Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: J8a+9qbNa108p2j18eQTP658VYVvUkvozY18GXAafo8=
Subject key identifier: C3:0E:EA:4F:B7:43:E8:51:F4:41:E8:70:15:69:E2:EA:A8:97:6A:35
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019D382E7BB016DF7058B6D60196545EDA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 9A
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: sWNjA+eEWLNJXZtup0gRVS2KwjQRKqhXu0OGD3SC7HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7b:b0:16:df:70:58:b6:d6:01:96:54:5e:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=c30eea4fb743e851f441e8701569e2eaa8976a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:93:40:50:f1:7a:ec:07:07:12:0c:66:6a:
6c:f9:8e:15:c2:8f:98:21:1f:d0:00:82:38:18:02:
97:84:7c:04:da:ba:b8:f3:58:27:5a:d4:61:7f:d5:
5f:f3:08:4b:15:27:01:ee:35:ee:17:fe:2a:16:8b:
3e:13:28:b6:b5:74:68:71:e6:5b:5a:4f:e1:b0:7c:
7e:be:c2:71:17:b1:76:8b:38:f6:24:fa:a9:6c:77:
7b:37:cd:54:f6:e1:6a:e6:a8:dd:b5:c6:ca:28:1d:
94:b9:26:47:b2:7e:87:ac:8d:a0:a5:fe:5a:ad:a5:
d6:9c:d2:65:83:d2:b3:41:43:16:21:0c:83:94:38:
c1:31:d4:1f:a2:e6:50:2d:95:ca:82:6c:9c:df:28:
81:23:42:b2:de:5c:f4:95:54:4c:0c:49:4e:68:f0:
f0:42:e0:f9:ee:6e:62:75:b4:98:ca:06:fe:36:a7:
fb:23:54:34:47:79:65:a9:2c:fb:0b:b5:b9:ae:34:
9f:17:6c:1d:81:ee:53:c0:2a:78:3e:e1:3f:fe:a7:
15:75:1c:b0:52:83:eb:ce:2d:0f:e2:94:58:be:e4:
05:96:68:93:63:b0:35:26:af:16:7d:3f:48:53:d1:
90:f1:99:73:04:0b:b2:94:bf:1c:d5:51:1b:b9:47:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:EA:4F:B7:43:E8:51:F4:41:E8:70:15:69:E2:EA:A8:97:6A:35
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a9:c4:90:d8:c4:eb:fd:d6:7d:25:5b:3e:e1:00:66:27:4b:
73:34:62:1b:1a:ba:da:25:b5:ec:e8:e1:26:ac:31:5b:22:03:
3d:f9:58:af:51:e9:44:03:8a:b7:4a:15:6a:d2:19:4d:ef:b1:
58:85:87:37:b9:1d:b4:a1:60:e0:78:5d:ec:d9:12:e9:5d:28:
41:e2:99:4e:0c:a0:67:fe:ee:3d:31:cb:81:bc:b2:4f:b7:c8:
96:c6:04:b4:d5:91:71:57:52:74:fe:d9:a0:05:f7:95:80:6d:
31:ce:da:0b:2b:59:44:bb:ce:3f:03:a3:d1:af:f9:7e:4e:69:
74:a9:9b:7d:09:f3:19:53:59:f6:c4:60:d5:80:86:f4:d2:0d:
83:33:18:b8:3e:86:6a:85:11:f1:4c:24:9f:6c:de:bc:29:f1:
95:ad:22:22:35:19:32:cb:44:24:05:fc:0e:6f:c7:6b:3b:08:
7f:2e:57:f2:24:0d:0e:69:5f:e4:35:da:3a:7b:a3:83:ab:dd:
e3:a4:4f:7f:21:da:4b:95:f8:23:9b:53:11:ae:bc:85:7f:cf:
08:b9:3a:e2:40:08:51:62:81:50:b6:55:3f:10:cf:77:c9:34:
22:de:79:b0:05:8a:6c:b9:9c:97:c0:7a:d6:2f:e0:70:32:ab:
56:ee:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:53 2026 by rpki-client