Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: 7f+HzsEk8lLrn0mtEgUTvrisrIOjYnpqTqymLdWyfbE=
Subject key identifier: EB:41:0B:A8:0A:F7:DC:5F:C1:7B:0A:C9:40:1F:C0:C5:59:39:B0:7B
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019D382E4A0BFEF9849D0072948907E49E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: /zxm+ZfcH1V2p042C80KyTGnhg3rdxIBKScyCH2Zt2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4a:0b:fe:f9:84:9d:00:72:94:89:07:e4:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=eb410ba80af7dc5fc17b0ac9401fc0c55939b07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:53:bd:fc:6e:ac:3e:23:e4:ff:39:1d:67:
fd:2f:fb:6f:71:db:4c:a3:8b:8f:fb:60:70:e2:f6:
48:73:81:05:2b:b2:bc:9b:07:8c:c9:6a:22:fc:85:
77:fa:0e:69:dc:27:71:35:3b:32:c8:4e:f4:2c:66:
f3:56:e7:1b:45:78:26:e4:27:d4:e4:ea:ac:37:25:
c8:eb:40:75:c0:92:ce:79:58:61:60:4a:e9:0a:8e:
d4:dd:cf:f7:46:61:45:86:bf:50:82:7b:d4:0c:de:
51:d4:4c:b6:66:0c:c9:2f:51:db:f2:9c:1d:75:d4:
10:26:4e:3a:6c:d5:57:56:e9:ee:11:b9:11:6f:37:
fb:db:4f:84:52:d9:e1:60:1b:4e:66:f7:a5:a7:34:
b4:8c:1d:82:e7:d5:e8:64:7c:a7:9c:53:a2:74:33:
59:19:bc:1b:db:63:5a:ed:8b:76:45:c0:bc:7e:32:
6b:43:24:0b:2d:6a:0f:fa:34:f3:e2:9b:f1:d8:e8:
c8:59:90:2a:ef:9f:db:0e:11:3c:ef:75:8b:d2:44:
53:95:58:6c:ff:93:79:d5:1b:b6:d0:bf:cf:d9:a2:
6b:75:fc:a3:77:e4:0a:64:1b:73:05:84:e7:63:e2:
de:d1:3e:ee:8f:5c:d8:d9:38:47:d2:9c:ce:c5:a2:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:0B:A8:0A:F7:DC:5F:C1:7B:0A:C9:40:1F:C0:C5:59:39:B0:7B
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:27:a1:11:ef:12:6d:4a:90:ef:e3:cc:72:28:04:1b:95:
a9:e2:65:09:4c:b4:b3:58:d7:d3:b5:9d:92:75:d8:a6:1d:6a:
19:19:20:81:77:3f:62:00:31:96:a7:35:f5:14:13:50:5e:2f:
f9:0c:2c:8d:39:d6:49:d7:fa:a9:a0:75:a9:a5:51:34:a1:a8:
49:e8:f5:68:f4:51:c6:d3:c1:27:01:db:1c:52:f7:ca:06:ad:
47:ab:d8:07:9c:0f:00:f4:6d:51:0f:91:81:0f:77:b0:f4:47:
af:17:a9:ff:2f:2e:49:a7:73:8e:be:52:88:6c:3c:bf:4d:94:
0e:80:5c:da:95:c7:d9:f1:52:1f:ee:d4:8d:d2:37:6b:84:96:
dc:9f:f5:9b:94:76:8c:54:10:6b:86:90:7f:ce:5a:b3:0b:84:
45:a0:7e:38:ec:b2:ef:17:8a:24:dc:ef:ac:9c:55:8b:58:1f:
32:bb:4a:9a:5e:4b:ea:0c:85:c2:52:66:42:12:44:53:2b:15:
63:34:67:42:c0:b5:86:04:45:33:9e:b5:e5:8d:a6:98:7c:e9:
6a:c5:49:ca:6a:f2:2b:df:38:d2:d8:2c:2e:ab:46:36:f4:30:
1e:e0:64:87:3d:7d:28:c0:09:dd:d9:54:fe:1f:56:ca:ca:d7:
66:86:5a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client