Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: 1gMs/UsmEjlFhoYNMafDv4y1WHkjRnvg3JO8otUoOOc=
Subject key identifier: FE:10:B5:50:E8:28:88:F7:8B:18:07:A5:4A:72:73:A2:63:2A:04:21
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 019D37C06541F6CF2CF44ACCF7E61A3999E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: hmU/U9PIwDwmJwNwX167Gh1LU8jxMAyeQiFkwoqOlYc=)
2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:65:41:f6:cf:2c:f4:4a:cc:f7:e6:1a:39:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=fe10b550e82888f78b1807a54a7273a2632a0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:0a:de:25:99:e6:94:76:fb:02:43:11:fc:
e6:d2:36:e6:5d:a0:0b:3b:21:ea:9d:9c:e7:c4:da:
20:2a:5d:2a:05:4f:80:85:46:b8:a4:f0:0b:fc:94:
18:70:31:0e:f4:3d:6d:25:64:c9:11:69:22:25:e9:
a4:c4:8a:17:32:53:09:04:ea:ab:be:51:0a:de:a0:
df:85:2e:6f:62:7d:dd:50:12:c1:8f:2a:bf:93:b4:
23:0f:9e:14:fd:69:31:0f:2c:3e:17:26:bd:28:55:
d7:c1:4f:d4:a1:58:0d:5b:88:46:7a:13:a5:1a:af:
8c:e8:da:7e:ec:10:32:47:a7:e0:1e:27:da:a8:63:
23:e7:f5:d1:b0:86:d5:48:b4:df:e5:d3:cd:87:34:
48:f3:42:18:7c:b0:f0:6a:b2:35:39:d3:9f:a8:b8:
f0:97:ac:19:f1:52:8b:89:ce:98:ef:74:80:9c:e0:
47:5f:0d:55:25:0b:86:1c:6e:e8:2a:31:db:b5:10:
a2:18:96:85:19:b8:3c:87:24:1b:bd:02:b8:17:2a:
fc:43:70:97:91:52:da:b8:6d:98:fe:ef:9e:87:ac:
94:a4:0d:c9:27:5b:97:00:57:25:15:0e:0c:67:5f:
ac:ff:2f:b0:a9:29:f3:7c:86:3c:25:91:8c:aa:87:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:10:B5:50:E8:28:88:F7:8B:18:07:A5:4A:72:73:A2:63:2A:04:21
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:52:17:2f:ed:2c:32:85:cc:86:7b:c1:05:c0:cf:ea:58:cb:
bb:0b:05:38:6b:0c:ae:55:96:8f:4b:e3:5a:86:a1:3c:2a:8d:
ce:c7:29:9e:ff:de:c7:f1:36:36:64:14:3b:a2:7f:44:05:d1:
c4:1b:af:a9:41:ac:4c:3f:46:14:d2:3e:6a:34:ec:aa:1f:ce:
6e:da:4f:fe:7e:d1:65:8b:b7:e6:d3:30:f2:b9:7a:92:c3:ae:
e4:1d:7f:a1:16:45:76:2d:61:ca:ae:42:47:f4:59:2c:0e:6f:
01:c3:85:2a:e2:a0:3b:3f:ab:19:ba:0f:06:4f:43:8a:8a:f0:
87:d8:b3:48:ec:90:50:dd:0a:d3:af:95:49:a1:b7:90:43:05:
bd:01:98:6c:96:5b:fa:7b:51:a6:36:0e:f9:35:c0:ee:07:c3:
6d:ed:d7:25:d1:c3:8b:71:8a:0f:f5:6e:36:e8:aa:9b:bd:5b:
dc:6e:1c:8c:9e:4a:23:a6:fa:50:1b:67:c6:01:ca:a0:b3:ab:
16:77:a1:fb:11:1d:ac:2e:66:3d:e2:37:a3:d3:a1:e5:ba:fa:
20:d5:c9:3f:00:7c:04:18:94:c4:d7:49:76:4f:28:9c:b0:8b:
93:7d:d3:08:ef:43:ed:dc:29:03:45:88:a2:0d:00:96:16:ee:
f5:a0:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:55 2026 by rpki-client