Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
File: kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft (raw, json)
Hash identifier: lpEWF0+Ve6O7hpKNUt92MhumxvXbwLW7fW+fn3DCegw=
Subject key identifier: 14:A1:69:1F:BB:E6:64:92:74:B6:38:2D:33:9E:CA:ED:1B:81:7D:49
Authority key identifier: 91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B
Certificate issuer: /CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b
Certificate serial: 019D37C1435F383DC1B1E176213E147E3F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
Manifest number: 0169
Signing time: Sun 29 Mar 2026 04:01:45 +0000
Manifest this update: Sun 29 Mar 2026 04:01:45 +0000
Manifest next update: Mon 30 Mar 2026 04:01:45 +0000
Files and hashes: 1: KpOVliaxx-PBOI1CU_TAZ5HhafU.roa (hash: ABc8FPfWa63f8LmgxSlPOmwLetsBlnynj8+00ypF/DQ=)
2: kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl (hash: JnMUOAZ0yDrOW4ZBfSgYJBvJmyikMmT5v9F83hC3D/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:43:5f:38:3d:c1:b1:e1:76:21:3e:14:7e:3f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b
Validity
Not Before: Mar 29 04:01:45 2026 GMT
Not After : Mar 30 04:01:45 2026 GMT
Subject: CN=14a1691fbbe6649274b6382d339ecaed1b817d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:3d:23:6d:de:79:06:d3:fd:eb:93:3a:09:
c6:1c:36:eb:6e:95:a9:3f:3f:90:5f:a4:6c:b9:16:
e4:59:cb:f1:0b:86:35:c8:e9:51:75:90:ff:5c:36:
59:a3:9e:bc:05:03:63:cf:c7:0b:8a:19:43:5e:de:
67:35:4b:00:69:82:6f:c8:4c:2f:50:e9:6e:51:b2:
1d:4e:c4:9d:bb:b0:46:de:0e:e7:ee:64:14:87:63:
3c:66:74:77:8e:43:f4:3b:2b:ac:1f:6f:eb:e3:32:
af:72:02:a0:6b:02:8f:55:b9:95:76:7d:52:81:75:
60:f6:d1:06:b0:d6:cd:3d:ce:c8:6f:d8:bd:a9:00:
83:0d:d1:69:77:cf:2b:88:ba:4a:c5:01:64:db:df:
02:cb:e0:a0:bb:9d:11:ef:bc:b4:68:77:12:28:21:
52:1f:c0:01:bf:dd:7f:39:86:df:db:4b:57:e8:41:
94:1c:93:69:a2:71:83:18:82:6c:93:b9:7d:e1:67:
2f:5d:1d:f6:01:45:91:7d:2a:3b:9f:0b:bd:be:bb:
f9:4f:a7:45:3f:eb:4b:ba:e8:43:cb:c4:0d:a2:ac:
39:6e:40:10:79:31:53:6d:20:46:0a:16:cb:15:55:
74:b6:7c:73:b9:42:cb:8d:30:0f:28:6c:3d:61:35:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:69:1F:BB:E6:64:92:74:B6:38:2D:33:9E:CA:ED:1B:81:7D:49
X509v3 Authority Key Identifier:
keyid:91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:af:a8:02:7d:70:f6:78:ef:d9:d5:a4:c3:fe:68:c3:e5:b4:
6b:57:32:17:98:d4:0d:0b:4e:45:f4:87:00:8f:06:45:83:67:
aa:73:de:ee:a4:36:16:48:71:50:16:07:61:9f:4a:65:fb:cb:
a4:2b:76:31:f7:f8:2b:d6:9f:1f:b7:ab:0d:51:31:d6:69:70:
fa:20:7a:bb:04:3f:b1:82:d6:4c:2d:1c:51:bf:56:9e:ea:09:
f7:c6:9b:55:c8:f0:f1:f9:6a:73:99:6b:c2:47:b8:9b:45:c2:
0b:9e:9e:c5:98:16:60:f5:56:71:78:9d:c0:61:4b:42:78:f9:
61:70:98:b3:a1:19:8d:27:b2:27:57:d7:a1:ca:d3:e8:b7:95:
88:78:69:36:d9:20:65:2c:a8:b8:83:02:ac:1e:81:51:d9:43:
1a:88:e9:c2:91:f0:80:48:02:3f:27:d1:49:34:96:de:9b:ff:
14:35:53:cb:18:9d:b7:f2:b5:7e:2e:40:1d:9b:a4:01:c4:14:
8b:d0:92:20:d8:16:e7:7d:ad:78:50:1e:f4:e7:d0:b7:39:12:
29:8f:77:d5:46:64:98:76:71:69:d3:53:51:23:7e:24:20:48:
2a:0c:87:7e:1f:25:7c:e2:9c:6b:76:44:54:e5:d3:06:58:27:
19:2a:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client