Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: PWwihHbPcoAQVN49U9Ltu3TuKaffixYeMpZ5E9iKFbM=
Subject key identifier: 63:90:84:B4:34:C2:98:C8:81:3F:39:24:E3:A3:5F:19:A4:2E:9A:02
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019D38D36EC2C6B08834A1B5405477A590BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: t6C1wyPGszWnubuXrTfONmqwIrmtfwxP/Sa7JNtVE0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6e:c2:c6:b0:88:34:a1:b5:40:54:77:a5:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=639084b434c298c8813f3924e3a35f19a42e9a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:31:a8:94:34:2d:f4:38:61:c0:ce:14:f7:
29:8b:dc:1c:2b:a7:ac:c9:68:b3:c7:53:10:3e:b3:
af:89:36:c7:1a:1c:43:0d:f3:e8:79:e1:a0:ce:1a:
36:49:78:89:43:07:5e:af:40:83:d2:11:c4:82:fa:
42:cd:de:13:bb:45:6b:60:19:d9:da:e3:51:d2:03:
f0:1d:75:d8:8b:ae:81:86:44:f2:1a:1a:df:00:9c:
1e:c4:ab:12:5b:5b:1f:1e:7c:58:a8:6a:72:75:4e:
9e:f1:8b:04:7a:e2:01:c6:fe:d6:0b:27:45:46:6d:
05:f4:94:37:79:0c:96:99:99:a5:03:f6:28:9f:4a:
2b:6f:fd:ad:5c:cf:6a:05:f6:ef:be:06:f6:fc:bd:
76:17:5f:84:99:60:6e:6a:db:f3:4c:17:ef:a8:2b:
35:a7:05:7a:5c:2c:35:19:65:e2:d3:8e:c8:5b:1d:
83:bd:ca:27:07:f4:83:8a:95:1b:b3:aa:b4:87:d9:
23:e6:63:df:d0:2f:cb:00:87:e0:16:4d:e6:58:07:
69:28:62:16:f2:a4:75:ae:20:b2:4e:d2:b7:4e:5d:
38:ab:20:32:a9:fb:24:f8:a6:6d:d0:23:1b:fa:42:
68:f4:dd:82:0b:f0:04:d0:d1:d5:fb:d9:5a:58:63:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:84:B4:34:C2:98:C8:81:3F:39:24:E3:A3:5F:19:A4:2E:9A:02
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c2:c0:59:17:8c:10:55:2a:f7:ec:a9:28:98:cc:ba:5a:d7:
20:e7:e8:b5:ca:53:92:51:90:51:a8:ab:b9:8f:e4:66:90:66:
7c:78:4a:4c:ac:0c:9f:ba:16:5f:52:e9:ef:f4:e1:c3:de:e9:
47:d3:34:b7:83:84:44:fc:5d:7e:df:9c:cb:2f:e1:5b:e7:d6:
1f:44:95:a7:e8:02:29:98:8f:9d:6f:a3:c1:a5:16:36:13:8c:
d4:63:12:40:3e:57:a5:9a:5e:d5:99:78:40:4c:12:21:00:c8:
89:7f:51:a0:28:a6:b8:a4:56:2e:33:2f:7e:5e:72:d8:02:ec:
36:c7:15:84:44:0a:4b:87:e4:25:6d:4b:d3:f9:6f:a4:df:e2:
42:d1:25:55:25:a8:0d:74:55:28:98:c6:f6:2b:17:31:5f:a1:
eb:5d:c2:27:40:df:bc:c4:6d:26:b6:f7:45:a5:f5:4b:74:e0:
49:ad:ca:27:1d:67:28:4e:2b:42:de:32:3a:97:b6:8f:04:cd:
c0:e7:8f:5b:37:b0:a3:e3:a2:22:93:09:c1:1d:4e:b2:eb:68:
7b:d8:4a:3b:43:d8:4b:d8:0c:92:0a:8c:11:6b:99:d5:40:9c:
70:48:b9:c6:6b:db:1f:4e:b8:2f:f8:ad:27:25:cc:88:26:6a:
e9:33:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:36 2026 by rpki-client