Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: nNN1Ns75MNRVKHW4z8cfc5zoF3WcJ0vRHx3Hz8poFBc=
Subject key identifier: B5:79:BA:BB:40:11:57:0C:14:26:C4:BB:9A:69:22:71:41:D0:E8:98
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 019D38D36B61689683298396FAA6B64FA259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 9xWqX+r+CMKK1PlK0Qd3npn7QIzfojIK+rQe+ZtbxsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6b:61:68:96:83:29:83:96:fa:a6:b6:4f:a2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=b579babb4011570c1426c4bb9a69227141d0e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:db:86:7e:19:7c:05:14:63:aa:d6:3b:1d:
6b:49:4d:9d:1a:4c:54:f6:35:94:ce:e1:26:ad:d3:
83:16:dd:b5:28:52:85:e7:31:71:fe:90:23:d7:72:
0a:f4:13:b7:c3:2c:57:ba:a4:db:44:eb:5d:84:c4:
4c:20:07:72:dd:b0:4a:db:1a:ce:aa:7a:d9:26:f5:
70:07:7c:84:d3:04:59:4b:f9:c7:9c:70:71:20:0e:
cf:c2:49:90:7f:6c:6c:4a:fc:7e:82:84:85:f4:cd:
f4:91:ec:99:28:a9:e0:c6:f6:17:fd:47:fa:40:f8:
71:8b:8a:0c:4c:1e:0e:09:19:70:5c:dd:fb:26:a3:
d4:5e:10:eb:f4:c6:4f:61:6c:8f:93:a0:5d:c8:d4:
92:4a:a5:7b:72:f6:b1:27:63:ed:33:7c:43:e7:f7:
9d:64:8d:7a:da:d1:58:88:3d:0f:c6:58:bb:2b:e7:
94:67:89:29:30:dc:14:f4:d6:36:05:ec:52:13:27:
87:db:99:50:12:db:c6:a0:75:b7:6c:70:7b:55:fa:
90:63:d1:2f:6e:c7:a4:d3:a5:23:bf:2a:d2:8c:2b:
b9:fc:f4:56:c5:a1:bb:1c:af:ee:19:31:f2:94:8c:
aa:5c:b5:06:a3:84:45:fc:bb:97:ba:e5:58:a5:a2:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:BA:BB:40:11:57:0C:14:26:C4:BB:9A:69:22:71:41:D0:E8:98
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a7:db:0e:7e:6f:00:25:31:63:17:11:ac:b5:8c:ae:89:7c:
32:e4:27:10:3e:9f:2e:27:30:a6:69:5b:9c:66:95:8d:cb:70:
42:57:87:c4:2e:cf:34:70:b3:83:5c:13:cf:2f:e7:1f:d1:b9:
5f:10:20:5a:2b:32:cf:51:cf:57:1c:64:d3:f9:d0:ec:3d:ad:
9c:e5:71:c0:65:b1:18:f6:15:2d:db:d3:4d:f8:18:e6:93:ba:
64:0c:69:2e:47:27:0f:25:95:b9:33:b4:1a:92:27:f1:40:07:
fa:1d:ab:1d:f6:b1:2e:42:c9:96:aa:e3:e7:e2:6d:77:62:81:
c6:87:59:5b:83:c8:49:5f:bb:93:38:a2:db:6a:29:41:13:af:
35:7c:c4:dc:40:77:3b:05:ab:5e:ff:9a:ea:8c:51:e7:d2:f2:
27:4a:a7:21:0a:14:ad:a4:1e:7c:f6:ba:6e:cc:8f:91:82:3e:
c7:e5:0b:cd:ca:5e:0b:a7:d7:92:80:fb:e3:5c:d1:02:3b:b1:
b7:78:94:93:96:82:ee:cf:97:3b:59:47:ab:58:1c:16:90:87:
db:fc:41:87:c3:b2:8b:e5:da:95:c1:50:ff:5b:21:8c:c7:04:
13:54:f1:53:79:a2:6e:a3:b0:1e:5a:2d:9f:36:8f:9a:21:bc:
f7:f5:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:40 2026 by rpki-client