Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: GoDtRc0506ioWiaC3Ds5iYhaij/0fPEOJiB97Ck1I2Y=
Subject key identifier: BE:34:8C:02:B4:31:4D:6B:6F:E0:D6:FF:E6:01:57:EC:7B:A0:4B:32
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019D39409FA54C8408CE1733A65B16B95E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: YGLTrOxDflSxMCgqTB814b5R3vVJBESJqhNfiXICjy8=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9f:a5:4c:84:08:ce:17:33:a6:5b:16:b9:5e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=be348c02b4314d6b6fe0d6ffe60157ec7ba04b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:d6:ce:fc:62:4c:b7:41:81:f9:c0:32:26:
e0:05:54:dc:17:b9:ff:b4:14:a4:e2:aa:e1:8c:2e:
3b:bc:62:38:82:13:69:45:93:be:ba:97:8f:92:50:
48:3b:ad:b2:01:63:49:ec:3d:4c:71:73:74:71:78:
98:57:e3:d5:92:40:03:83:bf:40:17:67:85:48:22:
8a:0d:99:44:c4:66:7d:89:02:08:d6:65:58:5e:ed:
f9:a2:47:d9:f6:bf:93:38:3d:57:05:fb:18:5a:91:
b1:9a:1b:ea:44:1c:d4:19:58:3b:67:97:e6:0e:06:
32:ee:ac:23:04:14:4b:a3:32:d2:48:a1:9d:32:f5:
18:6c:cf:39:fd:22:b9:29:2d:7e:09:13:a7:0d:7b:
60:9b:92:bd:87:4d:1f:94:a1:e6:c0:d9:a1:74:18:
8c:36:8f:12:b6:5a:9b:75:b9:ea:3f:ee:c4:db:f2:
92:64:fb:00:f6:42:f8:ae:2a:74:9c:90:37:cc:39:
4e:4a:8f:4c:95:a6:77:c3:42:29:89:e0:5e:85:45:
fd:6e:f0:49:f8:d6:f6:39:88:54:5f:00:c1:df:5b:
f9:e8:85:8f:7e:29:61:52:e1:d0:41:49:1c:e4:1c:
14:a8:56:87:b3:bc:a3:8c:0e:be:06:71:8f:53:40:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:8C:02:B4:31:4D:6B:6F:E0:D6:FF:E6:01:57:EC:7B:A0:4B:32
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1e:46:41:da:4d:cb:96:a0:76:d3:63:44:e4:1d:ba:4c:6f:
22:8d:81:57:eb:00:fb:87:a6:cc:3b:11:c3:72:f1:99:b0:ac:
c9:39:3b:0e:62:32:57:6e:a4:15:43:ad:fa:64:fe:fc:48:67:
02:92:5d:c4:1f:19:98:03:a4:e3:58:e3:62:d0:97:84:c9:9c:
41:41:79:0e:22:ed:3c:38:a0:22:40:77:ee:db:53:9d:55:86:
66:01:95:65:a7:33:f6:3c:e1:09:85:a2:c3:12:98:6e:d8:26:
cd:da:47:f8:0d:c2:eb:0c:62:f9:22:ea:b6:12:97:c7:36:1f:
bc:2b:ee:07:2e:c0:ad:75:45:ab:c0:63:c8:1b:13:30:1a:c5:
10:08:ac:82:f4:43:2a:2c:be:0d:a8:bd:86:c7:bd:e0:f8:3e:
67:bf:8d:f2:00:29:14:fb:78:05:29:76:2e:9c:d2:88:a8:34:
47:d9:5c:3f:98:74:42:e7:a3:30:b5:46:b2:7d:e5:55:c6:4f:
9c:5e:d4:48:13:ed:06:53:1a:16:e4:89:35:42:ff:ce:90:5c:
52:61:35:db:da:bb:15:66:4d:71:39:90:6e:ae:e4:a2:9f:14:
06:d1:b2:b5:1a:2b:9b:59:98:51:16:c8:eb:71:66:0e:68:15:
7f:54:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:37 2026 by rpki-client