Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: X7rcCaW4N3nYF+jRYh5hE5lMIok0cwzdSTp/H4kiD/s=
Subject key identifier: 10:B7:C0:A3:01:8F:AD:48:52:4F:2A:06:F6:54:E1:D9:30:E5:53:67
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 019D389C56234B3BDE3CA3EA2E1903BF72B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: 1-OfIae6Kl9oBeMGdITJqUQ0rkzg.roa (hash: 3jq+3AfO5RV/qAlphvq2sROrJnEhMWokYdHjHRQXSo0=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: MkLclfU3qwfHg2gFNoTRh4ti2JN2ofg4BNB7ip81SRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:56:23:4b:3b:de:3c:a3:ea:2e:19:03:bf:72:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=10b7c0a3018fad48524f2a06f654e1d930e55367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:3a:34:6c:c0:c7:40:bb:dd:d1:0e:0a:d0:
01:ed:7f:b6:76:4b:ad:e2:02:73:f8:ce:ab:ff:37:
8c:93:df:bf:87:b3:37:bf:f5:59:cd:e9:eb:6d:a2:
58:9c:cc:35:9e:63:5e:c9:e2:b6:25:60:9b:4d:15:
27:a4:14:1f:f0:d0:55:67:9e:56:00:c0:d0:7d:de:
b7:cd:56:75:7a:ec:a2:5b:33:25:81:96:c4:5f:ea:
2d:7e:9d:e6:00:49:d8:fa:bd:ca:94:47:5d:6a:6c:
8e:c7:bd:af:13:37:77:72:89:5a:bd:ec:07:13:4b:
6c:3e:25:26:fa:48:d1:82:14:d4:6c:48:43:fb:99:
ad:7b:f4:26:78:b7:c5:4f:be:bc:b2:20:77:10:33:
3b:f7:e3:f4:4e:2e:59:b1:c1:8f:e2:42:4e:79:be:
e3:bb:ed:79:4b:09:2a:b9:e5:c5:f8:66:ef:91:f7:
f5:0a:13:12:7a:7b:b6:0c:37:38:04:83:e7:0c:02:
72:c7:18:15:fe:5d:08:2e:6f:f9:1d:0d:c0:45:7f:
55:98:ae:4f:38:a3:bb:ae:60:25:09:2b:ca:77:4b:
d5:68:0a:d8:0d:29:44:c2:70:df:ca:20:4c:6a:6e:
ec:9d:3e:3a:73:a0:92:16:8d:df:a2:e9:78:31:ae:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:C0:A3:01:8F:AD:48:52:4F:2A:06:F6:54:E1:D9:30:E5:53:67
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:aa:83:47:15:83:51:33:0c:e4:3e:21:4a:05:e3:3b:10:
4c:62:c3:21:c9:ec:87:9e:d4:ec:f3:a9:b1:b2:9a:b6:87:d4:
9f:74:37:9d:17:21:18:73:41:a3:d3:75:85:fb:5b:b5:39:cd:
df:89:7d:4f:03:b1:bd:db:85:4e:59:c2:8c:1e:4c:77:a3:a2:
6b:ca:c9:00:6f:2f:72:c4:ec:3c:64:d6:dc:fe:80:82:c6:83:
a2:2f:36:a1:51:68:c7:9c:22:7c:b0:87:ee:45:b0:34:de:e4:
b1:1e:cc:36:8c:4b:9b:e6:95:84:c6:5a:73:f4:49:c6:ec:78:
5e:31:ee:ea:b6:be:9f:a2:db:c5:b2:8e:77:20:c5:b0:a6:7e:
d8:e0:67:47:9a:55:24:a0:66:ae:ab:1a:9b:a6:61:a3:6e:34:
db:6a:ea:95:85:28:99:1f:ec:34:ed:e1:c7:95:ea:7e:3c:1c:
f5:73:ed:d2:09:75:ec:63:62:80:21:08:14:6c:04:f4:81:ee:
c0:9f:59:60:5a:b3:5b:e8:7d:07:6d:0f:b0:0b:78:72:59:33:
a8:56:2c:7c:c1:d3:56:7a:00:f0:9a:2b:8c:3d:b6:8f:d0:70:
fc:0e:35:f5:64:58:52:57:e7:f7:36:1c:33:b7:67:b6:ea:a3:
f7:1a:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:54 2026 by rpki-client