Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: jvjPh7N47aNc5NrsbaBIDAdpClAYO2g6YNba/Y9cJK8=
Subject key identifier: 6C:05:D4:9E:D1:B4:59:F7:29:F2:9C:8E:FD:1E:A8:BD:33:5F:DB:EC
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019D389BE010B254C742E4DE69CF1505A423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 02E9
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: Ah1zkCt41Yg3NZ4mfPJC8T6zRHQ.roa (hash: NMfgnHqRrDwsZCUvzQT+wIBkVfDVMOG4Osq0Hs4uyVU=)
2: dTPhWcmoSCJmhGreyJsPD4EE5t0.roa (hash: hsV4SDj2rIN1TNflJCH5NKHRDE3joBuyhtpUXGC4Fik=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: AADK9bjbG2pmT12WC7UPlWdJkvuHySaefx5JeQd0pIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e0:10:b2:54:c7:42:e4:de:69:cf:15:05:a4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=6c05d49ed1b459f729f29c8efd1ea8bd335fdbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:0d:fe:5c:fa:e1:58:77:5d:1a:7b:5a:6d:
10:b8:c3:af:61:ec:13:c9:20:88:12:dc:7d:5e:7e:
3b:b4:75:e3:05:99:82:97:ad:ed:6d:02:3f:41:7a:
65:f9:5e:97:bc:04:1d:88:28:93:85:16:e6:0d:25:
e8:6a:bd:61:67:89:09:71:a4:94:64:a4:f6:ca:4a:
77:b5:bc:82:3c:e2:7b:a8:2e:db:1b:ec:5b:6d:79:
1b:51:c7:f3:80:a7:eb:51:9b:43:82:b0:a6:cf:39:
62:84:1c:5f:49:a5:ad:dc:c2:16:d8:69:0a:d8:cc:
84:6a:1f:b8:18:7b:28:89:4d:eb:4a:ae:f0:17:3f:
42:86:06:49:58:dc:2c:6b:fc:eb:9f:c4:46:84:2d:
ea:f9:2b:17:83:9b:0b:b9:dd:d8:1e:4d:fe:f5:9c:
ef:e6:99:6a:11:6e:1f:b3:25:3f:08:be:97:43:46:
8e:66:bd:d9:de:e6:e3:32:e1:7a:54:93:6e:45:c5:
1e:12:26:c3:8c:f1:9a:46:69:62:13:e3:e7:40:8c:
0d:f2:5d:8b:59:cf:9d:ad:0a:fc:7e:71:fe:d6:30:
2c:42:b1:b1:ff:55:0c:fc:01:3e:55:1b:35:88:8b:
21:8d:a1:36:f5:cf:a3:1e:dc:d9:bc:b4:db:d5:57:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:05:D4:9E:D1:B4:59:F7:29:F2:9C:8E:FD:1E:A8:BD:33:5F:DB:EC
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:1a:6f:be:da:97:5d:3b:7f:f4:2e:42:07:19:5d:fe:77:
5b:48:8f:8f:94:f1:6f:37:f5:80:2d:ee:5b:eb:cc:4e:62:1f:
f9:ed:13:32:77:1d:05:f7:cd:3f:4f:00:c0:69:f3:3d:e8:e9:
04:c4:97:36:14:cc:68:54:b1:a4:dd:e5:c4:fe:75:36:6b:89:
3b:4a:d8:12:39:66:f8:10:d7:c2:a0:d1:b6:dd:d6:c3:30:dc:
ff:d6:ab:93:5e:1b:21:db:41:18:5a:02:86:33:8c:45:98:f4:
a7:58:b4:85:6e:36:b9:46:d8:3e:60:e7:67:91:34:f6:11:de:
3e:96:38:d5:39:4b:ea:22:9e:35:fb:cf:7e:9a:ea:85:f3:cd:
46:67:8d:fb:bd:25:c8:5e:03:eb:fd:54:3d:4f:8c:0c:26:a4:
53:aa:c8:5e:c3:5f:ed:c4:55:c5:bf:fa:54:40:5e:a6:20:91:
8b:28:f4:42:fc:0b:bf:99:ed:cb:9a:1b:e7:40:67:3d:7d:54:
ac:18:af:90:39:83:dd:d9:f9:8e:54:7a:3e:8d:78:e3:8b:4f:
68:ce:71:22:e3:df:7b:b1:4a:ef:f6:5f:20:80:da:41:86:5b:
1a:8e:84:dd:a6:0b:fb:ca:4e:d1:3e:68:f7:0b:23:57:fe:92:
b1:d7:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:58 2026 by rpki-client