Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: r79g/mDeBcEzuLQwtAwhHA+wALr9PPBvNFYJj2JI/wM=
Subject key identifier: 48:88:D3:77:1E:B4:54:5B:F9:BC:5D:3F:0E:CE:ED:A4:06:DA:24:7C
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019D37F6F05F7853DE8C764E736699C8BB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 15E1
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: DJfLC27ZRlLjzQtg9ejcohCVl8k.roa (hash: VymrYhadJDvH9BE1CUEs+UkSRt9NAMcvnOkL0G00Mj8=)
2: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: Bxwu3vQdPSyxUFiH+S2OXgTr8CF9CoYZklvPwH3+FQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f0:5f:78:53:de:8c:76:4e:73:66:99:c8:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=4888d3771eb4545bf9bc5d3f0eceeda406da247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:ec:92:1b:1d:97:7a:5b:72:24:1b:53:53:
31:e2:d4:33:b2:7c:34:1e:c0:59:ff:ee:d4:1b:94:
62:3a:bb:82:d7:a9:87:2b:97:0f:df:c7:6c:c9:ba:
26:39:74:a8:87:20:60:53:51:c1:44:bf:07:ac:14:
fc:a1:c1:c5:a8:c1:99:04:55:b9:5d:23:9e:70:55:
27:f0:f5:13:58:01:3b:da:22:bc:e8:06:e7:1c:c1:
8b:e9:bd:54:de:fd:6c:3c:44:c0:74:c1:a8:19:e3:
e2:71:6f:ba:5e:49:6c:78:b7:1d:f3:dc:d5:fc:be:
14:1c:c6:e3:70:d5:f9:53:33:74:3e:52:2b:ea:7e:
c6:85:fc:d6:ac:a9:09:f9:88:92:d7:35:74:e0:e0:
72:37:59:6e:97:6a:73:59:3e:b4:fb:a1:f3:c3:57:
03:d5:d9:16:98:cc:d0:c8:5f:d4:be:d2:94:07:be:
fc:1c:78:ec:27:88:cd:28:2e:d1:89:cb:ae:0d:22:
f6:d1:b9:0a:08:2f:e2:1d:4f:0e:2d:39:88:26:ed:
b0:52:d5:54:c1:1c:ac:ba:2a:9a:5f:b0:cc:2d:6e:
25:ee:6f:72:ac:25:5d:44:86:c7:d9:dc:de:73:ac:
ae:66:ce:9f:c7:05:43:8c:06:c4:13:e3:6c:21:9b:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:D3:77:1E:B4:54:5B:F9:BC:5D:3F:0E:CE:ED:A4:06:DA:24:7C
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1d:14:04:05:61:15:b9:e8:8c:85:ab:da:64:d2:a2:07:9f:
d5:c3:8e:10:76:96:b1:2c:18:b8:06:6f:95:fe:73:5a:b4:05:
6c:e0:69:2e:f9:96:4f:92:e1:4e:1c:b2:7b:bd:ae:5b:21:79:
7a:80:ce:13:38:b2:74:6a:d5:88:3b:d1:14:53:c1:29:3d:f5:
b2:47:a6:be:c6:25:fc:11:69:0b:e5:3d:a6:1c:54:e8:e3:1c:
f2:b4:c2:a7:6a:25:a0:31:53:66:ed:85:4a:4c:46:65:aa:4c:
37:66:e4:cf:78:a4:50:e4:3c:63:84:4e:17:6a:b6:b7:65:32:
b9:39:b6:16:fb:19:e6:43:f9:53:70:98:2e:4b:f1:26:2c:18:
df:04:38:ec:cc:fa:25:29:0b:01:ee:d1:c5:30:c2:6e:10:14:
45:30:69:27:65:a5:2b:1e:f7:cc:f1:87:04:cc:66:19:4f:60:
0d:02:4f:bc:0b:8a:1d:a6:82:e3:e6:3b:e4:c6:56:4b:91:32:
86:88:e4:40:b2:9a:92:20:99:5f:05:c1:3f:db:fb:1a:83:61:
b4:af:f5:ce:31:43:9b:e4:da:f0:bb:33:a3:61:c0:c4:85:a6:
f5:05:d4:af:bf:94:a4:7d:0f:77:49:f8:89:af:93:01:88:37:
1d:20:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client