Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
File: kBH7CJG4_pLLZ6vSni3MhczHhkk.mft (raw, json)
Hash identifier: UG6eDT5grDGV0NF6XdWlHaMCbz6L0yz+lyO/0xySHnQ=
Subject key identifier: 57:9A:E8:ED:7C:23:29:06:65:1D:99:1E:B5:35:0D:03:1D:D9:D8:31
Authority key identifier: 90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49
Certificate issuer: /CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649
Certificate serial: 019D389BF2D11A4AEE8ABF1613470E26D5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
Manifest number: 01F3
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: kBH7CJG4_pLLZ6vSni3MhczHhkk.crl (hash: iSoWmPAB8EZs6DMwoW+AGglj6HIt2TNJyxxOcuQp/yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f2:d1:1a:4a:ee:8a:bf:16:13:47:0e:26:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9011fb0891b8fe92cb67abd29e2dcc85ccc78649
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=579ae8ed7c232906651d991eb5350d031dd9d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:f2:da:b5:fc:14:81:e7:e6:f5:3a:02:fd:
d6:07:b2:58:21:72:0a:b3:36:dd:84:75:e0:6d:24:
d5:1d:91:94:89:26:94:1d:b1:6e:6e:d4:b2:3d:52:
93:05:8a:17:d6:1d:d5:e5:24:75:b4:96:10:b0:5f:
04:3b:6d:62:5a:7f:1e:22:28:4b:8d:c6:ca:80:25:
af:c3:34:01:de:42:3f:c8:dd:26:b5:19:92:69:83:
98:6c:e6:64:cc:81:0d:ea:a8:64:c4:6f:e7:29:ee:
86:10:56:49:6f:04:08:93:ba:f2:24:0a:b1:44:67:
be:20:a7:86:0f:a2:75:db:a5:4c:d9:2b:c3:9a:c8:
91:e4:d8:2d:b0:08:41:9f:d1:db:ef:96:21:a5:2e:
94:7b:ba:05:27:f7:bd:0a:4f:4e:56:23:84:a2:ab:
75:be:68:f4:7a:74:b3:0c:7a:42:10:bd:0d:87:c3:
a8:50:24:ad:d8:e2:60:1a:ed:60:9a:63:ef:2e:ee:
b5:f7:fb:cb:ff:73:88:d7:7c:e6:67:68:11:79:ee:
41:d0:ff:59:26:bc:16:fc:f3:aa:99:00:f9:f6:46:
09:80:12:92:dc:98:33:df:e4:4b:9e:a4:1f:af:e2:
3a:fe:3e:9c:3f:67:7e:0c:87:27:b5:7f:04:cb:ad:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9A:E8:ED:7C:23:29:06:65:1D:99:1E:B5:35:0D:03:1D:D9:D8:31
X509v3 Authority Key Identifier:
keyid:90:11:FB:08:91:B8:FE:92:CB:67:AB:D2:9E:2D:CC:85:CC:C7:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBH7CJG4_pLLZ6vSni3MhczHhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b5f338-7d84-4ac5-b7df-c573d007a781/1/kBH7CJG4_pLLZ6vSni3MhczHhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c5:a4:b0:c6:91:54:d9:2d:c7:82:76:08:b7:e7:21:4a:61:
a5:4e:0f:d7:ef:35:77:4c:88:68:06:6e:2d:64:30:44:fb:0a:
80:19:ae:c9:ef:a7:75:b4:2e:27:22:a5:d6:02:1b:d5:d3:ff:
10:64:ef:78:ff:c0:d4:b3:39:2a:e6:87:38:92:c5:81:fb:28:
63:fb:c7:ce:71:9e:2c:07:35:20:47:66:26:86:1a:00:6e:45:
2b:54:39:bc:f1:6d:b3:0e:06:44:77:b5:ca:32:4c:6c:b6:da:
a2:d0:af:09:c6:3f:42:f1:70:60:1c:7e:e7:4d:90:39:8f:88:
14:16:86:f5:f6:a1:d6:a4:88:ac:8e:3e:b5:12:3a:4d:b1:43:
f7:ba:c5:d6:b3:36:8e:bd:76:e0:31:8c:a6:ca:32:9f:9e:13:
0d:27:7d:b7:ed:24:49:33:9c:52:b5:86:96:cb:51:c6:5b:d3:
05:0d:47:ab:35:4a:39:13:07:2e:da:b0:c2:1e:59:de:a4:72:
cd:28:1a:46:cf:86:0f:6c:0d:df:c9:85:c2:bc:0e:ab:a7:8d:
6b:89:fc:ba:0f:50:6b:09:c5:b1:80:67:3c:d3:e6:05:05:9c:
0e:47:fb:3a:43:3d:42:25:80:a0:67:5a:23:82:10:59:10:0e:
cd:7d:e4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:28 2026 by rpki-client