Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: XoaEhdAGzIsky2NzZbj8JPbdHuHuDrsch3olg7ALPiE=
Subject key identifier: 05:9C:DF:40:18:A2:AC:FE:69:57:E1:02:69:75:D3:3E:3A:CE:46:D2
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019D39098DA543163D430C1BFFF4332F6798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0788
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: 8YLE7k++3iU/PS01oObw2OyGKvDvVJcJEV0V8ciVtiw=)
2: qnaI3dSUo6JkKXowYAsIMeMpnOc.roa (hash: dUT0p+f2BUwnddx9s697e9AmQEvx5OAEb+TGVaVGOZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8d:a5:43:16:3d:43:0c:1b:ff:f4:33:2f:67:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=059cdf4018a2acfe6957e1026975d33e3ace46d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:c7:f4:40:ca:95:b2:63:94:5a:23:ab:9b:
2f:c6:7d:73:93:6d:78:93:1d:df:71:a8:5b:bc:00:
96:43:05:ef:44:cd:ae:7d:d2:fc:e7:05:cf:94:0d:
02:25:a6:85:b9:57:c1:16:b2:6a:cd:13:bf:7d:5e:
e9:14:ab:2a:53:40:59:f9:90:03:86:0e:52:c1:b1:
04:e6:57:26:a2:68:51:4f:bc:56:c0:ed:9b:50:e9:
cd:02:5d:fc:1e:f7:a7:00:d2:04:bd:2c:23:3e:46:
9f:0e:82:97:24:7a:89:a2:0c:11:23:d0:bb:e3:13:
ee:3b:0d:7d:47:51:b6:56:13:05:d8:5d:fa:c1:b4:
99:a2:5a:06:fa:5a:ed:3d:db:9f:ec:68:29:81:12:
f2:ca:d3:ab:39:77:20:6c:31:f5:15:f7:bf:23:72:
1d:ce:0c:9d:89:39:9a:03:7a:4d:b8:27:1a:7f:02:
2e:50:35:0b:d3:c6:fb:11:32:b6:2f:b7:d6:a2:e9:
db:46:1f:8f:8a:c3:a3:34:a4:a3:36:fc:a7:ab:5d:
4b:63:ad:02:fb:7f:2b:0a:dc:fd:b5:41:8f:93:62:
e7:4a:f8:af:9d:72:0a:83:bc:3d:0b:d5:eb:ce:f9:
89:25:53:ff:45:a0:f6:0e:94:47:42:e0:4f:87:37:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:DF:40:18:A2:AC:FE:69:57:E1:02:69:75:D3:3E:3A:CE:46:D2
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:57:f4:f0:7c:0c:5f:11:54:a3:2e:94:92:73:4a:bd:8a:
74:3c:da:de:f9:43:c2:a3:99:9e:83:59:9d:78:44:53:ad:77:
7a:67:9e:56:fa:cf:83:18:6d:f4:0e:c8:43:31:5c:37:0f:cb:
74:f9:3c:99:d0:db:82:9b:73:d3:f9:26:9e:fe:96:1f:da:63:
61:11:04:33:f3:bb:26:28:8c:b6:57:0a:4b:36:52:e3:a2:f7:
05:08:6c:67:50:32:14:b7:bc:79:5d:be:c7:d3:67:d8:e3:91:
97:18:26:a0:8b:38:ff:0c:ac:cd:94:4b:74:ad:74:6f:ac:0b:
78:67:a1:5d:2a:10:d6:ba:b9:83:34:bd:2c:41:12:a0:c5:da:
cd:a5:02:3a:80:77:cc:05:89:8f:6d:c9:6d:b6:18:ed:bf:fd:
b0:16:89:b6:c8:43:6f:4e:7a:c3:c6:95:be:d1:f2:78:04:0b:
ae:09:23:1e:1c:c4:0e:e9:32:3b:d9:d7:30:58:ea:ee:5c:54:
67:b7:d1:48:fb:a7:7f:a8:f6:6a:76:89:1a:b8:08:3a:32:b1:
2c:0d:9e:d7:b9:e9:a8:99:17:ca:05:49:26:8d:73:93:f7:af:
da:1d:49:4d:81:02:86:75:82:17:7d:0b:75:08:ac:a3:91:d4:
2b:0b:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:57 2026 by rpki-client