Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: oZaA/NAy7dCzn4Kotwxvwg43pk5ErnFTmcq0p1aYVlE=
Subject key identifier: 9C:31:4F:C2:B4:1B:F0:FA:B0:1D:04:27:7D:43:0F:46:AC:30:92:CC
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 019D36E4C5E63FE78A9C108F87145CD877DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 084A
Signing time: Sun 29 Mar 2026 00:00:55 +0000
Manifest this update: Sun 29 Mar 2026 00:00:55 +0000
Manifest next update: Mon 30 Mar 2026 00:00:55 +0000
Files and hashes: 1: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: FiePTT9E4hmNtzYnqAqsbYYfxhBbs5Mc3VjANKYWiMw=)
2: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (hash: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:c5:e6:3f:e7:8a:9c:10:8f:87:14:5c:d8:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Mar 29 00:00:55 2026 GMT
Not After : Mar 30 00:00:55 2026 GMT
Subject: CN=9c314fc2b41bf0fab01d04277d430f46ac3092cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:4d:21:23:6c:b5:a1:6f:d3:7e:d3:bf:93:
b8:20:27:4b:b0:28:ba:3c:e0:a4:bc:38:84:fe:ea:
3c:b9:ef:b1:4a:af:15:0d:d7:75:96:2c:9c:85:ac:
c5:e6:b8:70:6a:97:32:1b:80:62:64:d0:97:b2:ce:
0d:e7:1e:4b:7d:3c:8e:fc:50:43:74:1e:3f:59:ee:
11:15:35:15:fd:0d:4c:86:46:7b:da:fd:b4:72:ff:
86:60:fc:02:5a:99:8d:10:96:18:f2:69:5f:3f:14:
86:be:33:56:e5:00:e8:14:6a:6e:80:69:34:7a:6c:
a8:a2:ed:b0:22:e8:80:1c:98:f6:86:af:93:3f:95:
30:c3:83:07:eb:9c:d2:c4:48:48:2a:9f:fe:a9:38:
75:c4:de:9e:47:18:ea:57:55:f5:6e:69:cd:67:f5:
92:a0:aa:90:84:d0:f8:c5:97:ef:da:ed:d7:fe:6e:
1c:b4:bd:92:14:19:8f:a9:46:e5:0a:9f:68:fe:47:
02:1a:be:53:b9:78:fc:cd:67:43:c4:41:fa:fd:f3:
ed:42:00:95:f3:2f:d1:49:3b:6d:fd:38:39:86:04:
a4:40:f9:d6:bb:6a:3c:6d:a9:cf:4b:0f:79:ae:92:
c8:ba:bc:e5:b1:a6:f4:40:37:57:b9:23:51:5d:1c:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:4F:C2:B4:1B:F0:FA:B0:1D:04:27:7D:43:0F:46:AC:30:92:CC
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:85:13:4e:de:c4:eb:be:01:8f:d3:52:e5:90:d5:16:92:
88:e4:db:32:4c:bb:e3:05:d7:3d:e4:e6:aa:b6:3c:bd:67:3f:
a2:35:2d:46:ca:10:21:33:4f:40:57:bf:19:c5:10:a7:98:61:
27:ee:88:be:0e:92:d6:cf:9d:63:00:2b:92:86:26:bf:fd:2a:
7b:c1:a9:5a:9a:aa:be:bc:56:87:ab:5a:39:b2:d7:58:23:a1:
9f:33:c0:7d:d2:46:92:fa:4c:91:95:fd:5e:d8:ac:b5:ea:47:
30:4b:73:24:21:fe:e6:23:7c:ae:33:b2:41:52:c4:c6:4e:9f:
10:a9:ee:5e:3b:34:1a:ab:6b:4d:50:9c:51:60:da:c0:c7:06:
37:e1:ef:96:17:69:b0:fe:0c:e9:43:3a:52:06:80:3f:c9:41:
43:9a:cd:21:65:26:07:96:7c:43:75:bc:4e:91:a2:e7:96:86:
85:40:69:fd:cf:1e:ae:10:9b:bd:30:f3:1d:cc:33:92:8d:b6:
f4:73:af:8b:63:ea:bc:d0:33:6c:3e:5a:ac:7a:8a:76:af:85:
3c:b8:ef:46:6f:25:9c:18:f5:81:df:0b:85:d3:5e:7a:57:68:
f6:72:fa:e6:2a:5c:f2:69:f6:70:d8:16:87:e8:f2:d8:05:35:
f0:1d:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:27 2026 by rpki-client