Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: rMZIgNe6ONROZUDQpGxXAKyusOP7F8CqQJwy/eLxj7E=
Subject key identifier: B9:28:79:EE:3B:35:72:33:C7:FA:6C:23:6A:3C:6E:B8:E2:48:A8:05
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 019D37C07E5893DA35F2EEA2126BB246F59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 07B5
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: +8D4WS+wXD1o+377bW/ZgDs1t+4sq4YRLUK0Sr/Mr6s=)
2: fyr3l71yXyZa0qJKX752horsWVs.roa (hash: 6QW7nNjpNR48gxgLwjjO7J9nPbB82YNsVN3+Wky6unk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7e:58:93:da:35:f2:ee:a2:12:6b:b2:46:f5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=b92879ee3b357233c7fa6c236a3c6eb8e248a805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:f8:3a:05:3b:32:bc:f8:36:1f:5d:e9:d1:
f6:88:9d:5c:3e:57:38:9a:ed:55:6d:11:81:0f:8c:
89:a3:90:fb:29:e4:75:ab:f3:11:d1:05:7b:af:bb:
cc:1b:59:e5:b8:71:33:64:c6:97:f7:e8:a4:e6:c4:
9b:ab:21:83:a1:ef:64:43:2e:41:5b:17:c3:63:ff:
b2:7c:8b:31:1a:7d:c9:eb:a9:af:57:5d:22:57:27:
fd:71:d5:4f:a0:2b:d6:06:ac:90:f1:9b:f0:df:12:
8a:37:1a:23:a3:3d:e8:63:90:c0:c5:d5:1d:d7:0b:
21:1f:be:f3:89:a6:57:b4:99:d3:6f:a0:81:ec:58:
b7:95:31:41:04:1f:c2:2b:61:29:f0:79:eb:76:d2:
72:92:47:f3:1f:6f:d2:b9:02:3d:15:74:b9:1c:5c:
11:b8:b4:74:d8:bf:64:6c:7d:5e:d6:ab:d5:b8:0d:
1a:6d:9e:87:af:84:bb:a7:48:82:a6:97:30:c9:f2:
9e:bb:92:e6:6b:58:9f:92:e0:95:55:4b:ed:a7:a4:
c7:4d:5f:da:e1:6d:d6:d1:04:63:9a:f7:69:f1:b3:
a7:9f:61:95:ff:92:9f:ad:3d:c9:b4:50:75:52:c7:
68:c8:1b:ee:d0:68:f2:67:ea:95:53:8a:94:d3:29:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:79:EE:3B:35:72:33:C7:FA:6C:23:6A:3C:6E:B8:E2:48:A8:05
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:90:82:1d:af:b8:8a:94:2f:27:46:fa:e6:34:35:47:39:
c0:de:62:77:29:4a:91:21:cc:25:97:b2:3e:2c:69:69:3d:d5:
3a:50:ca:e8:a6:59:80:03:e4:8c:b3:fa:0e:ac:b8:20:9e:67:
a7:2d:c4:fd:2a:12:ab:75:50:f3:0e:11:f4:47:89:c3:26:80:
96:35:56:79:87:95:08:99:b2:1a:5c:b9:f0:81:f5:3b:24:fd:
48:0d:9f:5d:35:06:ca:f3:b2:c0:3e:4e:88:91:fb:e5:ee:f5:
d8:aa:f6:19:fc:aa:ea:71:64:c8:5e:c8:dd:68:5d:b0:2d:ff:
06:15:59:c0:3e:ef:ee:f7:69:f9:6d:1d:6a:d6:f7:c2:b1:1a:
cb:8a:c4:2e:42:42:1f:69:da:55:23:72:55:00:43:8a:65:f0:
13:33:53:c8:40:ee:37:39:af:4d:16:9a:b9:db:3a:04:85:48:
4a:f5:2f:be:f4:e1:19:80:f5:64:4d:52:49:a8:34:52:97:7c:
18:82:79:f2:96:e4:fa:7f:73:08:fe:c5:53:04:9c:cc:91:d4:
d8:be:07:db:ea:6f:10:75:f2:b2:b5:a5:e7:c1:36:01:65:50:
bf:a0:38:f3:26:72:6d:d9:20:1b:55:49:c1:66:c1:9a:39:38:
80:66:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:41 2026 by rpki-client