Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: mmrWoKUQ+QdpuDz1CaAFqEbRBBgbZqxHqEYJwm62mKw=
Subject key identifier: D7:7A:7F:45:CE:E5:92:BB:60:EB:F8:CF:1F:7E:1F:DA:0F:56:0B:AD
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019D38D3BA86B092AF9D225077B9ADD81E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 17F4
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: HdqGeJaEHIIOGidEfUQbYKxZrGM.roa (hash: 3Kt5L7WEjQ8tJGELhy3NdQWPHa66vAzIxlcJB4RUAnY=)
2: RPK9lofx2vpfDz3fVaT_lQtdT8k.roa (hash: c8dHr4W3wR+aiojlJOFNLRKnfR/Yoz1DHFKCuyaqE0M=)
3: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: jwKOlLP0+tXwiKxYFQx0kF9kR6801knQCa7zXwxk71Q=)
4: mP8W7TMyviTbTSoXDcPVC4ui5L4.roa (hash: 6juiOWCmEUWksztqfKv/1hmW4YE+zbFyyfjzUEd04ug=)
5: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (hash: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ba:86:b0:92:af:9d:22:50:77:b9:ad:d8:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=d77a7f45cee592bb60ebf8cf1f7e1fda0f560bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:90:6b:cf:6e:19:72:93:90:a9:af:2c:67:
9c:fe:c7:13:48:cd:9c:1f:74:1b:c1:35:20:57:57:
e7:f5:fe:a1:e5:1d:ae:c5:47:72:aa:fb:23:a7:92:
9a:24:ee:d5:79:b1:56:e5:86:b6:71:8d:de:44:a7:
13:5e:c5:be:db:27:a1:d5:9b:b2:2e:57:8c:06:73:
b0:fb:a6:0f:dd:4e:2a:26:10:40:db:7e:1a:12:07:
ae:b3:70:45:da:a5:4d:95:74:ea:d5:50:70:29:81:
0f:80:dc:10:3f:9a:0b:15:29:62:22:7b:48:c6:04:
8a:c8:1c:c5:eb:76:f2:72:13:1e:2c:58:c8:a3:f3:
cb:85:2a:85:09:37:7d:0b:43:e9:f3:15:ec:a6:26:
ad:7c:6c:0e:c8:11:a1:28:27:d0:bc:19:87:c5:05:
0a:98:75:94:21:a2:3c:e4:db:2b:a9:2f:43:75:6a:
a8:8d:3f:1b:7a:a2:48:3c:03:49:b8:f1:60:82:dc:
32:25:d7:72:d6:6d:22:fa:29:e6:65:0e:17:59:b7:
1f:6c:a7:56:e6:24:dc:16:32:56:82:5d:22:05:67:
6f:48:ba:a3:2a:e5:36:c4:96:08:0c:d4:4e:61:ed:
30:73:1d:99:39:39:59:c1:32:a0:25:48:ec:53:1d:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7A:7F:45:CE:E5:92:BB:60:EB:F8:CF:1F:7E:1F:DA:0F:56:0B:AD
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:bb:97:ab:d5:14:8d:c8:d8:bc:6c:e6:bc:0b:81:3d:55:16:
9e:60:fb:1d:92:3a:2e:74:67:59:c0:da:75:52:d2:12:69:35:
ae:9f:8f:ac:b0:02:61:84:68:e6:f0:ce:8c:90:07:b8:f1:cc:
d4:41:50:47:57:98:fd:4f:91:26:c3:48:03:72:96:d0:05:09:
ac:6b:8e:41:33:e3:5f:b0:d3:12:d3:db:3f:6e:bb:d3:44:7f:
f1:b3:65:94:ab:0b:f7:e4:ba:52:b5:b4:5c:4c:76:de:c0:a4:
df:36:62:bc:c5:1d:ce:8f:88:bf:d1:be:3f:04:ad:10:2a:4a:
45:4c:fb:ca:4f:8e:52:6b:a0:b7:5e:aa:81:1a:1a:eb:99:7b:
97:7f:4d:c5:fe:82:e6:9c:b5:9a:ad:cd:09:08:37:48:2a:0e:
eb:1b:17:90:ff:29:b1:2d:e6:89:e6:fd:b2:ed:00:45:b3:ee:
ba:f6:fd:d9:40:be:a3:f7:2c:b4:21:1b:01:1f:35:e7:47:05:
30:ec:ef:d1:4b:77:78:5b:77:02:05:dd:14:ca:45:26:d9:9d:
f5:2b:d2:69:e1:9b:a8:d8:6c:76:5a:35:e3:5a:b1:99:bd:93:
f4:45:ce:68:50:9d:df:18:7c:26:e4:d6:cb:80:c4:74:f4:99:
ae:7d:56:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407qGsJKvnSJQd7mt2B5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2
OTQ4NjAwHhcNMjYwMzI5MDkwMTMzWhcNMjYwMzMwMDkwMTMzWjAzMTEwLwYDVQQD
EyhkNzdhN2Y0NWNlZTU5MmJiNjBlYmY4Y2YxZjdlMWZkYTBmNTYwYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCOQa89uGXKTkKmvLGec/scTSM2c
H3QbwTUgV1fn9f6h5R2uxUdyqvsjp5KaJO7VebFW5Ya2cY3eRKcTXsW+2yeh1Zuy
LleMBnOw+6YP3U4qJhBA234aEgeus3BF2qVNlXTq1VBwKYEPgNwQP5oLFSliIntI
xgSKyBzF63bychMeLFjIo/PLhSqFCTd9C0Pp8xXspiatfGwOyBGhKCfQvBmHxQUK
mHWUIaI85NsrqS9DdWqojT8beqJIPANJuPFggtwyJddy1m0i+inmZQ4XWbcfbKdW
5iTcFjJWgl0iBWdvSLqjKuU2xJYIDNROYe0wcx2ZOTlZwTKgJUjsUx2cEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd6f0XO5ZK7YOv4zx9+H9oPVgutMB8GA1UdIwQY
MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct
NzhlOTk3ODY5OTUyLzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy
LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLuXq9UU
jcjYvGzmvAuBPVUWnmD7HZI6LnRnWcDadVLSEmk1rp+PrLACYYRo5vDOjJAHuPHM
1EFQR1eY/U+RJsNIA3KW0AUJrGuOQTPjX7DTEtPbP26700R/8bNllKsL9+S6UrW0
XEx23sCk3zZivMUdzo+Iv9G+PwStECpKRUz7yk+OUmugt16qgRoa65l7l39Nxf6C
5py1mq3NCQg3SCoO6xsXkP8psS3mieb9su0ARbPuuvb92UC+o/cstCEbAR8150cF
MOzv0Ut3eFt3AgXdFMpFJtmd9SvSaeGbqNhsdlo141qxmb2T9EXOaFCd3xh8JuTW
y4DEdPSZrn1WmA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:41 2026 by rpki-client