Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: 3eGR+1ZKbb6x4EaNzdaKJQfRplMBCp3ww73NuozmnZk=
Subject key identifier: AE:25:ED:EE:A4:33:4E:17:86:01:16:D4:7F:8C:38:B4:9F:67:5F:D6
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019D3752EE5F15F94CBDE954B4E58DF384EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: XQ2ZHFNfMEJ7swLdS4Mpj/E+yBpghpCJY5XcdFSNQy8=)
2: oeaJctM9Qtah90R6LCT4BqnOU4E.roa (hash: 6Vq0BN7rnnATY8BQSA0XM6bTNiKEPoqXG+oYtacEtmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ee:5f:15:f9:4c:bd:e9:54:b4:e5:8d:f3:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=ae25edeea4334e17860116d47f8c38b49f675fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:69:09:db:6c:9c:dd:30:b5:54:ed:79:52:
6d:6d:70:19:b0:2f:90:d9:c9:4f:00:b7:98:87:6f:
e3:fa:fc:c3:45:73:b3:7b:ee:9a:c9:26:33:78:94:
b9:3d:6f:eb:c3:74:2c:f1:6d:1f:be:43:47:e2:77:
8f:66:da:a3:ce:57:71:8a:84:84:ec:c9:c7:13:29:
e0:1c:40:73:3b:91:9d:51:8a:cc:7f:82:be:df:ad:
b0:f6:3b:6a:bd:9b:59:b1:26:0b:73:47:b3:4e:3c:
57:58:44:92:8c:41:c6:3b:c7:54:ba:1a:4a:84:2c:
04:50:76:4f:70:ed:92:62:6c:a8:cf:10:7d:9a:28:
fc:c3:b3:b9:24:44:de:b9:4d:cb:3c:d4:a7:65:9d:
41:15:d1:61:a3:27:2b:5b:b9:4b:05:65:79:e9:75:
24:17:bb:c5:07:90:ef:f2:bc:bb:79:e0:6e:b1:62:
70:6d:28:4f:b6:c0:4d:e1:92:e2:7f:19:5a:d8:97:
83:e5:6d:df:4d:61:09:73:ac:b3:c5:21:d5:d8:46:
c8:5e:1a:ab:e6:b8:78:64:53:2f:a3:7d:5c:23:b2:
c4:c3:64:cf:d2:42:a1:7c:e1:13:24:ce:87:6b:49:
9b:ff:8f:28:8c:a1:e4:99:75:8c:f0:f2:af:76:8e:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:ED:EE:A4:33:4E:17:86:01:16:D4:7F:8C:38:B4:9F:67:5F:D6
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:57:4b:37:c0:43:4b:ba:b4:43:3e:fa:82:49:db:81:22:e1:
7f:f4:e5:af:e8:dc:cf:f0:1b:79:7d:b5:15:4b:05:56:69:fa:
5a:b8:b1:c2:fc:53:4a:5e:2b:b4:3b:c9:08:e4:4f:26:7f:6f:
89:7c:3e:c4:65:b8:de:7a:da:b5:2f:ab:85:21:fd:e4:3e:ae:
37:54:92:84:73:0d:99:c3:91:2f:d0:b2:57:9b:17:f1:e3:c8:
f5:b4:3a:c1:92:6f:b0:18:cd:c7:58:a3:e7:21:27:45:2e:30:
f6:c8:5c:e7:3e:f5:ef:ba:7c:6e:a0:d7:3d:4e:0c:ce:70:85:
de:c6:bd:13:82:f4:b0:ff:bc:6b:83:bc:64:7c:0b:85:13:69:
8d:95:ba:8e:29:ca:e2:24:77:3a:9b:63:5a:9c:53:ee:88:d0:
23:2f:e5:64:3f:6c:af:0a:6d:c4:2b:a3:62:54:38:a2:77:9e:
92:81:76:86:4e:ab:a0:0a:4b:61:22:15:60:c7:08:84:09:40:
2a:96:33:35:d5:d5:e6:08:a3:a3:67:1d:f6:fb:37:57:8d:f7:
16:d7:f0:47:10:4d:f7:56:c8:15:38:87:39:ea:94:46:16:21:
bc:47:b3:73:a3:3a:c4:0f:c2:eb:43:4d:47:24:d2:cc:7b:02:
88:98:0b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uu5fFflMvelUtOWN84TrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx
OTQ0NzgwHhcNMjYwMzI5MDIwMTE0WhcNMjYwMzMwMDIwMTE0WjAzMTEwLwYDVQQD
EyhhZTI1ZWRlZWE0MzM0ZTE3ODYwMTE2ZDQ3ZjhjMzhiNDlmNjc1ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCVpCdtsnN0wtVTteVJtbXAZsC+Q
2clPALeYh2/j+vzDRXOze+6aySYzeJS5PW/rw3Qs8W0fvkNH4nePZtqjzldxioSE
7MnHEyngHEBzO5GdUYrMf4K+362w9jtqvZtZsSYLc0ezTjxXWESSjEHGO8dUuhpK
hCwEUHZPcO2SYmyozxB9mij8w7O5JETeuU3LPNSnZZ1BFdFhoycrW7lLBWV56XUk
F7vFB5Dv8ry7eeBusWJwbShPtsBN4ZLifxla2JeD5W3fTWEJc6yzxSHV2EbIXhqr
5rh4ZFMvo31cI7LEw2TP0kKhfOETJM6Ha0mb/48ojKHkmXWM8PKvdo5vAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4l7e6kM04XhgEW1H+MOLSfZ1/WMB8GA1UdIwQY
MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt
MTkwYTVjOGQ5ZDk1LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1
LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFdLN8BD
S7q0Qz76gknbgSLhf/Tlr+jcz/AbeX21FUsFVmn6WrixwvxTSl4rtDvJCORPJn9v
iXw+xGW43nratS+rhSH95D6uN1SShHMNmcORL9CyV5sX8ePI9bQ6wZJvsBjNx1ij
5yEnRS4w9shc5z7177p8bqDXPU4MznCF3sa9E4L0sP+8a4O8ZHwLhRNpjZW6jinK
4iR3OptjWpxT7ojQIy/lZD9srwptxCujYlQ4oneekoF2hk6roApLYSIVYMcIhAlA
KpYzNdXV5gijo2cd9vs3V433FtfwRxBN91bIFTiHOeqURhYhvEezc6M6xA/C60NN
RyTSzHsCiJgLRg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client