Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: To1JDuRe5hmY3TK8NAWAo1JMCF1yKjWisT6I30Ia3M4=
Subject key identifier: D5:C7:44:EE:A6:DE:74:77:6D:67:E3:23:8D:FE:7C:36:80:38:53:05
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019CE4EC49545FDC47608DBCD2F6C8D94689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 06BF
Signing time: Fri 13 Mar 2026 02:00:16 +0000
Manifest this update: Fri 13 Mar 2026 02:00:16 +0000
Manifest next update: Sat 14 Mar 2026 02:00:16 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: C5hQzC81lFcsMj0UQYpY1lQJoRsB6EvnZdTESGULyVI=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:49:54:5f:dc:47:60:8d:bc:d2:f6:c8:d9:46:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Mar 13 02:00:16 2026 GMT
Not After : Mar 14 02:00:16 2026 GMT
Subject: CN=d5c744eea6de74776d67e3238dfe7c3680385305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:f1:4f:30:aa:26:ad:9a:b3:b3:af:6b:cb:
7e:d8:7a:d2:de:35:38:32:d9:56:d6:38:d2:ee:d0:
c5:ed:d4:46:41:17:ea:d8:f4:b7:2c:da:3c:c2:80:
65:52:5a:33:7c:d4:2f:aa:fd:c4:d5:6b:12:dc:29:
93:1d:f9:1a:81:35:f7:88:00:fc:aa:33:49:e7:43:
f6:94:2e:c0:a4:8d:d0:02:82:3e:3c:46:d4:96:9c:
61:df:fa:94:15:69:a8:ce:16:bc:46:25:90:56:39:
d6:4a:4e:1e:73:88:15:e6:eb:63:47:46:a4:99:8d:
ae:bb:48:a9:2e:77:16:e8:14:e8:ba:5f:50:8d:98:
61:0a:c2:5b:b7:bd:75:39:01:d7:7e:c2:50:89:02:
8b:1f:09:7c:0b:25:f3:3f:20:5b:45:6a:3d:84:37:
e2:1b:69:45:89:89:81:db:46:82:1d:a7:4f:8d:46:
55:3d:9c:80:a0:91:7a:ed:64:3c:bf:e2:cb:8b:0a:
1c:cc:de:b8:44:b8:8e:9b:23:a0:51:7b:15:61:a0:
24:a2:25:d8:af:4d:c9:77:9b:77:ab:99:bc:5e:49:
07:92:53:5b:1f:6f:59:32:70:2a:20:07:5e:ea:77:
70:9d:e0:88:da:b9:4e:b4:e4:82:60:86:72:63:04:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:44:EE:A6:DE:74:77:6D:67:E3:23:8D:FE:7C:36:80:38:53:05
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:32:f0:19:13:a4:78:40:88:65:8e:69:5f:18:b4:9d:57:83:
33:31:20:e3:72:24:23:19:9c:1b:6f:10:0f:04:24:94:5a:5a:
5b:62:6e:11:d5:f1:09:94:fd:d6:3f:58:bb:07:e3:f0:71:19:
b7:ce:a9:78:ed:52:db:d8:eb:48:52:79:9f:50:25:ca:6f:5b:
01:93:e3:35:d7:14:d2:27:23:cd:b6:33:91:55:b3:14:12:84:
b2:e7:59:42:18:fc:3e:89:8d:fa:2c:e5:71:61:86:08:b4:11:
f0:21:5f:4d:82:e7:f1:92:f6:de:6c:0e:f0:f1:13:4f:f9:9f:
05:ac:3b:03:c0:03:80:58:8d:53:fd:81:01:1c:cd:66:9f:38:
4b:65:e1:29:5f:14:30:65:d3:9a:07:cc:cd:fe:5a:30:30:99:
14:a1:e8:b9:a9:6b:e9:fa:3f:c6:b7:42:da:59:5b:af:b9:05:
5e:13:af:da:29:7f:d2:c6:10:19:88:22:7c:4e:c2:45:ee:40:
e1:e7:b4:5c:86:e1:ec:99:27:83:b4:2f:9b:e8:d4:b4:72:41:
af:2e:e7:b1:41:15:24:74:1b:8a:e6:ad:8c:29:73:75:c9:88:
07:08:03:69:2a:04:48:1d:1a:20:b4:a8:6a:a9:37:24:18:91:
9a:84:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:12 2026 by rpki-client