Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: LP7ywCb3YQr7rq/AHGb4YI3ot42YlEV55d6cAxzoYCQ=
Subject key identifier: B0:52:94:2C:21:85:21:96:E9:8B:A9:59:EF:DB:D6:BA:E6:B1:18:F8
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 019D3752979826441447309AC83726971667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 0522
Signing time: Sun 29 Mar 2026 02:00:52 +0000
Manifest this update: Sun 29 Mar 2026 02:00:52 +0000
Manifest next update: Mon 30 Mar 2026 02:00:52 +0000
Files and hashes: 1: 7blcIWPiBHjkf4FS8FIF2ImeS_Y.roa (hash: Dp6Wz0SM7hrT/MGysq6OjYOeUSc6KWhoZjL6n1WUlpw=)
2: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: 0+ROaLrWLlfD31rLioXSEXjOl21ANkmvMDBIdGbgESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:97:98:26:44:14:47:30:9a:c8:37:26:97:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Mar 29 02:00:52 2026 GMT
Not After : Mar 30 02:00:52 2026 GMT
Subject: CN=b052942c21852196e98ba959efdbd6bae6b118f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:62:a3:75:b5:e9:31:1d:6a:34:5e:56:19:
58:87:dd:cf:8d:ae:03:37:0a:6e:29:f4:e6:5e:fb:
d8:80:6f:76:34:83:04:57:8a:9d:5f:bf:40:6e:7c:
8b:33:ac:b0:2e:e9:b3:6a:67:f1:a2:22:df:7a:ad:
68:7a:ab:fc:fa:84:a5:e3:e4:df:fd:57:da:75:78:
ac:bc:dc:c8:de:0d:d7:c8:d0:7a:74:e7:64:5b:23:
04:76:78:2d:f8:4b:a3:e2:72:27:a0:6f:62:c0:9d:
fe:a4:d1:29:b9:95:a3:ef:0f:f2:fd:5f:b1:95:c0:
c6:d2:ae:b5:11:28:51:f3:61:a4:90:18:69:fc:05:
37:55:c1:91:34:5d:07:f5:82:9d:53:90:b5:31:11:
8f:73:46:4d:46:5f:cd:b3:ee:ee:bf:5a:31:4a:a7:
1e:16:80:f3:90:12:17:f9:dd:76:79:ae:97:44:82:
91:35:d4:20:9f:5d:08:e0:72:b6:28:8e:f0:97:75:
38:96:5d:b9:28:bf:d6:c2:79:cf:aa:f5:21:6f:44:
45:46:d9:8c:f1:44:26:f5:db:b1:2e:41:7b:0c:b4:
31:4f:20:3e:e2:90:d7:65:9a:a8:d3:d1:92:ea:46:
54:f0:5f:c6:31:0b:f3:e1:35:17:38:50:82:4e:e7:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:94:2C:21:85:21:96:E9:8B:A9:59:EF:DB:D6:BA:E6:B1:18:F8
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c8:cf:45:63:0f:fa:b2:58:a9:83:b6:5d:bf:f5:1b:d4:b1:
b4:1f:85:e0:c1:20:29:8f:fe:d0:17:7f:3c:6a:9d:3a:b6:d8:
55:db:6c:e2:23:c6:5b:d5:88:03:b6:ed:23:8f:9f:fd:34:fd:
6f:04:1c:44:a7:2b:85:89:5f:cf:31:68:a1:42:9d:6f:c2:d9:
6f:e0:d9:ff:64:fd:52:a8:c6:21:30:f9:8a:9b:0e:94:be:b7:
2e:1a:d4:45:4b:96:c9:d5:a7:af:be:00:16:6f:6e:19:17:63:
eb:e9:75:01:f2:07:ee:7f:27:f7:cb:1e:ed:af:4d:0c:94:bc:
a4:94:87:af:79:9f:f1:3c:ff:0e:1a:04:1c:5d:15:e0:ce:19:
29:30:3e:3b:37:7d:ba:73:f6:dd:91:ca:da:0d:af:42:a4:c4:
2c:98:86:01:64:83:c5:21:f0:ad:88:91:ba:ab:fc:a7:5e:8f:
06:46:6c:6c:c4:05:f6:00:9b:a9:e3:85:bb:3f:72:46:71:78:
e2:c4:aa:23:66:8b:c7:3f:62:de:44:84:6a:0d:ea:e2:39:4e:
40:42:7d:4d:e8:99:63:45:80:b9:bf:95:63:5f:b7:e3:4f:13:
67:8b:b0:51:2f:ed:aa:07:8c:b0:d5:72:e6:30:55:52:6d:28:
28:bc:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:03 2026 by rpki-client