Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier: JpJnfvIUW9FvqnrXAd1CGDMpfZZtvrKQ/yot+HAPm1Q=
Subject key identifier: 11:DA:73:EA:0A:7C:AC:7A:83:2A:1A:16:04:30:A0:B4:D2:EB:2D:A1
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 019D3A1CE721A10267E7673250D8CBABF581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number: 08E8
Signing time: Sun 29 Mar 2026 15:01:05 +0000
Manifest this update: Sun 29 Mar 2026 15:01:05 +0000
Manifest next update: Mon 30 Mar 2026 15:01:05 +0000
Files and hashes: 1: Sa_vDBEAm82qmKkKwf2aI8quPD8.roa (hash: qBNhicMBIUuHH+gEIMRgRVoASaPTsbzdmeqUpjYn+jQ=)
2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: 5GMwdJ97z7zPwerqj0jaotSrHN6TVJDafWW6SiBKrGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e7:21:a1:02:67:e7:67:32:50:d8:cb:ab:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Mar 29 15:01:05 2026 GMT
Not After : Mar 30 15:01:05 2026 GMT
Subject: CN=11da73ea0a7cac7a832a1a160430a0b4d2eb2da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:5a:19:23:a6:ae:4e:78:ac:18:e9:ec:d8:
c0:d6:b5:07:39:22:57:13:c3:9e:34:9f:0c:2b:ad:
ea:6c:65:e7:6c:6d:d7:f7:b3:80:f7:a7:20:64:44:
36:d7:c1:98:a1:d3:64:c8:a0:59:64:13:ed:b9:8a:
69:95:2a:80:94:61:bc:cd:28:87:32:70:74:4c:bb:
b0:c2:54:ea:50:72:f9:e0:38:c7:97:b0:2e:5b:0f:
6a:88:17:eb:02:8f:06:30:5b:5f:74:4a:9f:b1:d4:
ba:11:0d:f6:97:80:8e:7f:6d:3b:76:53:72:54:12:
fb:6c:97:04:25:da:af:cc:76:fb:44:65:26:64:15:
ba:81:ff:19:d0:ba:10:21:95:d6:09:77:3b:1b:48:
ce:9d:68:39:62:fd:6f:ee:48:ae:29:88:d6:ab:5f:
6c:4b:ed:ab:81:d5:95:1f:83:de:28:cc:7c:e6:63:
95:5d:0d:c2:24:c5:41:25:1c:97:b8:ac:3b:b7:63:
65:d5:29:8b:3d:6d:8b:4a:7b:77:57:30:32:34:e2:
35:b5:45:bf:67:c5:82:d1:b2:5c:ea:64:53:19:fe:
e5:7e:b2:04:f1:d7:9e:3c:82:6f:27:a5:72:00:29:
94:09:67:76:c2:18:b5:e4:ce:e1:d4:a3:31:30:a4:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:73:EA:0A:7C:AC:7A:83:2A:1A:16:04:30:A0:B4:D2:EB:2D:A1
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1d:9c:5f:55:9e:fe:06:00:e3:cf:a9:36:23:55:a4:c5:24:
c6:58:a3:83:55:4a:e9:0b:93:a7:1b:62:d0:d4:1f:7e:b6:78:
4a:71:c8:86:8d:83:de:ee:43:1b:7b:98:c9:3c:0e:2b:d8:b5:
3a:fc:ac:06:2a:b0:e4:8e:4c:5d:25:27:a7:e5:9b:d9:90:dc:
a5:bf:ac:47:e6:3c:02:ca:a7:86:14:b7:32:cb:d6:a1:cc:b2:
0f:d6:16:ac:36:a4:4a:05:86:f1:9b:ad:50:3e:ae:5a:85:11:
b8:b1:ad:0d:c8:7b:fc:a5:60:70:a4:f1:56:99:14:e9:c7:e5:
f3:ed:03:ae:18:1f:fc:12:fd:52:0e:de:16:30:d1:dc:16:38:
87:78:39:ff:ec:bc:d5:bf:0c:c4:5a:56:4a:d6:f1:8c:0a:06:
44:97:f1:f6:03:5c:b4:e5:cb:dd:6c:09:21:cc:d0:eb:d3:6a:
c5:0d:a1:c8:b3:c1:8b:1c:6d:3b:75:b4:67:9e:b1:0b:77:ff:
bc:87:42:49:75:5e:f9:bb:c4:30:db:d4:2a:7c:dd:6a:89:f4:
1e:8b:0c:44:39:af:35:0e:f0:b9:b8:ee:9d:7b:9b:06:59:77:
c8:e1:dc:cf:cf:64:9d:7c:7d:f1:88:60:e4:7d:78:64:82:2d:
5a:b7:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:12 2026 by rpki-client