Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: UtYC1YiwmtH8XV5uJTx34plpgy28NOW9VsI5XEpQwD4=
Subject key identifier: FF:C6:D3:E3:BD:C0:42:6E:4A:6D:9D:90:40:4A:50:90:09:39:50:D3
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019D382E9C78BD906789A1D4BA1471CE89AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: wVblPfqHpUGE2RwWeefwjuhjEzYd0FGaNZgspGGd0cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9c:78:bd:90:67:89:a1:d4:ba:14:71:ce:89:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=ffc6d3e3bdc0426e4a6d9d90404a5090093950d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:22:cd:e4:a7:bc:d3:2a:d2:d5:73:c0:e3:
f4:f5:38:a4:ec:c9:bc:64:ac:ca:4f:1d:c8:17:36:
bc:f1:e7:d1:71:74:98:56:f5:b6:9b:1d:25:b9:bd:
79:4c:64:3e:7a:02:d1:90:b9:08:db:dc:d8:1d:e0:
57:96:9a:fd:81:e8:e1:a9:d6:95:e3:fa:70:88:59:
ce:55:48:d4:fc:c0:04:d5:1f:15:34:a3:34:a9:8e:
b0:ca:5d:71:fd:aa:bc:ec:18:71:7b:2d:55:6a:d6:
97:98:27:c5:a9:66:a1:c5:01:14:02:c0:ac:fe:e7:
88:c4:96:78:a9:4a:08:35:bd:5a:ee:c6:8d:0a:36:
0a:a5:ff:e5:f6:9c:5d:ab:34:b7:a9:2e:f4:64:02:
3a:d5:92:e6:da:fe:ad:5c:5f:8e:fb:8a:b0:54:aa:
3a:86:6e:af:4e:41:3d:85:fe:06:28:bd:70:92:87:
91:bf:b1:ad:0b:1a:66:11:ca:af:01:f6:fc:f9:64:
e1:cf:1e:14:69:9f:60:d4:10:09:95:26:3a:b2:b5:
b6:22:9c:3c:db:1a:64:e5:d0:0e:02:ee:09:fd:21:
da:64:eb:8a:1e:fd:cb:db:8d:f5:42:c7:17:b9:ef:
9d:e1:71:68:08:ec:1d:cf:60:23:c5:b4:d0:52:1a:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C6:D3:E3:BD:C0:42:6E:4A:6D:9D:90:40:4A:50:90:09:39:50:D3
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7f:cc:58:46:bf:c3:e4:3a:24:89:8d:10:cd:bd:cc:58:8f:
a7:15:a5:23:c0:d4:89:33:e4:ab:23:14:44:b0:9c:19:b8:75:
ae:81:5e:8d:3f:ce:52:98:b9:39:9f:2d:d3:e2:99:03:1e:09:
ac:db:0e:1f:19:26:2b:e7:c5:63:b3:01:dd:df:7e:6c:9b:b0:
bc:3d:8c:d2:f8:8b:58:8a:e5:65:71:1b:a4:0f:71:eb:33:94:
18:fd:f6:1a:c9:61:ba:7a:f4:a4:a1:19:c8:01:35:e8:ed:79:
03:82:de:76:32:35:a1:25:7b:da:fd:da:13:17:66:06:51:0b:
35:b4:0f:d1:a8:c4:a4:71:ff:ee:39:d3:0e:c9:e7:49:ea:55:
38:25:4b:6e:d4:af:3a:d9:c2:e6:82:c5:3c:32:d7:2d:f9:ec:
1d:22:66:4a:16:c0:dc:76:83:47:7e:81:5d:d9:bf:37:8c:58:
fd:85:96:f8:5a:a7:44:00:3c:24:fa:4e:71:b4:85:de:be:e7:
d1:27:61:1c:1d:6a:9f:90:01:5e:04:9d:2e:d1:7a:c6:4f:cd:
29:10:83:0b:e6:83:d6:fc:c7:86:87:18:e6:15:be:64:74:51:
43:0e:da:47:a8:b7:6e:e7:34:72:1a:2b:8a:e7:76:df:22:07:
26:aa:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client