Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: phc6cjwxJRLnpBvAFKYCbAz97ckI5O+SO2+Vry4S9uY=
Subject key identifier: 5E:D8:F2:4B:57:B4:47:8B:A0:AC:B7:38:11:87:C0:A4:49:02:2D:8B
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019D3752F0679C78FE5E6FEACCD9F41DA98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 089C
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: PymsuRY-XU_JjC-s7g8jov_R8Hc.roa (hash: eIduQ26VHE0PdG7zgjOYFtz0rV5pDOwOAUDByNGlGR4=)
2: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: yV812vDYzEgrYz0c4pulXvO2TjxuJWeQbYd3lK/Ehxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f0:67:9c:78:fe:5e:6f:ea:cc:d9:f4:1d:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=5ed8f24b57b4478ba0acb7381187c0a449022d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:d3:5f:66:ec:e2:cd:b4:93:ac:31:4b:11:
99:9e:4d:47:6d:64:ed:37:8b:30:4a:2e:0d:a2:b4:
87:63:f1:72:9b:72:56:b0:08:52:8b:2c:99:12:32:
07:e1:1c:49:07:d2:30:fe:84:47:9a:44:8c:20:f3:
7b:a4:7c:77:81:07:a4:4e:18:90:10:b8:5d:a9:23:
f2:75:0d:57:87:af:6f:b1:3c:5e:0b:d2:b7:a0:d6:
a0:d5:61:1d:48:2a:09:03:1f:22:d5:a8:f0:8e:97:
ca:bd:db:60:d8:9c:be:2a:a8:c7:c4:4d:f7:fc:20:
9d:02:b9:8e:d3:36:30:7b:18:9b:fe:ef:69:76:d3:
8a:47:59:a7:12:dd:52:bd:74:7e:39:69:88:54:19:
fe:f8:9b:df:10:18:84:d8:1a:81:fb:12:98:d1:03:
5a:d5:5d:a0:07:2a:48:b6:2c:18:23:12:30:de:a5:
96:64:fe:06:04:5f:6d:ce:c2:d4:03:c8:f0:79:30:
0e:d7:f3:e4:97:92:e8:18:7d:19:d9:9f:4a:3f:6f:
7e:28:e1:60:7f:6e:32:ef:d4:72:c7:a0:62:9a:56:
81:2b:26:cf:cb:d5:e7:a6:c4:8b:45:09:0e:b7:b9:
90:a4:10:25:7c:b4:78:3c:52:d6:e4:f5:59:54:b0:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:F2:4B:57:B4:47:8B:A0:AC:B7:38:11:87:C0:A4:49:02:2D:8B
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:84:b4:91:6b:0f:ed:1e:23:c0:51:1a:21:e6:bf:ed:e0:e9:
00:a8:0e:4b:bd:e3:09:37:46:2a:a7:4e:fd:9d:01:da:7e:b1:
7c:69:64:1c:e1:3a:df:5b:f5:f6:fa:a8:90:b1:ac:9d:e4:e4:
7b:07:50:33:15:bc:15:24:35:c7:0c:8d:af:b8:9b:96:5e:e5:
af:b2:3f:bd:8c:f7:f7:67:8e:8c:79:62:c8:1a:37:a6:e0:41:
ca:4c:fb:c7:70:a2:3d:3a:22:63:0f:40:5b:c5:38:f7:f0:e0:
64:a0:25:c3:0e:1a:bd:88:64:5a:38:b9:d2:70:1b:72:cb:e5:
4c:36:ce:ee:73:bc:ef:43:e3:ca:56:ee:9d:d1:c5:e8:ec:f6:
f2:9b:cc:ef:4c:44:24:ff:68:85:04:3b:3b:0f:9d:94:c8:26:
cb:bf:93:ab:92:0b:2a:e4:ac:33:cb:4b:0b:c4:58:c1:d2:1e:
46:b6:00:25:90:aa:99:a2:7c:b6:44:22:3e:e1:1c:36:2a:2a:
4c:dd:d1:53:58:6e:1c:63:84:84:25:19:11:ed:7b:06:5c:30:
e9:d1:71:02:38:9d:25:d5:25:c4:5f:4b:fd:90:42:2b:07:94:
18:a0:67:32:e0:83:6b:71:0c:51:21:58:bc:41:09:02:0c:cb:
a5:41:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:27 2026 by rpki-client