Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: U2sfXrBGM+qhdDdmVBnRqA1zZMbBr7+eSyZvNoo6TeQ=
Subject key identifier: 27:AD:35:1C:99:93:FB:16:16:4D:39:9E:C0:36:FC:4D:40:97:20:6E
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 019D389BC65B3F9CE2D0E6D76247B434C1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: EDmPlLjb/fYSZZsgJRLJtZ+i2WT/9pxSral3bq9vmMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c6:5b:3f:9c:e2:d0:e6:d7:62:47:b4:34:c1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=27ad351c9993fb16164d399ec036fc4d4097206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:f1:1a:8b:52:48:d8:7c:2a:b4:c4:ec:2c:
e9:39:04:c7:6a:7a:af:3e:f0:eb:cf:bb:a4:7b:24:
ac:a2:af:e3:a0:42:e5:66:55:28:44:e8:d3:e5:d2:
15:19:94:5f:fb:ca:a2:92:a2:13:ae:ff:81:19:b8:
e7:b2:8b:e8:97:4d:4b:79:f8:2d:dd:f6:31:5e:5a:
7c:44:ca:f6:e5:ed:a7:68:8a:27:11:36:d2:09:92:
4b:07:ff:97:bb:13:9d:16:8d:10:ad:48:3c:9a:0c:
54:4b:ff:ea:b0:5c:51:7e:73:5b:42:d4:79:84:fb:
d4:ae:9f:a9:d9:cb:a6:21:8c:c2:23:de:3e:65:86:
d5:d5:b3:7e:97:15:24:fa:43:a7:e7:aa:ed:dd:ee:
70:0a:2a:ce:5d:50:07:64:33:f0:9b:28:f1:37:58:
f2:1e:18:26:90:95:08:d3:80:6c:c8:c7:c9:8d:6a:
3a:0c:2d:2f:69:2d:89:9b:7a:41:9f:8d:98:de:55:
9c:b9:81:a1:25:31:04:35:6c:68:86:4e:03:dd:3b:
82:b4:6f:cb:74:3e:d1:76:cb:9e:21:db:96:78:3b:
35:58:e9:aa:35:d7:8a:83:da:4f:49:e2:fa:d6:b6:
4a:94:8c:6d:5e:e0:6b:6e:31:13:83:46:0a:59:b4:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:35:1C:99:93:FB:16:16:4D:39:9E:C0:36:FC:4D:40:97:20:6E
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d8:7d:dc:af:68:75:94:0a:ee:7a:fa:20:a3:32:6f:60:f5:
40:4e:6f:6e:fd:a0:2b:af:aa:e1:9c:2b:bf:a3:03:5d:57:4b:
e4:92:b6:5e:5d:d2:0d:25:e4:a2:63:f1:bb:80:81:1d:3c:60:
b5:2b:df:e7:e8:f4:db:93:cf:59:49:61:1c:86:ab:43:ab:06:
9e:c0:28:06:37:b3:92:5d:75:5b:74:66:88:3b:8a:25:82:73:
a2:dd:82:7e:18:37:9f:13:8f:8c:6d:92:ef:1a:9a:dc:37:45:
e2:91:fe:55:2d:c7:9c:1d:ce:fa:a5:61:c7:19:44:96:6e:01:
6b:7e:9e:fd:c3:e5:d0:d2:78:b7:93:8c:10:83:eb:b8:f1:1b:
08:33:50:30:69:66:e0:bd:46:3b:2d:1d:2b:e8:f7:d6:aa:db:
af:47:97:e1:f1:ec:f8:c7:91:3f:63:9c:af:1a:c8:55:c5:ee:
58:50:c5:e0:5b:e4:a5:3f:dc:25:4d:77:af:84:83:55:12:02:
fa:fe:ad:09:36:af:35:b5:44:63:e5:0e:2b:31:4d:c8:0c:b8:
50:3c:22:1c:5e:60:6a:b7:58:56:a4:4d:1f:11:ff:c5:b1:73:
0f:7f:99:78:f0:e7:be:88:7e:d7:e5:1d:9d:fa:f4:58:1f:55:
7e:ac:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client