Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: r4u8KUmAan3qCcuF85r8GnfjqsWSlTg+06ngqCS1hfs=
Subject key identifier: 9A:9B:54:8D:05:2D:BB:ED:94:45:88:3D:5A:F9:A8:1F:D1:D3:F8:4F
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 019D39E5425C5481F95DF1F58FB991856306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 084B
Signing time: Sun 29 Mar 2026 14:00:19 +0000
Manifest this update: Sun 29 Mar 2026 14:00:19 +0000
Manifest next update: Mon 30 Mar 2026 14:00:19 +0000
Files and hashes: 1: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: HwsGItNdWWAK1jF5wQWDv7H7rY/HVH6HWEKI/gZ0CrY=)
2: tKebX1FWuux3IXuG2sUXIXIBJsw.roa (hash: +oj9FAD3Ulh0IuD5nAYshWSIbL3rR2EIAg3bpYOtpOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:42:5c:54:81:f9:5d:f1:f5:8f:b9:91:85:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Mar 29 14:00:19 2026 GMT
Not After : Mar 30 14:00:19 2026 GMT
Subject: CN=9a9b548d052dbbed9445883d5af9a81fd1d3f84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:49:c8:90:ef:df:01:97:09:0f:1f:30:9f:
8c:ed:7b:3e:45:6f:25:24:37:8e:9d:63:fb:ff:c7:
67:c6:e4:e7:eb:48:4e:f8:b7:f2:29:65:ea:e3:1c:
06:5a:dc:2f:d8:ec:27:fd:39:48:07:e6:9a:c9:b6:
53:ee:06:60:eb:15:7f:de:7b:51:cc:79:80:e6:a7:
6e:ed:16:0f:56:5f:44:cc:36:76:ca:d7:35:24:6c:
d3:e2:21:96:b0:bf:09:25:a4:ea:08:50:c0:96:3e:
23:73:17:e5:01:2e:4a:c0:a6:55:fc:38:71:af:1b:
e3:7c:8d:28:00:01:54:d5:5b:0b:4b:1b:f0:1f:62:
fa:45:b4:4a:91:02:74:5f:7f:05:f9:7d:65:da:99:
1f:fe:22:40:5f:e4:73:be:5e:4a:39:b4:46:52:03:
2a:31:d1:59:e1:1c:41:fa:e7:74:85:ba:01:09:66:
47:d8:59:85:29:7b:c6:3d:ad:16:70:c0:10:c8:01:
66:e1:88:cf:07:c4:af:a9:5c:db:18:99:8a:60:a3:
a6:ed:04:23:5f:d6:b1:96:60:bd:79:e0:7d:67:2c:
4f:24:6e:e9:e9:fc:71:9d:7e:54:33:75:78:20:50:
47:6a:08:2b:8b:4a:f9:5a:af:52:d2:6b:63:17:ed:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:54:8D:05:2D:BB:ED:94:45:88:3D:5A:F9:A8:1F:D1:D3:F8:4F
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:87:f9:1f:32:29:e4:68:ae:38:7f:7a:38:91:c5:95:a1:ad:
59:35:b9:ae:70:12:b4:85:52:ca:a2:99:7f:08:60:44:28:e3:
1a:ae:04:a0:ef:33:85:5a:cc:e8:df:58:50:35:4a:00:92:c7:
95:24:8d:49:2b:2f:81:b7:ce:ae:7a:63:d1:1f:bd:17:5c:78:
fc:d0:90:bf:9d:99:31:1a:bb:fc:74:5a:60:fe:ac:ff:34:69:
74:0a:64:d5:54:30:e9:a0:e7:e0:ce:d4:e7:28:9a:b9:7e:91:
0a:33:4f:21:b9:15:f1:e6:7e:4a:de:6a:57:01:19:33:47:44:
aa:0d:3d:53:a6:fe:bb:21:8e:94:23:70:af:fa:c2:ed:49:f9:
db:c1:9c:01:50:68:fc:48:e5:7d:4b:aa:58:d9:61:3f:cf:f7:
4f:27:41:b4:ed:0f:4e:6a:e7:46:00:d7:d6:2f:17:20:ce:e8:
18:01:f0:a3:fb:02:80:24:d6:bd:22:35:92:9a:19:0b:51:7f:
71:3e:c4:6e:84:b0:5f:a9:28:c1:60:9b:85:f9:81:49:6e:23:
97:49:9a:68:57:38:d3:51:b5:b6:5d:19:21:e7:b4:87:be:a6:
e8:fc:a3:4a:ae:ed:9b:b0:8e:cf:80:cf:cb:98:7a:8d:7c:ee:
0c:cc:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:24 2026 by rpki-client