bd:91:43:a8:db:a8:b1:d0:7f:aa:0b:a0:55:35:c6:4b:06:9c:
42:2a:d4:0b:f8:c7:ad:e9:5a:ce:14:8a:55:0a:da:88:80:9d:
ec:d9:7f:2e:c6:80:c2:ef:4f:34:c1:8b:5d:c5:2d:6b:2a:ca:
4c:1e:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:10 2026 by rpki-client