Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: TOVK9wGZQdiIgQjW8vH1VocsuRS22ezmTVf9u4g3xz8=
Subject key identifier: 8F:AD:86:BB:43:FA:30:50:71:4A:1B:12:68:8E:9C:31:EE:F9:0D:9C
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019D38D2DCDBA343D794634E4C3E9D6E1677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1453
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: J8sBrIbOfRRRbc1bdcnI42x6x1DAAw7O9lePTFihieE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dc:db:a3:43:d7:94:63:4e:4c:3e:9d:6e:16:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=8fad86bb43fa3050714a1b12688e9c31eef90d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:55:78:fa:6a:91:79:ea:f0:81:1c:98:9a:
e6:3b:ee:4d:6c:d7:6d:4a:da:6f:51:e9:ae:e6:3f:
64:60:72:ce:74:5d:1c:c9:4b:f5:5e:73:03:cc:7d:
f0:0e:e6:72:3a:9f:00:9c:dd:d9:8c:97:7f:ad:df:
5d:f0:58:cb:27:9d:95:07:28:d4:e8:d2:d3:b5:fc:
c2:32:ab:37:ea:41:94:f7:90:ea:85:3b:2c:84:5a:
05:f9:30:c9:b9:3e:a4:8c:a3:61:15:4a:ee:88:f0:
4b:61:cd:89:58:53:c9:fe:4c:81:bf:1f:2f:51:f7:
f9:e1:ec:70:62:2b:68:03:19:7e:a6:8a:fd:21:9c:
25:80:d1:be:64:57:e2:30:ee:f2:c6:43:83:40:71:
81:68:b9:2f:e0:50:66:f1:c3:7b:5c:f0:b0:08:b4:
cd:9b:46:49:d4:eb:11:df:0a:ff:0e:85:b1:b3:2b:
1e:39:02:57:77:0e:65:41:59:fe:6d:ad:37:79:11:
7d:44:9a:85:00:b7:a8:c4:cc:9c:e5:ca:b8:a7:1a:
64:e9:c0:1d:82:72:86:d5:78:ff:51:8d:45:a3:4b:
32:c9:c5:95:83:69:e0:a7:aa:6a:c4:de:5a:55:ef:
05:92:a2:3f:de:84:86:43:9d:bd:54:66:99:8b:f3:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:86:BB:43:FA:30:50:71:4A:1B:12:68:8E:9C:31:EE:F9:0D:9C
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:92:a4:7c:e7:e7:03:01:0a:18:56:fa:95:de:cb:32:49:91:
9a:3d:9a:5e:87:6c:1d:60:67:b3:9d:75:01:cf:01:10:6f:d3:
1c:10:cf:18:66:11:18:8f:ec:d8:64:1c:c4:c2:bf:cc:47:64:
bd:c1:fd:34:d1:48:f4:93:7d:c3:ff:91:b3:b4:a0:56:96:6f:
eb:fd:60:3c:f6:2b:dc:48:c6:39:13:6b:03:d1:07:79:43:2b:
53:83:3d:f5:e9:3a:42:d4:b3:bc:e6:31:f5:b7:dd:51:5a:5c:
54:6b:a3:cc:ec:ee:e3:e4:e4:4a:ac:0a:19:88:1c:b2:ab:55:
a1:2c:ba:1b:19:f5:c5:11:06:0b:c3:01:61:7d:68:76:ff:f1:
23:14:f7:ae:0f:b5:55:81:14:49:bc:26:db:75:4e:94:e6:2b:
ff:bf:6c:d7:96:e3:a7:23:50:7b:05:4c:05:ea:df:62:e6:a9:
12:cc:3e:4a:e6:ab:c9:28:0e:95:5c:5c:ee:40:05:25:16:7f:
62:b7:78:01:83:dc:65:d6:85:c9:64:b5:61:ec:55:28:2c:f8:
56:f0:86:04:16:ce:3d:65:68:0f:9e:07:a4:41:5b:6b:7a:83:
31:41:fc:48:d7:65:43:93:d2:f4:f4:a2:44:ad:9e:f0:89:4b:
53:19:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:22 2026 by rpki-client