Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: N/0caV6oIu4yfl93AcBeVxf9mZDhgDtAXrSS5SJOfh8=
Subject key identifier: DB:B0:9F:48:1B:41:4B:D5:76:79:E5:59:68:CF:D1:F5:89:37:32:B9
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019DCED0187F2FEF378481025A2CF008D38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: FC
Signing time: Mon 27 Apr 2026 12:00:37 +0000
Manifest this update: Mon 27 Apr 2026 12:00:37 +0000
Manifest next update: Tue 28 Apr 2026 12:00:37 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: PfrtliZqyuqGIrLdKDHi/16vg4C5HHjaUvRCCm1D3kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:18:7f:2f:ef:37:84:81:02:5a:2c:f0:08:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Apr 27 12:00:37 2026 GMT
Not After : Apr 28 12:00:37 2026 GMT
Subject: CN=dbb09f481b414bd57679e55968cfd1f5893732b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:d5:4a:92:75:40:30:ad:a3:88:14:5f:d0:
91:1e:54:bc:21:07:23:3a:01:d2:8b:4e:5a:84:36:
b5:a1:bf:98:9d:2e:89:f6:90:c3:2c:f4:2e:a8:eb:
f6:6a:b8:8e:52:d0:a7:f1:a9:30:34:31:47:aa:66:
7f:9e:eb:86:bd:52:9b:63:65:56:c5:5b:22:cb:b9:
7d:06:9c:4b:b5:6f:06:e3:ef:71:0b:c4:17:39:d5:
79:dd:3a:80:ae:23:25:0e:ba:10:67:22:ae:89:02:
6e:cc:72:c6:2e:a6:f7:b7:d1:96:19:84:da:9c:e1:
83:67:61:c6:6c:35:01:b5:bc:c6:5f:e6:80:ff:8e:
cf:d0:b3:56:79:33:99:4b:74:29:6a:f3:50:f1:cb:
41:61:27:28:d4:cc:c0:55:a2:86:e8:08:be:a7:70:
87:ff:40:5b:7f:ca:51:6c:cf:6d:bd:5f:73:e1:26:
ad:de:23:e1:dc:8f:18:d2:ba:03:b2:fb:2e:e8:7d:
fe:a6:7f:80:ca:37:8d:13:6b:72:07:63:7c:a1:0c:
7a:57:38:b2:48:b2:53:68:c4:fe:a2:5e:c1:f6:50:
f8:b1:be:6a:61:3c:45:7f:91:8f:cb:da:46:5f:95:
67:2e:2b:9a:4c:f6:cd:23:26:f8:2a:d9:76:02:61:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:9F:48:1B:41:4B:D5:76:79:E5:59:68:CF:D1:F5:89:37:32:B9
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2d:4e:26:ff:51:11:49:87:61:63:33:37:72:16:a1:7f:4e:
b6:c6:c8:11:e8:e6:5f:e5:bf:01:a3:6b:e5:b9:50:5d:e5:8d:
da:b1:e1:d4:21:fa:8c:27:f2:02:a9:18:32:1c:9e:a4:2c:d6:
b6:85:2d:5a:46:43:d5:d5:14:e9:a9:0a:1e:bc:08:14:f1:d8:
62:d1:f6:38:dd:b4:78:21:ac:cc:94:d1:cb:7a:a5:fd:59:7d:
e5:1e:e4:0e:bb:40:d8:fb:dc:cc:27:f6:b1:c9:ee:75:dc:11:
67:be:91:36:26:e8:ce:cd:f9:cd:37:07:7c:5c:57:32:bf:c3:
54:66:6f:65:7f:3a:fc:11:94:34:a5:d5:ef:cb:e1:78:61:55:
87:1d:6c:ec:67:7f:72:2e:8d:83:62:98:a0:93:9d:cb:a4:88:
6f:4b:21:f3:08:6d:c5:30:0d:ca:16:ce:23:d8:ac:94:fc:9a:
30:a8:5b:db:01:5d:11:56:cd:5c:80:55:0e:e5:ec:1a:86:bb:
59:86:9d:c2:b2:e0:98:a3:0c:92:7e:8a:4d:49:f8:ed:58:28:
3d:c8:2a:d9:3c:9b:9e:5d:87:38:a9:42:fd:e2:94:03:44:83:
20:93:f7:d2:8b:6c:55:3b:10:62:f5:fd:3d:70:d1:b0:c8:0a:
de:57:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:50 2026 by rpki-client