Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: zjdonTi/U2XjwFJS4p8uXB0sQQmZIRT9fCHaITCW2CY=
Subject key identifier: 91:50:F5:FA:6B:23:2D:7C:D0:5E:6C:90:78:35:37:FB:0B:75:85:C2
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 019D3940FE7960BA546D9E6A93A33120D58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: C2qg2Q6lbBzdlBnvS6yqtgeY3uk.roa (hash: ijJYNodWqQV5uQq7Q5J14Dvs1Q1uxMUsTbwAGiSXPAc=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: v2oXCxe4ux7MT5lThlh8t2ZEsaZ9KQ14zcYGytHhvRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fe:79:60:ba:54:6d:9e:6a:93:a3:31:20:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=9150f5fa6b232d7cd05e6c90783537fb0b7585c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:93:e0:3c:2a:2a:e3:fd:16:c2:fe:7c:2d:
70:f9:c4:21:e7:17:70:aa:ad:f9:bc:2b:fa:fb:4c:
d9:68:cb:e8:78:92:83:97:c3:a0:59:5d:02:1b:0f:
0d:b7:91:2b:6f:a8:16:cb:52:8b:71:5c:cf:6d:09:
bd:42:4f:a2:62:fb:9b:40:05:1e:83:fe:1c:00:cf:
a6:e3:65:ce:14:94:4c:9b:86:b3:0c:71:94:10:df:
42:cb:60:90:d2:d3:87:1a:2b:01:98:fc:8c:f4:31:
b1:9b:53:71:3b:3c:da:87:a9:60:f0:ed:9b:16:c2:
25:58:e7:89:f3:6d:0d:75:74:18:f2:99:ac:74:ba:
0b:6b:dc:38:20:cb:31:cf:a9:fa:ec:4f:c6:e3:d3:
c8:4d:d0:4c:d7:01:05:46:0e:01:0c:0d:89:fc:4d:
05:a1:8c:2e:d1:37:52:8a:83:27:d8:c4:a2:fa:43:
e6:f5:0d:33:34:45:b7:25:ff:3a:2e:3b:79:ff:7e:
e4:c8:0b:d9:39:69:3a:65:15:cf:e7:f3:4f:6e:87:
e8:2e:b1:c6:c1:5d:5a:24:84:1d:11:69:ee:e5:bd:
2a:3e:a2:d4:d7:cd:e5:e6:1b:e4:e1:2f:16:e5:a3:
45:61:f8:17:0f:bd:32:c6:2e:f5:19:5c:d2:c3:a0:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:F5:FA:6B:23:2D:7C:D0:5E:6C:90:78:35:37:FB:0B:75:85:C2
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:36:a4:3a:8c:b1:0a:3b:53:b9:73:70:ed:d7:fe:00:6a:f4:
02:36:46:e6:18:ef:0f:88:e5:68:e6:6e:f8:3d:16:27:77:61:
87:18:28:78:c3:8c:eb:b1:be:14:a0:0c:e3:a4:12:7c:83:6c:
0f:5b:41:3e:90:f6:67:ab:52:0c:2a:5d:53:59:f4:f0:b1:42:
e7:f0:ce:db:52:22:dd:a2:bc:bb:26:c1:a7:13:a5:a9:a3:ee:
6b:fc:42:64:09:56:7c:ef:fa:19:18:0c:81:d1:93:4e:a0:d3:
5c:92:88:ff:e9:b4:0a:66:ea:a1:65:fb:42:a6:c2:3c:ed:36:
da:cf:11:8e:0d:f2:e3:59:a5:05:73:4b:91:d4:35:21:9e:56:
13:d8:ae:4b:aa:85:2a:1c:37:12:25:2c:6f:10:95:bd:c6:c8:
3f:53:38:70:f4:06:05:5e:1e:24:2e:16:3b:b8:f2:b4:6d:61:
82:f1:1e:db:7a:9f:53:9b:68:6c:ad:28:88:f9:9e:17:6b:14:
31:6c:ce:d4:1f:64:ed:b7:62:68:7d:08:db:30:0e:49:1d:ef:
d4:d1:a3:ad:58:31:dd:29:2a:76:41:12:d6:19:89:9a:00:69:
fe:fe:b3:7f:c6:db:21:2f:fd:23:0d:96:ed:2f:40:ed:8c:14:
f1:00:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:23 2026 by rpki-client