Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: ml44Dj5O91y8d5V5gXsFFqZHJTtDYsNeC5SyGum73DM=
Subject key identifier: 7F:9E:94:0A:90:30:72:CA:29:FF:1D:06:66:87:A9:FA:07:30:70:26
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 019CE222CA6DBA3D688C0F17CBEB5B383D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 087F
Signing time: Thu 12 Mar 2026 13:00:56 +0000
Manifest this update: Thu 12 Mar 2026 13:00:56 +0000
Manifest next update: Fri 13 Mar 2026 13:00:56 +0000
Files and hashes: 1: _E48T5Kk_YeYZLQhVAgd8hC7YsU.roa (hash: k0dJ8PeVcNyuxj67fWBRQ1gHRoWtlCyhQvB826alDbQ=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: 6+DUylFTepdLpHYNpqsVKIO62BIXC6RWn2W72dBiVFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:ca:6d:ba:3d:68:8c:0f:17:cb:eb:5b:38:3d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Mar 12 13:00:56 2026 GMT
Not After : Mar 13 13:00:56 2026 GMT
Subject: CN=7f9e940a903072ca29ff1d066687a9fa07307026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:e4:f8:7c:a3:11:ae:86:b0:e9:a4:c6:3b:
d2:4a:2d:05:25:ed:56:ba:c1:8e:84:70:45:1f:b5:
af:b1:51:9a:88:80:05:e4:21:84:4e:37:f0:7d:29:
9e:77:4b:24:9c:22:b0:9c:e3:1a:bd:1a:65:a9:5f:
66:49:8d:ab:9c:5b:91:89:1b:6c:b7:e0:0d:ba:31:
bd:22:74:8a:9e:ae:14:e4:d6:4a:be:5e:88:a4:94:
a7:2a:25:67:3f:81:64:a6:8c:14:17:f3:4a:fd:57:
8e:d9:6a:a7:f6:46:5b:ea:1c:40:55:38:a5:1c:2e:
3b:44:6f:16:45:e0:a0:17:d6:cf:77:ef:fb:17:91:
8c:7d:d1:82:75:a7:fc:41:f6:c9:29:a3:03:9b:d3:
c8:86:00:ea:d4:62:eb:88:92:cf:d0:13:cf:01:bd:
58:fc:34:cf:c5:a8:cd:94:a5:4b:02:b8:19:00:95:
71:dd:ea:19:09:20:83:b2:63:cb:95:f9:31:a6:76:
45:20:87:e8:3e:d9:12:f0:44:28:74:65:35:fa:62:
e1:e6:14:d6:09:a3:c8:5b:ea:4d:64:d8:1c:53:67:
0a:27:9e:15:40:b2:35:08:39:bc:f1:01:9e:27:80:
f1:a6:2b:73:a4:8f:df:f9:ed:c8:03:1b:b6:e3:15:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:94:0A:90:30:72:CA:29:FF:1D:06:66:87:A9:FA:07:30:70:26
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8e:a7:7a:5e:d9:16:98:78:37:e6:9b:da:66:40:a9:a3:82:
bb:0d:6f:f3:37:f3:b9:73:75:b1:21:03:fb:48:15:f9:f0:34:
27:e3:29:cb:3d:5f:4c:8d:03:5d:03:ed:30:57:db:b0:ce:9e:
6c:8a:8b:c7:cf:0e:79:18:1a:e2:eb:2f:c1:87:34:ca:c4:d1:
2d:9f:93:39:2b:d5:b0:28:f4:0b:81:74:3f:3f:03:42:63:6c:
50:3b:dd:27:68:fe:8e:a5:97:cf:42:31:7e:2e:f8:89:2c:76:
ee:ab:a3:01:76:0c:08:d7:fe:1b:e5:48:34:1d:a6:fe:d3:5b:
f6:08:35:fb:10:58:5e:81:6d:da:41:83:5e:a8:15:50:d3:13:
33:65:f8:fe:3b:7e:41:ee:e2:68:16:f3:67:58:b1:c4:b5:fa:
80:4d:83:e6:ee:c6:89:08:3a:b7:c4:f6:0f:fe:23:2d:d1:97:
89:07:6f:92:f4:a3:b0:64:4b:05:a7:99:4a:b4:c0:61:bd:f0:
80:7e:e8:4d:ed:e5:62:ab:49:0c:b8:e1:25:a9:3a:9b:87:db:
5f:43:a7:be:f5:47:91:8e:76:bc:3a:1b:85:57:66:70:a7:18:
2e:3f:4d:5d:74:b1:e4:d9:05:42:1d:4d:b6:e7:c6:5d:b4:a9:
37:42:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:53:29 2026 by rpki-client