Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: NaBAVZuRkb8uqvRz8YWKQ4PjhDdgLF1yo+m3yf8AHIc=
Subject key identifier: 43:42:DB:4E:DB:4A:E8:64:89:D6:6A:FC:3F:F3:0F:6B:E0:BF:11:D8
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 019D37BFF930F6692828CA135AFB49CD8096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 16D4
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: OkgTxQN/qdLB0FJ+1ayj9L06KP2q48ShwE9WnZw7Sqo=)
2: olOKcJA3lY2C5AHAA9EvwRDOMTk.roa (hash: 2fXZ6uCGSZ0urqxK7sMB+s4D2FSNMW1R9BEHHUDguZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f9:30:f6:69:28:28:ca:13:5a:fb:49:cd:80:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=4342db4edb4ae86489d66afc3ff30f6be0bf11d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:9e:0a:1e:50:0c:6b:1b:25:7e:51:92:e8:
7f:a9:66:a5:c1:2e:61:be:f6:a6:ce:21:9d:38:a2:
71:09:2c:99:ed:39:f0:e7:31:cf:33:b6:63:02:4b:
5b:9a:a7:c7:7b:6e:6a:3a:21:ae:de:2e:3f:bb:02:
94:8d:7f:ca:2b:2c:71:46:a5:78:66:8c:58:7a:80:
ce:fe:e4:b1:e9:57:e1:e1:7f:22:39:17:fe:80:52:
d0:47:aa:42:ec:80:63:c8:31:49:ec:bf:b7:33:02:
81:90:3f:cd:e9:70:76:a7:2a:56:3c:93:71:b6:71:
1d:69:be:04:fc:e4:c5:38:17:75:86:f6:b0:f0:34:
85:d3:d3:1b:31:e6:73:9b:f5:5b:61:11:b1:d1:21:
0c:26:07:2c:5a:ca:e8:bc:25:7d:e0:c2:02:02:0d:
54:f1:03:4c:50:0a:89:d9:87:09:0f:04:7b:4e:5c:
38:56:b2:b4:f0:d9:b0:5b:de:51:aa:1c:e3:6c:2d:
7f:cb:c7:9e:9b:07:48:8d:45:7d:97:29:54:b0:b3:
99:f9:08:22:b8:28:11:f7:4c:40:35:f3:87:a6:b9:
81:8e:c7:7b:cb:2a:41:08:b6:49:7b:33:e3:a6:27:
44:17:b3:4a:1c:76:73:a1:d5:0b:45:c4:1b:29:a7:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:DB:4E:DB:4A:E8:64:89:D6:6A:FC:3F:F3:0F:6B:E0:BF:11:D8
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:80:cd:d1:de:1c:dc:34:30:87:5a:94:47:54:e0:f5:90:c4:
71:65:63:5d:17:4d:14:76:94:aa:f6:4e:46:e1:1f:c1:50:99:
ec:09:ad:4a:f9:e4:df:f4:fc:5b:5f:16:16:ed:87:47:da:9b:
42:59:3d:19:48:93:78:8f:f7:50:b9:f4:e9:37:c1:54:48:09:
c9:45:a7:79:8d:d8:2a:a9:9b:89:5d:d2:7f:5a:b6:14:49:fa:
59:f4:69:39:9b:68:cc:98:5b:33:37:e7:11:16:db:06:ea:0a:
df:cb:a2:4a:c9:39:21:0c:34:18:62:3c:a7:4e:05:4f:dd:5b:
01:4b:5f:ef:17:c8:6e:7b:0b:5e:63:6a:ad:7f:00:62:e0:23:
d2:6e:17:d9:57:4f:18:ee:81:44:3f:d1:f6:b0:ab:72:d4:97:
c6:47:72:e0:2e:05:a2:ac:b1:d1:49:db:ed:02:ab:a3:7b:a9:
10:32:33:61:9f:c0:ee:46:b8:ea:76:71:47:13:8d:00:fb:18:
47:e9:20:04:82:13:19:04:61:18:65:d5:a2:f9:b3:d8:4c:f7:
c4:64:5b:3b:c7:2e:1f:59:ee:05:e1:6d:c4:b5:97:94:e5:04:
36:ac:18:fe:1e:f8:47:50:a6:7b:67:10:95:5f:53:ad:4b:cf:
f3:73:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:52 2026 by rpki-client