Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: eZVKZ1UADMuAu8+2hgy8ps0a8Elpr98bZNtjpnK27KM=
Subject key identifier: F5:B5:E9:DC:FF:38:5F:00:28:FD:DE:4B:D9:FB:B6:22:39:20:A0:66
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019D38D341830FEFFF83959D00E885570434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa (hash: ryTaJPSpPyp4HVacNx6TqyKRXMOPCVThkC5CxXFK++o=)
2: Yn86QLVAHpPgUIOHf9xuouUcLOQ.roa (hash: 6awOm1GCHlzhqt7HZ19OchKYQoEQ3dPq9ujImJdFJic=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: ifz05nFGfu0j7Z1aNYoAAL7jIsvcGujLblGGibt5/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:41:83:0f:ef:ff:83:95:9d:00:e8:85:57:04:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=f5b5e9dcff385f0028fdde4bd9fbb6223920a066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:be:54:66:51:21:4b:3f:7b:ae:ee:d9:cd:
25:06:df:a3:10:a1:9a:14:4a:86:b1:1c:2b:e8:dd:
cf:0f:ef:fc:6d:11:45:69:74:dd:45:5c:61:b8:27:
a3:e9:5c:e2:74:12:c2:cc:79:d1:45:c6:54:5d:20:
16:f4:57:73:c7:a2:04:78:85:eb:5a:b8:33:10:2d:
7e:31:8e:eb:9c:39:26:43:28:d3:fe:a7:c7:b3:65:
a9:78:fb:72:27:30:9f:ad:c3:c9:93:7a:36:03:f9:
02:ac:b0:a6:ce:ed:cb:34:7f:78:ff:cf:72:4f:14:
3d:d1:cf:55:d8:87:6b:59:5c:a8:4c:b8:9d:33:0c:
4f:4c:2b:8a:4c:3d:26:28:ee:0c:b7:53:c3:4b:14:
dc:b0:4f:1e:33:d4:71:50:93:d3:a9:52:a4:26:36:
c3:05:b1:c6:bc:d1:1d:c7:46:52:c1:ea:f8:2f:85:
29:5f:1b:ba:7f:b7:ea:45:6f:4b:53:0b:1e:e4:41:
ad:45:e0:12:33:1b:a6:7d:f2:01:85:d5:92:75:d9:
3f:b5:4b:22:bc:db:5c:d2:9b:ca:53:23:b2:ce:8e:
fd:08:3f:db:e8:af:18:29:06:91:74:9f:f5:ed:0c:
ac:0a:9d:36:76:f8:78:05:20:07:08:3d:d4:af:3a:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:E9:DC:FF:38:5F:00:28:FD:DE:4B:D9:FB:B6:22:39:20:A0:66
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:48:53:b4:c8:45:d5:c1:a0:73:f6:d8:34:8b:b5:f6:32:
25:1f:e5:fe:67:20:87:d5:f4:59:b0:37:60:8e:be:d6:4b:9f:
8c:9f:1f:f9:dc:59:da:c7:58:bd:39:d8:2e:c6:b6:4d:ae:01:
9a:c9:b7:e9:ac:42:4f:94:9b:28:7b:8d:d5:52:65:4d:5c:75:
84:04:bc:94:5b:5e:c4:8a:38:f2:8b:ed:d4:4a:2f:58:94:e6:
b4:f4:68:ab:b1:27:2f:1a:31:d4:14:12:09:a7:e4:8f:72:61:
25:8e:db:b1:99:9a:12:54:34:4b:81:3c:c0:55:9f:53:3f:0b:
57:10:3d:f3:87:bc:e2:e5:e3:a7:f4:52:59:41:15:c6:60:58:
f6:cb:bb:0d:aa:b3:3c:14:71:33:15:0f:de:79:89:f5:52:8b:
3d:fc:17:8f:c0:6f:de:e8:a8:51:28:52:28:4d:f3:c7:eb:b5:
51:33:bc:a4:f5:68:90:72:98:93:ea:80:a3:53:d7:7a:cc:00:
ae:92:77:27:d7:57:3e:b7:20:62:2a:5e:91:f0:bc:fd:6e:4a:
cb:b1:92:88:3a:76:9d:af:cb:9d:95:62:66:79:d1:ca:ce:dc:
3a:b1:15:43:e6:24:bc:9c:af:4d:6d:6d:ec:e9:ba:3d:fc:d1:
de:a1:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:44 2026 by rpki-client