Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: j5XvuAokHdYBmYk7zYlJCvUsbQJ8Dr6Qcmfl7qBrIz4=
Subject key identifier: 54:EC:D7:A6:7C:06:AA:25:D2:FE:46:47:F4:55:6F:46:14:E6:5F:A1
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019D3940B4FE88DA0697554F56B6D6D56343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 075E
Signing time: Sun 29 Mar 2026 11:00:35 +0000
Manifest this update: Sun 29 Mar 2026 11:00:35 +0000
Manifest next update: Mon 30 Mar 2026 11:00:35 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: ECHphejhuW40GspFxNihXPcbD8HSVqP8Fn1wdee7Jms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b4:fe:88:da:06:97:55:4f:56:b6:d6:d5:63:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Mar 29 11:00:35 2026 GMT
Not After : Mar 30 11:00:35 2026 GMT
Subject: CN=54ecd7a67c06aa25d2fe4647f4556f4614e65fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:d9:5d:fa:21:2d:e3:81:9a:6e:fa:f7:f1:
e8:4a:3f:a5:95:c6:8d:b3:37:00:29:58:2b:9e:ba:
24:3f:87:d4:24:77:12:96:aa:ce:6c:0a:17:59:00:
e1:30:2a:d2:29:d5:cf:07:eb:d0:e3:d9:26:39:3d:
c6:ff:76:da:85:f0:ff:d6:8e:77:8f:99:78:26:4d:
15:b9:39:1d:46:a8:e5:b5:55:86:08:35:7d:a3:2a:
ff:6a:45:dc:22:76:07:9a:bb:bf:f3:ba:45:bd:eb:
a4:b8:e0:35:43:60:7f:42:17:fe:8f:61:07:e2:aa:
bd:ae:6e:3b:83:8f:9a:64:ef:48:f7:3b:07:41:64:
63:58:ca:f9:cc:34:35:d4:d1:77:a1:05:d3:ea:dc:
4d:b0:79:25:13:a3:46:5c:71:73:77:f7:fb:dc:ad:
62:be:4f:17:99:5b:56:c4:b2:8a:46:cf:50:2b:83:
63:1a:60:4b:57:3f:dd:ca:76:f8:35:44:f9:a5:3c:
df:f9:84:f1:6f:cf:71:9d:2c:35:36:c5:1b:b1:1a:
20:0e:cd:06:db:3d:96:77:04:1b:f7:3f:b0:90:56:
a7:09:38:45:dd:dc:fb:73:e5:6d:6f:b7:9e:79:89:
06:de:91:66:90:83:48:ab:79:46:b6:ce:b6:cc:3d:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:D7:A6:7C:06:AA:25:D2:FE:46:47:F4:55:6F:46:14:E6:5F:A1
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:83:a7:de:5e:e8:59:93:67:57:51:99:c6:bc:c7:23:ff:
63:83:b9:fd:50:a6:f6:bb:df:46:8a:a0:e6:5c:84:46:a4:56:
b7:ae:c0:db:2f:e5:57:cb:ad:e1:94:ec:f6:77:c8:12:64:43:
f3:9e:b5:62:ec:00:2a:22:6e:9a:ba:38:e0:9c:2e:bf:23:e2:
0c:91:ee:33:87:11:60:d1:62:d1:c0:85:3d:0a:7a:36:89:b4:
57:b6:c6:2d:c9:02:c0:ac:00:72:79:9b:d5:0f:d7:19:7b:e7:
11:a4:4f:20:b2:3d:ed:2a:00:5a:10:ff:78:59:31:bd:26:54:
f6:ce:aa:5e:07:ce:60:fb:21:2b:7e:b9:6e:5f:45:de:3a:06:
14:53:7f:a7:58:25:84:35:3c:c4:9b:39:18:e9:07:58:06:b9:
d1:a9:20:66:84:56:b5:64:58:7d:f3:81:a7:8c:df:c4:47:15:
f7:be:e2:41:64:44:2f:78:a0:78:f7:24:3c:f2:de:63:e0:cc:
9e:dc:84:94:35:ab:8e:99:0f:90:f4:aa:a0:20:44:06:90:0e:
f3:b2:a1:e9:2d:b2:d9:9d:54:c8:4d:63:30:ce:0c:74:38:1e:
df:8c:c5:94:aa:42:42:27:c0:68:ee:b8:c3:ed:41:ff:d5:70:
78:9f:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:04 2026 by rpki-client