Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: xXr7j0CWquagEtA01c9oKHpNzngEBjeZqnDX6rnkm3k=
Subject key identifier: E7:43:57:21:65:C6:E9:E2:F2:77:3D:48:A0:D8:0C:49:10:B2:82:74
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019D3A1CF1B885E91D3E230269DBA0EAA31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:01:08 +0000
Manifest this update: Sun 29 Mar 2026 15:01:08 +0000
Manifest next update: Mon 30 Mar 2026 15:01:08 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: OK/36DPyQOrKzJwdKwKllGz3MmdViD3NQ4wh2eILhMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f1:b8:85:e9:1d:3e:23:02:69:db:a0:ea:a3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Mar 29 15:01:08 2026 GMT
Not After : Mar 30 15:01:08 2026 GMT
Subject: CN=e743572165c6e9e2f2773d48a0d80c4910b28274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:d0:48:7c:3f:00:e5:c3:95:13:aa:a2:ab:
f0:e5:14:b9:85:00:46:03:89:93:63:53:9b:39:a9:
55:f5:f2:50:1d:3d:93:9f:1c:b3:8d:da:d1:fb:f9:
30:a3:9d:d2:66:ac:66:9d:30:bf:03:b8:e7:3a:0f:
6b:a7:8d:dd:bd:39:b6:0d:9b:d6:f8:29:73:4f:2b:
7c:cd:70:71:f9:db:47:9a:90:ad:f5:d3:37:a8:1a:
d5:62:2a:08:26:04:6e:e6:cf:87:70:e6:52:ea:f5:
01:93:35:a9:9a:89:8b:c3:74:92:68:d4:7f:64:14:
b8:a8:56:6a:e7:81:35:1c:95:f4:97:3c:b4:d6:be:
20:ee:91:5c:8f:94:f7:57:da:7f:43:ec:5b:ba:e4:
de:87:39:4f:51:7d:59:86:39:9d:a0:14:21:96:d5:
8c:b5:51:c1:34:dd:4a:49:b1:63:cd:4e:96:35:ee:
91:0b:31:e8:ca:4d:ea:cc:1d:1a:ce:ef:66:b1:ff:
d9:0a:84:df:a6:32:e3:14:ef:70:f2:d5:69:8a:2d:
b2:9d:21:6b:40:a0:95:25:24:25:0b:cf:01:06:c9:
03:4e:a9:fc:5a:a5:90:a4:83:53:b6:39:ee:3c:c9:
6b:9b:8d:67:67:94:96:86:e4:15:94:5a:6b:c1:1a:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:57:21:65:C6:E9:E2:F2:77:3D:48:A0:D8:0C:49:10:B2:82:74
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d6:c3:25:20:04:b2:ee:8b:9c:8f:a4:09:eb:70:a8:a5:29:
cf:e1:f9:7f:2e:73:2a:0a:60:ef:0a:fd:be:8e:b9:a4:d0:74:
7c:6e:58:50:5e:10:72:a2:4e:44:1c:58:e0:12:0c:3f:4e:2c:
04:40:b9:d8:e4:bb:28:65:e8:6f:f6:84:4b:32:1e:86:d2:89:
27:d7:9a:c9:62:b8:29:75:b2:c0:dd:a5:04:bc:4b:6d:e8:07:
8f:83:11:d8:2b:89:a9:b5:b3:32:54:da:4d:dc:0e:fc:bf:41:
6f:b6:9a:03:f3:9e:cb:55:16:3b:42:d8:fe:b7:7c:02:52:27:
ce:8b:14:dc:a6:09:73:5a:f8:3a:cc:94:e8:5f:df:e9:df:63:
98:0a:b9:73:f8:76:b8:5e:c6:87:6e:3d:e2:ce:17:4f:3f:b5:
0b:5f:d7:58:6c:48:36:58:c5:a2:56:9b:2a:79:3b:8b:89:d8:
0b:38:16:c5:39:d5:06:12:a6:9c:3e:fc:fc:ca:ad:ac:0d:60:
dd:34:57:78:8e:02:90:03:b8:e1:47:e7:dc:07:80:9f:c8:30:
0c:03:ab:bd:45:8b:aa:cc:1b:05:1e:06:55:e3:d6:da:f6:15:
0f:4b:d8:69:dc:42:a8:24:5a:d0:bb:a4:2e:a7:91:0e:58:5a:
15:cf:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:43 2026 by rpki-client