Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: DdBe09LdGcw3vFP6a1SH6dQ9V96VJyO5neignO7UA5w=
Subject key identifier: E5:14:85:31:74:AA:F8:92:C1:F4:26:FF:FC:01:64:B3:7D:05:35:56
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019D3789BB18619A2454F66ACA1CDD8A7C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 08B4
Signing time: Sun 29 Mar 2026 03:01:06 +0000
Manifest this update: Sun 29 Mar 2026 03:01:06 +0000
Manifest next update: Mon 30 Mar 2026 03:01:06 +0000
Files and hashes: 1: 5lccFV7z00Cs1oDdNniBnwJlbmg.roa (hash: EKtkvQVGangOVXfHSHz8QSCp4ca+LhVxZlvPGnv/+3A=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: bIrG2iwuce938R9efkB+RHwKiPOK/lmkWRvlpMAB5tM=)
3: h2Nk51GuKgghBJnfq43oIlhnlQU.roa (hash: 7U6ydDPGZOGz+9K+gyHhz/1ZK19NLUr8kgoPbn/12NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:bb:18:61:9a:24:54:f6:6a:ca:1c:dd:8a:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Mar 29 03:01:06 2026 GMT
Not After : Mar 30 03:01:06 2026 GMT
Subject: CN=e514853174aaf892c1f426fffc0164b37d053556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:8b:1b:94:19:96:3f:65:82:cb:9f:df:11:
a6:1e:88:16:7d:63:27:69:d2:fe:96:d3:6b:a4:fa:
fd:a7:1e:b1:5d:4a:9a:c2:58:73:dc:c8:f9:8d:b0:
18:62:4b:08:a7:47:11:4d:ae:70:99:74:6e:e1:8b:
bb:0d:33:20:0f:1c:84:10:e5:25:5f:35:45:11:93:
6c:2a:f4:78:26:9e:a8:7a:23:2d:e1:67:1d:12:c0:
bd:18:54:66:bb:a2:ba:e0:b6:34:b9:35:bb:f8:bd:
80:52:2f:f8:36:18:7a:b9:b1:a8:03:7e:9f:6b:87:
d2:2d:7b:66:53:44:45:d4:f8:ea:3b:fd:a7:56:0b:
17:7d:65:7c:e3:db:b5:84:ec:ec:da:16:24:e9:12:
6e:d4:13:b2:1e:b8:36:54:99:dd:b0:41:ab:31:5e:
bf:38:1f:1d:65:cc:ea:f0:aa:45:1a:3a:1d:cf:13:
59:52:4a:0c:c0:b0:9f:31:7c:be:75:e2:51:d3:b2:
80:9c:fa:5b:bf:84:ea:f0:04:72:0a:8f:42:06:ea:
fc:4e:6c:b1:fe:e0:dc:e5:cc:5b:d1:c9:ab:b3:0a:
f7:64:e4:1c:6a:76:8f:eb:0c:80:9a:99:a2:be:1c:
97:87:af:d9:48:be:13:41:52:e0:59:13:71:76:27:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:85:31:74:AA:F8:92:C1:F4:26:FF:FC:01:64:B3:7D:05:35:56
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:91:8c:78:62:13:2f:ed:68:cb:c7:84:41:9d:b7:37:40:c5:
07:f0:a4:db:b7:85:42:4e:6b:72:09:b5:cd:20:d6:de:62:e7:
72:b5:dc:bd:24:6b:db:e9:d1:d2:f5:6d:c5:3f:80:4c:03:da:
47:97:29:13:2b:aa:8d:e9:69:4f:76:c8:1c:2e:10:8c:9d:9c:
3c:b5:5d:87:e9:90:4a:39:ca:06:f4:82:4e:73:22:99:9c:e8:
a9:aa:8c:41:11:d7:ac:df:0b:c8:30:4a:27:3a:e1:8d:87:1d:
b0:b9:a9:a0:2e:8e:22:3d:0b:95:71:1a:85:b0:68:fb:35:c1:
59:7c:9f:b9:e3:ae:76:f5:9b:05:3d:a2:87:14:41:6b:50:81:
87:a8:51:01:e0:51:42:70:2d:4f:1b:88:1c:75:be:71:00:a6:
07:24:3e:62:6e:00:66:fe:a6:59:dd:18:82:52:a8:cb:b4:10:
87:27:33:8f:99:92:36:97:9c:ec:8b:fb:88:34:48:e9:80:ec:
95:8f:c3:e5:ec:8a:39:e9:20:e6:8f:f1:f1:e9:a0:84:46:c5:
d5:2f:91:b2:74:e9:33:58:54:83:74:9f:d7:48:eb:29:0a:e3:
90:22:08:66:a2:92:56:fb:ee:d4:41:1c:57:5e:ef:68:ae:29:
c8:21:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:18 2026 by rpki-client