Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: kJFKdMwU6HfRic/yHoGlgCL5wgKmm1GJH8Cv8DESKLA=
Subject key identifier: 41:F1:29:FD:19:71:35:B8:F7:18:1C:B0:ED:7E:8E:A3:CE:8B:2C:03
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019D12D8B2A908DBC7AF3D85025D88A842D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0AAE
Signing time: Sun 22 Mar 2026 00:01:24 +0000
Manifest this update: Sun 22 Mar 2026 00:01:24 +0000
Manifest next update: Mon 23 Mar 2026 00:01:24 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: tBPZ0dlr5cCg5uWl3g5wpvue5rYxHJhIoHhYL8BR7zk=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:d8:b2:a9:08:db:c7:af:3d:85:02:5d:88:a8:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Mar 22 00:01:24 2026 GMT
Not After : Mar 23 00:01:24 2026 GMT
Subject: CN=41f129fd197135b8f7181cb0ed7e8ea3ce8b2c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:9d:bc:41:88:ee:6b:9d:f4:f9:e3:27:c8:
58:f0:a8:1d:a2:1c:ee:b9:a3:5a:d4:32:d4:29:37:
81:5f:e7:11:ed:2c:75:a7:c5:42:87:ed:32:42:91:
a9:8c:84:77:fa:62:c4:75:10:e0:20:29:09:93:fc:
30:d6:c1:f5:a6:b1:c7:68:fd:4c:2c:6a:ee:3f:7e:
ee:ac:94:07:6f:ae:40:9c:e4:48:4e:9c:b5:4c:52:
96:38:87:8d:46:86:f1:04:75:f6:3c:f6:2a:8c:38:
b6:8f:9d:6a:7f:7d:ba:03:d9:c4:50:ca:09:6e:74:
fa:01:ea:65:ad:14:d0:00:fa:56:c6:3a:33:4e:96:
44:15:fc:58:9a:3c:79:ed:0f:08:bd:03:cf:f9:c3:
4f:dd:a2:99:ba:a3:ec:c4:f7:f7:f5:59:ed:00:99:
da:18:e8:6b:86:93:fa:fb:c1:f5:b1:62:f5:24:dc:
ef:cf:be:bb:1e:35:30:12:4d:1a:1c:93:08:54:11:
ef:e0:ec:cd:5b:a9:2b:e6:f4:94:11:be:7c:bc:fd:
d0:23:93:6c:d3:da:0b:05:86:13:49:53:b8:5f:f1:
e0:e2:25:44:df:7f:9b:c2:f9:be:cb:11:53:11:65:
45:9e:cb:46:0d:04:df:fd:67:37:59:32:df:e3:2a:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:29:FD:19:71:35:B8:F7:18:1C:B0:ED:7E:8E:A3:CE:8B:2C:03
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a8:fc:9d:52:33:48:77:94:05:62:b9:c0:36:44:f4:01:5b:
57:53:cb:6d:48:f0:a8:1f:ef:8c:b5:14:d0:3a:fe:81:f5:81:
30:ce:c8:02:db:0b:eb:23:fc:df:8a:53:12:36:6b:cd:8a:c8:
f0:4a:c9:80:85:47:63:2c:41:3a:98:2d:7f:3c:ad:6f:50:cf:
a4:0c:a3:b7:be:c5:8f:a4:21:b2:ff:b4:85:a2:81:e3:da:09:
6b:13:ec:dd:10:40:4b:c1:71:d3:a9:fd:6f:c9:9c:0b:2b:e2:
fc:ef:45:e6:a7:ae:e8:34:44:15:75:12:3f:9b:88:0f:0f:bb:
06:70:8b:0a:08:4f:8b:4f:29:be:07:a8:e0:a1:c7:08:0d:55:
e7:37:e5:bf:b8:49:b6:47:61:4a:ad:b2:26:d2:d5:df:2e:b9:
23:57:ae:a1:ec:24:91:7d:c3:7f:9a:50:d9:71:37:1b:5d:36:
2a:07:2f:11:92:f3:21:49:6b:92:f4:40:ff:91:82:6d:80:3f:
9a:9f:f7:2f:90:af:8c:c2:3b:41:d7:4b:d1:0a:57:ad:14:d7:
f8:4b:22:a8:87:8d:fe:c9:bc:15:44:a5:88:a7:a5:8d:dd:8e:
b6:0c:a8:2b:3c:e4:d3:eb:ce:82:20:e0:72:af:1a:b7:0d:7b:
b2:cd:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:55:53 2026 by rpki-client