Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: xH6IX24PhdGJyIsOv4SOlVXClCm53LVfZ0rcQS1pbEo=
Subject key identifier: 67:93:5E:87:E3:7C:22:EA:2A:44:62:E1:32:2C:2F:4E:6F:E7:F4:92
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019D38D384AC1FBAA1570345530268851E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: K3l+L7lDQSjexbOqBWSZtzcolwosy57yih7qH9DyWOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:84:ac:1f:ba:a1:57:03:45:53:02:68:85:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=67935e87e37c22ea2a4462e1322c2f4e6fe7f492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:32:c1:31:ef:3c:e2:2f:a6:5c:81:6a:37:
63:17:a6:20:47:7c:bc:b3:ca:ec:d8:48:28:4d:b9:
5a:04:4f:79:0b:24:50:96:e0:34:f7:00:84:c4:96:
a8:fb:93:69:27:e3:5c:e8:8c:22:d4:aa:b4:82:48:
87:eb:5f:e4:d9:c8:54:c9:5a:55:08:00:bb:78:f9:
a4:0f:be:bb:b8:6d:86:1c:29:69:2e:d0:49:b1:30:
34:af:5f:a3:6c:b2:ad:95:dc:6a:a2:18:a7:72:03:
70:a0:c2:9c:64:2b:cb:63:19:c0:0e:41:d8:91:5e:
e1:fb:3c:a2:14:ea:3b:76:ff:f2:11:c7:a4:ef:01:
6e:56:02:21:f9:c1:43:0a:58:0c:a4:ae:9b:dc:27:
25:50:f4:75:6b:35:7e:04:45:19:f5:c6:d4:d7:52:
3d:24:71:5a:56:38:54:30:b8:8b:92:08:d6:7a:98:
41:e3:61:13:da:d0:cb:ef:c2:d9:f8:b4:80:4e:e2:
e5:35:49:ee:85:2f:ae:82:17:4a:0c:c7:d5:76:9e:
b7:55:97:61:54:e5:f2:2b:b3:00:c6:3d:c8:d3:80:
31:71:d2:3e:b5:ba:ac:ad:e4:da:30:b4:f6:bc:8d:
45:c6:06:f2:aa:8e:94:dc:3a:b1:7f:eb:ca:b7:a1:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:5E:87:E3:7C:22:EA:2A:44:62:E1:32:2C:2F:4E:6F:E7:F4:92
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fc:c4:4f:55:ef:f7:78:9c:d4:c3:61:21:c5:ba:9c:58:83:
d3:7a:2f:54:97:36:c7:dc:ec:36:a8:f4:13:29:68:ba:ed:74:
4a:08:41:cb:87:b4:1e:b9:5f:62:54:07:2a:bf:d9:94:0b:d0:
e6:f0:da:75:9e:98:dc:40:8c:f3:df:07:73:df:54:c2:5d:de:
4f:34:37:69:13:b6:9e:3f:12:3b:62:cb:24:9d:54:89:02:23:
22:75:a3:9d:7c:fb:21:c1:c9:0d:bd:44:de:33:f8:49:e4:49:
a8:a1:aa:17:52:94:da:ea:4a:74:d8:20:eb:75:0a:b5:f1:79:
f1:75:54:60:dc:a7:85:11:d7:1c:43:76:63:65:51:a5:b2:aa:
89:38:0c:36:ed:11:bf:94:28:93:b9:fa:fd:0b:30:0d:c1:fc:
bb:34:32:b9:de:b4:11:80:07:f4:94:e2:41:62:d8:0b:25:d2:
8c:48:3a:6b:e1:77:99:c9:fb:fb:b6:8b:0f:d6:63:8b:d5:ce:
16:ba:96:5c:d6:46:f2:df:fb:49:6b:18:77:60:6b:bf:8b:a4:
fd:71:a3:b3:3a:3a:27:28:a1:31:4f:ec:37:1f:7d:4b:bf:40:
ef:80:b2:2e:c5:d1:b5:c7:e2:c9:e8:91:28:0c:3b:b0:9f:88:
ef:6b:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:43 2026 by rpki-client