Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: 83jglShYTrMd28CgMWWHwb8oMk3cd0AdeUZrC3j62v0=
Subject key identifier: C0:1F:12:D7:E1:C8:FE:4A:B6:BF:B2:C1:2D:A4:DA:3E:5F:C8:FF:9D
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019D10E9FDD991EE6D47964D7C9F7E1A2EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0AAD
Signing time: Sat 21 Mar 2026 15:01:03 +0000
Manifest this update: Sat 21 Mar 2026 15:01:03 +0000
Manifest next update: Sun 22 Mar 2026 15:01:03 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: tlkNnLjHYZLoJQqUTNrVc65USWvZPmZ49CoN+VTQlZA=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:e9:fd:d9:91:ee:6d:47:96:4d:7c:9f:7e:1a:2e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Mar 21 15:01:03 2026 GMT
Not After : Mar 22 15:01:03 2026 GMT
Subject: CN=c01f12d7e1c8fe4ab6bfb2c12da4da3e5fc8ff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:97:df:6d:b3:ea:b3:2b:83:34:d3:48:73:a4:
cb:2a:ee:f8:f6:33:41:73:36:74:d4:ea:22:bd:b1:
20:90:c6:64:07:f6:20:b9:14:2a:c5:ff:f8:a2:af:
ea:85:72:c8:46:45:f5:72:a1:42:27:b0:ee:fe:85:
c7:c4:36:19:38:67:a6:76:f7:bd:d9:d5:cb:3b:64:
36:51:76:97:6a:d3:50:94:88:a7:cf:90:27:a4:7a:
29:19:40:a9:25:09:65:be:64:81:a4:de:d3:fa:b7:
31:82:0b:38:80:cc:27:de:4f:59:8c:a3:15:f5:6e:
1e:e9:09:c5:af:ea:40:dd:9d:91:97:1e:65:dc:92:
36:69:8c:8e:9e:34:3c:a9:56:48:a6:2e:c4:a6:84:
8b:47:bb:84:e1:0b:f4:0e:13:ca:83:f7:b4:96:b9:
de:df:24:29:18:91:91:88:a6:ae:30:02:fb:07:2b:
cd:a0:f4:c0:4a:e0:56:12:48:93:81:ad:04:3f:01:
e1:c9:91:5d:c2:b0:66:2e:13:9c:5e:d2:d0:2f:67:
8e:fa:80:78:ff:e3:76:d0:df:b4:a0:21:17:ad:bc:
84:b1:b8:34:78:83:12:7d:76:31:6f:99:4f:18:ae:
0d:97:fe:e4:09:2c:66:75:b4:6b:81:40:ab:54:5a:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:12:D7:E1:C8:FE:4A:B6:BF:B2:C1:2D:A4:DA:3E:5F:C8:FF:9D
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:92:c9:61:ef:4d:96:44:9b:73:f9:41:d2:0d:b1:57:f0:84:
64:7c:6f:d5:05:56:a8:28:cd:2d:71:c0:bb:d0:dd:b4:ba:82:
71:72:2a:9d:99:24:80:3f:20:57:21:83:f7:c5:f7:c5:8f:3e:
72:e2:e0:d9:0e:d2:ea:9d:1b:98:47:b7:47:d7:68:16:4a:eb:
09:42:da:c6:0f:2f:a2:9e:24:8c:2a:e9:9f:5d:f1:75:fc:5e:
f5:91:d1:51:eb:86:b8:ae:20:cd:a2:f0:77:b6:e6:43:37:0b:
82:8f:1d:78:05:06:97:c9:d2:1c:28:c4:41:23:81:26:fa:2c:
b2:08:c9:37:b8:c6:82:f5:54:27:f3:5f:22:83:be:42:7f:40:
0c:d1:e9:e1:2f:20:74:e0:ed:11:83:f7:30:f0:13:35:20:9d:
a7:74:65:12:4b:17:e3:b0:ad:f7:e1:46:dd:70:9d:b3:f6:4f:
b2:c8:df:30:8a:63:7c:0a:06:cf:a6:7b:4b:c3:f1:8d:70:5a:
b9:8b:9d:07:72:47:8a:57:6c:43:ac:5c:e5:68:30:77:d0:c2:
f1:2d:a1:78:b6:52:68:78:2c:44:9e:16:7f:c8:67:13:2a:11:
63:06:e6:bf:88:4f:01:9c:73:bf:2f:6c:53:5d:d8:9f:cd:7d:
87:e8:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:28:34 2026 by rpki-client