Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: N9Cl3MAGbO+NYcnCmd+1xpaCtbmcOvJ2dsH2/vQM3Mo=
Subject key identifier: D0:B0:A9:70:C6:C8:95:A9:8D:5F:96:31:1E:1E:5F:EF:48:76:EF:92
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 019D37F75C34B16A01112D8D58B35921761F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 143D
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: 0jTzYvTvypbh1yQ9qTkBShn1rSM.roa (hash: QibTqze93VmbmNq8kPjpcqM+im2jq6u0y0JdEMbhwrI=)
2: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: 669VATpgOaFz/y04zzpG5qq5exg1+yJKiwFgqLqJ/GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5c:34:b1:6a:01:11:2d:8d:58:b3:59:21:76:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=d0b0a970c6c895a98d5f96311e1e5fef4876ef92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:4b:c5:24:67:05:82:a4:de:ab:44:6c:1b:
07:4b:ee:91:11:56:aa:a7:a7:05:30:cc:d9:ca:5d:
99:f2:0c:ba:5d:bd:5d:b0:a7:00:78:66:40:99:4c:
1b:8f:1c:b7:fd:cd:c4:32:cd:4d:fe:de:88:2e:65:
82:27:0b:0f:f1:32:56:e6:24:d8:5f:f8:86:ab:09:
75:a7:8a:32:e2:34:99:5d:73:b5:0b:ac:55:63:ad:
b3:d3:3d:74:cd:dc:bc:f0:f3:df:92:81:98:c3:12:
c1:1e:62:45:40:c5:67:eb:66:ac:fe:7b:16:9e:1c:
88:fb:98:38:46:64:41:4a:f2:5a:75:9d:9f:29:08:
ce:08:fc:23:9a:cf:0f:32:4e:4d:56:1c:9c:5f:91:
01:35:8d:14:87:9e:b4:44:d8:24:ad:a5:97:f5:5f:
21:70:b1:19:c7:84:0a:cc:4a:19:58:02:b1:af:d8:
23:d0:5c:cd:b3:46:c0:14:11:e4:f6:aa:a6:5f:0e:
41:7e:39:f8:06:b4:b5:4d:05:1d:53:f3:fd:e1:4c:
02:f4:d6:15:b3:4e:a0:a6:06:88:ec:a3:dc:32:b1:
27:bc:c0:d7:89:5e:d3:9d:f2:8e:33:75:ac:19:1b:
29:8d:7e:b0:31:8f:13:29:08:0a:39:63:00:94:28:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B0:A9:70:C6:C8:95:A9:8D:5F:96:31:1E:1E:5F:EF:48:76:EF:92
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:6d:73:97:f6:c3:d3:75:cb:25:48:57:f8:c4:15:78:cd:
87:38:2f:f2:f3:54:e9:d5:4a:43:0b:44:fa:5f:1c:cc:4f:c4:
e4:01:1d:a3:eb:97:fe:78:f0:f6:82:17:1d:52:fe:ac:e1:4e:
1d:77:99:2a:35:31:7d:c6:d4:b7:76:b6:9d:47:d3:fd:5c:e7:
5f:ba:aa:8e:5a:b8:55:2a:77:f6:f3:f7:95:7e:83:09:57:3b:
66:a1:59:05:b5:26:9c:ef:31:09:04:e6:7c:2b:25:57:24:1b:
47:a9:5c:48:e8:28:f1:6d:6d:b2:ad:79:d9:cb:cc:9b:0b:65:
9c:5b:28:ea:c6:42:85:84:de:5f:80:01:2c:9a:9b:f4:e3:d2:
c8:be:77:45:65:4f:3d:13:ff:1a:e2:ea:6f:e6:f8:b7:ce:7b:
06:78:47:f0:e8:5d:da:60:c5:60:26:f9:1e:14:54:4c:76:a5:
de:68:de:58:83:2e:06:0e:f8:42:cc:fb:57:94:26:f7:a5:3c:
87:b9:7e:49:b7:9c:35:8d:97:59:27:5d:df:fb:9a:76:d6:60:
ad:27:3c:03:c4:43:e1:64:de:0a:51:93:9b:4c:9a:e5:e6:88:
db:9a:67:fb:b1:18:45:20:9b:1b:87:66:c7:25:ae:f1:55:e5:
97:0b:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:09 2026 by rpki-client