Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: 0B87JODROBf6/V9M1gZS0YjGnwGVfXURB3dH1+Suf3I=
Subject key identifier: E9:9A:D1:33:CD:88:35:07:F5:FE:F5:1E:FB:36:C1:9C:76:1E:8A:37
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 019D3866477BA09AC865B8E97AE8169E08D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: jL8CLuhPtJ9QsBz6BWBnnA3OK+6XuqkanYaVrjJYhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:47:7b:a0:9a:c8:65:b8:e9:7a:e8:16:9e:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=e99ad133cd883507f5fef51efb36c19c761e8a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:ec:a0:08:e1:a9:8d:37:92:35:e3:6f:13:
94:90:71:6b:0a:bf:5c:67:3c:a9:33:55:2f:6f:d1:
24:ae:6c:f5:73:f8:db:b7:62:eb:bf:db:88:43:4d:
3c:01:24:f0:fe:a7:57:b9:66:75:d0:7b:63:6a:dc:
fc:6d:24:2d:a0:26:c3:82:70:87:f2:7d:a1:f1:a6:
0c:57:85:5c:7b:64:b5:88:d6:11:18:ec:4c:63:66:
a1:d7:60:39:bd:c3:b2:98:93:b3:06:72:f2:cb:92:
a1:04:2c:5c:17:4e:9b:0d:e7:1d:ff:cb:cb:d6:67:
8e:e0:21:1f:e0:f1:28:6e:f6:43:72:2c:3e:f3:ca:
6e:66:e6:8e:67:95:3c:77:9e:5d:18:15:f5:f5:9a:
67:07:c2:57:68:71:80:15:4e:2e:25:4d:f6:30:a2:
ad:dc:8e:e2:47:23:25:09:ad:71:3b:f5:c6:93:39:
18:1d:c6:47:13:de:a6:9f:91:1a:a7:e8:a3:93:99:
64:2c:32:ad:73:c9:a0:47:64:26:41:95:b5:32:51:
90:9f:b5:b3:e4:57:db:8e:d1:b2:43:5a:29:64:9f:
90:31:b2:dc:cd:d2:a9:77:49:aa:60:25:df:6f:1b:
12:05:d1:fc:5c:3a:d1:f8:c7:51:af:63:56:44:81:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:D1:33:CD:88:35:07:F5:FE:F5:1E:FB:36:C1:9C:76:1E:8A:37
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:14:20:56:d6:ed:e2:b3:47:4a:52:cf:b8:12:e3:74:cd:a6:
91:db:00:ac:7f:0e:a1:7b:3f:99:fb:03:77:b8:09:27:c2:db:
4e:9d:ae:92:38:4e:2c:5f:0f:00:a1:39:b4:62:09:1a:c1:3e:
94:b9:16:93:69:b0:4c:b8:88:36:fa:6d:f5:81:8c:93:6f:ca:
63:0a:5a:ef:e9:f2:82:e6:c4:d4:c4:b9:28:e3:4c:88:e8:00:
12:e3:cd:8f:a9:d9:4a:12:fb:a4:8b:f1:31:74:41:98:46:81:
12:79:02:9a:3a:b8:9f:5f:ce:37:fd:a7:56:16:e9:8e:0b:6d:
13:4f:b1:51:2e:03:fd:ea:f8:96:26:b3:ba:2a:1b:8a:b8:d6:
ca:1a:0a:4b:3f:69:18:a6:e0:ea:6c:f8:a1:92:b3:6e:53:2a:
e5:bc:64:78:07:68:35:e9:58:89:33:93:59:d4:f1:cf:b6:84:
a9:95:d5:fd:79:a3:fa:94:c7:f1:c8:bb:29:3e:a3:2b:93:d9:
55:81:74:a8:c5:ef:20:f1:46:cf:68:0a:cd:c5:f3:34:27:7a:
16:f5:e6:02:d7:25:f8:5f:ff:07:57:97:03:0d:c7:05:e5:bc:
15:90:f1:d0:88:d8:67:7e:7b:1e:50:be:fc:56:62:6d:f0:9e:
de:90:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:28 2026 by rpki-client