Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
File: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft (raw, json)
Hash identifier: gDWRLax2k+/0bMM40VUm9aiv+bsSNtUQuFdXGTM5p9E=
Subject key identifier: BD:C5:93:36:57:24:D5:CC:91:53:78:5B:D4:0F:17:B9:F4:20:BB:F7
Authority key identifier: 91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A
Certificate issuer: /CN=91521bd62c46e9943ec80cb774126d1da8393f3a
Certificate serial: 019D382E6E381D8DD6080203A326E4BCC743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
Manifest number: 010E
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: UOrL-fWfhp63hwmPTmyope9X71A.roa (hash: nFYQ4BgnX+b8v7k7hkFu7iArSobGMSHyFyRY+Uph3/4=)
2: kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl (hash: 2+paVjkGU1CRkdLyDkOvTWymvmUnPlxNfPv5iNRSfOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6e:38:1d:8d:d6:08:02:03:a3:26:e4:bc:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91521bd62c46e9943ec80cb774126d1da8393f3a
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=bdc593365724d5cc9153785bd40f17b9f420bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:88:c1:f5:a3:96:75:e7:0b:d4:50:65:32:
c6:f6:8d:d2:d9:2e:55:cb:2c:a1:49:46:be:dd:e7:
14:ca:62:31:1c:86:e5:80:f0:88:b1:73:f7:5f:44:
dc:49:01:82:63:35:51:02:62:60:f1:b9:da:5f:86:
b2:2f:ca:db:d1:a5:e8:4a:37:62:dc:7f:d9:eb:15:
24:59:1d:78:81:93:97:d4:15:b2:08:f6:8f:63:b2:
ea:c5:1d:70:d7:b4:1e:45:1b:58:8b:96:bc:2a:3c:
c4:69:48:4e:fc:0b:6a:1e:0c:9c:92:ce:7f:0f:e1:
e1:c4:3a:1e:a3:10:9c:dd:93:66:5c:d0:22:a7:4a:
b5:49:6e:87:7b:c7:35:f2:8c:c5:be:31:cf:ad:d8:
2c:ec:5e:39:60:8e:4a:82:d3:f6:db:1f:5b:9a:e1:
3f:4e:c6:47:8e:64:34:c8:e4:14:62:41:76:03:68:
d0:85:88:bd:bc:57:42:8d:70:c8:4e:9d:22:e0:38:
fa:d7:8b:24:31:b0:fc:b7:a3:5b:54:d1:73:be:45:
d9:c6:14:1d:5f:65:ce:4c:d4:14:1a:ed:ad:8e:ef:
27:9c:91:a6:f4:f7:3b:61:d2:d2:60:c9:fd:83:ee:
95:b1:6f:30:63:26:78:31:09:6f:53:fa:73:83:85:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:93:36:57:24:D5:CC:91:53:78:5B:D4:0F:17:B9:F4:20:BB:F7
X509v3 Authority Key Identifier:
keyid:91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:55:71:55:25:32:09:ef:41:be:95:a6:55:08:ac:0c:29:
11:f3:44:fd:c1:e2:db:f6:6c:a3:8c:37:e4:ae:31:9b:12:80:
4d:da:b6:57:80:8a:5f:1f:43:aa:50:26:bc:e1:3d:75:9a:96:
95:44:ee:5c:8d:29:23:1a:99:3c:34:2a:dc:1c:e5:dc:5d:f2:
b2:14:8c:72:5b:7d:04:e1:1c:78:45:77:29:f0:23:b9:44:d6:
f0:c5:1b:70:ae:f8:80:a8:16:07:f3:08:a9:69:8b:99:86:d5:
1d:7c:71:5a:0f:7c:ff:61:5b:5f:31:fd:f4:77:81:2c:bd:49:
62:d7:ff:1f:be:68:9a:6b:57:26:c4:60:e8:84:72:08:31:70:
20:69:81:9a:e3:21:ed:bc:74:5e:93:6e:52:9d:57:3e:6d:00:
4c:6a:49:9a:89:a3:72:0c:9f:c3:22:16:37:03:3b:36:03:21:
58:1e:8d:e2:13:38:86:1c:b3:68:88:78:2e:4b:d0:f6:f8:c1:
44:ac:eb:87:b0:b3:4f:c8:b0:a8:a8:14:b8:80:95:b4:61:6a:
36:58:c2:8c:9e:6b:59:0c:57:36:20:13:14:56:e1:d7:7c:9b:
0c:ec:7d:0f:a8:01:db:70:f5:c8:51:bb:f3:47:22:c5:a9:0c:
3b:2b:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:34 2026 by rpki-client