Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: pEBqhViXnyFZhAFV6EsCqbN1Ex/J1IyKOUTCTr9WWzw=
Subject key identifier: 3D:24:77:45:5A:F5:75:EA:7B:06:CC:45:F8:25:EE:64:7E:44:9A:69
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 019D39416869E2F6E355FB79AC020400FD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: 9srV/fzzrzDLYtShhGfVmJVqUVrCzYKjh+Wx5Ys25R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:68:69:e2:f6:e3:55:fb:79:ac:02:04:00:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=3d2477455af575ea7b06cc45f825ee647e449a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:94:6c:62:5c:28:40:3b:7d:33:3d:90:84:
8d:90:17:07:1d:25:b6:61:27:d5:da:bd:1a:01:3d:
65:52:e7:b4:fd:5b:54:34:26:6c:c0:fc:6d:98:bb:
dd:c8:11:54:42:86:09:c6:af:5b:f8:40:2a:2e:1f:
cc:ff:77:a5:be:af:5a:37:30:1d:8d:cd:79:34:d0:
04:26:6a:f5:fa:ad:e4:13:01:ef:44:1e:78:44:96:
23:8d:f7:50:5a:e1:83:39:75:4f:49:60:fa:0b:a1:
84:06:6e:1b:d4:a8:73:3b:47:a8:db:6b:76:73:1e:
a8:40:63:86:28:5f:94:45:b8:06:eb:89:c2:a4:1f:
a0:46:4f:06:b3:6c:02:0a:aa:23:ec:82:fa:4a:25:
f3:c0:9a:6b:38:de:c5:e6:c1:bb:99:57:5e:1b:5a:
f5:84:d5:c7:ff:e1:96:e3:7d:99:80:eb:eb:99:7b:
8f:c4:43:9d:ed:98:17:66:49:86:51:26:cf:59:0c:
8f:df:97:d2:06:6c:00:f5:08:09:ec:1a:d7:6a:d7:
c3:19:36:c5:ff:9a:96:dc:f8:be:4e:15:6a:8f:e0:
26:39:30:de:e0:29:95:bb:0d:76:0d:73:ca:b9:b1:
87:fd:99:ea:0f:87:22:6e:b1:c6:48:0d:99:dd:de:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:77:45:5A:F5:75:EA:7B:06:CC:45:F8:25:EE:64:7E:44:9A:69
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:77:75:7f:f3:28:50:73:c1:13:78:99:b6:68:73:e1:80:73:
92:31:77:13:cf:22:c9:ec:41:11:54:56:70:5c:d2:cd:d2:07:
7a:df:c0:e0:d3:92:fa:46:56:c7:10:14:54:cd:dd:2a:87:6a:
a3:1c:a9:3f:b3:74:e8:1f:d2:30:a8:ae:35:bf:47:5d:d1:7d:
3e:ac:06:9b:a1:cc:7c:10:e7:c1:6a:8c:1d:31:89:82:f5:58:
1a:e7:aa:2e:34:da:b7:2a:55:cf:75:90:da:26:f6:5e:f8:2e:
fe:01:a2:af:eb:43:4d:c6:f5:0d:b7:f9:4b:4b:94:77:dd:3a:
2f:54:3d:60:0d:3c:84:2c:c3:62:8e:63:89:ed:0a:dc:d1:5a:
1f:63:8d:2f:50:52:66:3a:a3:f2:24:70:92:83:9f:a4:52:b2:
50:1c:5b:e3:54:fd:1b:b2:81:30:7f:3b:77:36:b2:3c:78:08:
35:ed:fd:cc:d7:71:d5:05:4b:a5:ca:90:8d:88:81:68:9a:28:
c0:f9:17:15:1e:6e:51:4e:80:f4:2b:2d:da:09:11:8f:bc:b2:
d1:67:ed:f6:93:05:39:de:10:b7:6b:ba:21:ac:94:f0:5f:7f:
12:05:cb:5a:bf:a4:e5:32:c8:1e:0c:5e:12:8d:af:47:96:80:
80:7b:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:03 2026 by rpki-client