Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: HePlS7HMY6rM0hNmViGBtiRgY5noylcmE+6yGVTxfps=
Subject key identifier: 3C:5D:E5:83:15:A8:DF:E7:C9:80:6A:D4:25:07:61:80:46:9B:13:49
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 019D37F7344BCBB115C645CB471CE70094EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: 1zuKpEnvrj2WApShJ8cCaZGO3Hr/tmhNaW5KbPJuUow=)
2: zZyI4xvkwJixdxg_pCLk7a1BUdw.roa (hash: zpCoEd9p2O+8DPIDxhP2gPNS4VcEBvo6F6BavOxBd5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:34:4b:cb:b1:15:c6:45:cb:47:1c:e7:00:94:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=3c5de58315a8dfe7c9806ad425076180469b1349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:62:13:0c:a8:42:c2:62:d1:6d:ca:d3:c5:
04:11:a9:e4:01:f2:78:de:2b:5c:50:45:cc:3f:74:
d2:7b:05:55:66:ff:67:33:eb:2d:bd:ac:46:ff:b8:
a5:0b:62:06:f4:e9:9e:aa:e5:57:79:e6:73:1a:68:
a9:d3:1c:02:42:06:bb:4d:ad:d6:28:93:f3:73:1b:
85:12:a4:d5:46:df:30:b8:6f:48:f9:78:3b:f0:54:
14:ea:db:8f:94:1f:f9:cf:09:dd:84:b5:ff:a9:c6:
bc:df:f2:97:e6:92:b4:d5:5d:7d:b6:77:f1:b9:8f:
2a:56:8f:8c:1e:9c:32:78:88:1f:7a:bf:39:9c:ac:
90:d9:20:a6:bc:98:f8:a8:57:ff:41:87:3c:31:2b:
97:1d:27:6e:d3:9d:52:1d:89:3c:9d:f4:83:d0:07:
00:e9:66:19:bc:cb:02:9d:2b:1a:32:07:d6:21:ea:
6f:b1:e9:40:9b:c9:73:db:d0:51:0c:ad:0a:ea:4e:
f4:96:b9:05:f1:0e:dd:27:56:9a:90:cd:e0:f3:81:
01:a3:9b:c8:de:b8:6c:f5:f9:69:66:7f:5c:43:f6:
6f:b6:ba:ce:04:80:6f:28:c2:76:1d:8f:50:a2:73:
59:97:df:9a:9a:cb:a7:3d:29:fd:d8:18:22:b9:9b:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:E5:83:15:A8:DF:E7:C9:80:6A:D4:25:07:61:80:46:9B:13:49
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:1a:3b:ee:a0:6e:f5:7f:0e:50:86:a5:ad:fe:9e:14:77:
4f:17:b1:47:81:a4:42:de:ca:a9:51:ed:17:ac:12:b0:97:5d:
3d:48:6a:92:41:0d:11:92:c6:74:a5:83:da:fe:aa:eb:0b:d1:
3d:77:4a:16:e3:e1:e8:ec:f2:72:db:06:c6:87:76:50:da:70:
47:d5:10:71:d4:1c:29:32:d4:c0:5d:d5:91:3a:40:18:53:da:
6a:78:26:0a:c8:fc:06:66:55:4b:06:1b:77:e8:ac:53:28:f4:
62:10:b4:37:10:77:a7:76:cc:46:d8:2a:1d:5a:5a:13:df:fc:
84:c6:3e:d5:4e:e9:32:aa:22:96:2f:13:2d:88:1d:d2:c4:1e:
85:62:f9:44:a9:0d:14:6b:31:b7:98:ab:f3:8b:fd:d3:aa:03:
13:c8:fd:d9:6c:c4:27:80:d1:09:b3:74:e4:7c:ed:d7:ab:f8:
08:41:23:c0:76:de:71:ba:99:8b:49:90:f4:cb:cb:b0:fe:8c:
9e:f1:c7:dd:de:81:8b:d6:9e:50:59:e5:ac:b4:43:2a:a3:3b:
99:49:ce:34:00:0e:1d:93:63:29:1c:20:40:14:ef:05:9c:06:
69:16:ee:7e:68:dc:32:18:6e:f3:b4:ef:be:e5:09:79:27:ca:
da:65:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:08 2026 by rpki-client