Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: BdeqWWszuxL7YuxTkDhy4kbaNpVhW1NAzn4LP98C6gU=
Subject key identifier: 2F:2C:A1:C8:B9:49:09:6B:00:8B:12:09:B4:69:9D:A1:8C:B3:9D:98
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019D378990A4ACF4B28758402989E0C34CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:55 +0000
Manifest this update: Sun 29 Mar 2026 03:00:55 +0000
Manifest next update: Mon 30 Mar 2026 03:00:55 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: Ms/6G+xTir1hIOGNslnmhmh/pUgeR7oGBvNFO9FoJw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:90:a4:ac:f4:b2:87:58:40:29:89:e0:c3:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Mar 29 03:00:55 2026 GMT
Not After : Mar 30 03:00:55 2026 GMT
Subject: CN=2f2ca1c8b949096b008b1209b4699da18cb39d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:00:f7:c4:c6:e8:82:92:ea:dc:61:65:8f:
04:20:60:5f:0b:3e:f2:11:a0:87:1e:f5:1a:5d:3b:
bd:4a:93:dd:b8:01:86:87:df:09:62:13:47:b6:b1:
98:bb:5b:da:d5:ae:08:49:18:a1:f4:5b:8c:22:7a:
77:c9:61:2a:64:0f:f2:5b:20:bf:30:63:8d:a6:f9:
31:6e:ac:c4:fc:ff:c0:82:13:23:4b:57:ae:8e:89:
c2:e1:0c:83:f9:fb:91:47:47:b7:17:b2:1a:58:79:
74:7c:95:ae:b2:81:5d:89:1d:a0:bd:93:92:25:0c:
bc:ea:57:1e:c3:85:fb:62:52:88:9b:07:91:bf:6b:
cb:b7:74:a1:aa:7f:3b:be:56:78:90:c1:7d:e0:14:
3a:ab:64:76:76:a5:55:58:82:84:82:10:d9:98:46:
0c:da:83:40:97:e1:b1:c9:49:c8:46:0b:c5:5c:74:
4f:d8:ed:80:69:69:64:5d:05:48:f6:b6:c2:0f:f2:
10:6e:b6:43:40:7b:4f:53:83:dd:c2:94:b5:76:6e:
17:54:0d:5d:32:24:1a:ca:ba:4f:84:b3:c8:0f:ab:
69:8d:3c:a9:a3:c4:36:3c:f1:d1:69:1a:78:ed:08:
1d:b7:51:2c:db:53:43:b6:b8:6b:8e:ad:7a:09:23:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:A1:C8:B9:49:09:6B:00:8B:12:09:B4:69:9D:A1:8C:B3:9D:98
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:06:41:d7:d1:59:d4:d8:01:fe:1b:bb:8e:8c:48:19:9f:d3:
8c:57:84:7e:e0:35:04:84:ca:d6:7d:dd:ef:67:16:63:62:4b:
72:33:31:95:53:88:f8:71:7f:67:ac:d2:1c:3c:0a:31:8e:71:
0e:32:83:75:43:53:90:5d:a1:a6:27:55:68:af:62:0b:d6:8a:
d3:9f:79:94:4d:b9:2c:96:42:16:8b:6a:61:05:7e:39:7d:57:
8c:c7:f3:66:5f:a2:72:a4:4e:95:d5:39:81:f9:80:cc:48:01:
4c:bf:8d:a7:bd:71:52:64:72:ad:d4:b9:5c:09:a1:20:ac:ca:
eb:18:eb:4a:2a:bb:25:8e:fc:e6:55:19:42:4f:80:b8:f3:73:
88:d3:09:9a:08:08:f2:dd:bb:b6:7b:8b:c5:c1:86:74:06:7c:
11:c4:c7:aa:d8:e3:fa:96:8b:46:07:8a:82:2a:74:a8:14:3f:
c3:ac:cb:4e:c3:13:1a:0f:53:d7:fe:3f:8b:ff:8f:9d:52:2b:
3b:30:03:70:bb:c9:49:b1:1b:42:4c:88:0f:7b:1c:30:9e:95:
07:ac:e0:db:c2:25:2f:c9:36:33:bc:fa:57:b9:3a:9e:01:03:
53:52:ce:1d:7d:4e:19:8d:3c:e2:56:a1:0e:d0:ff:a4:93:13:
40:94:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:06 2026 by rpki-client