Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: CpJaAf3+pQ7Ndj8ZtmFhIsiZbdCEbPs45oWiBUe0cCY=
Subject key identifier: B7:E8:36:BB:33:4C:44:10:61:13:78:DC:15:2A:35:24:F9:3A:40:8A
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 019D390A4991E361ACEA29A194D081862030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 0754
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: KALmMT67NwU+xlT2TJLuA5l83F9wWSmTmH1JdnpHt68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:49:91:e3:61:ac:ea:29:a1:94:d0:81:86:20:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=b7e836bb334c4410611378dc152a3524f93a408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:c2:7c:d1:34:4f:10:31:cc:11:86:70:94:
ec:ba:04:09:85:d7:13:78:54:c2:10:16:c8:12:d4:
6d:e9:80:b2:c2:15:e6:92:df:db:75:46:46:ab:17:
b7:6a:27:69:7d:5e:47:c1:b3:aa:33:3f:9b:e6:43:
c5:1f:a7:6b:6c:7d:41:5a:9f:7c:ae:b3:46:a2:e2:
d7:9e:75:11:d3:05:cf:07:bc:fd:f6:d7:52:27:6a:
80:6e:c3:ec:7c:89:cd:1e:f7:24:f9:05:b3:c1:67:
e0:50:c3:77:41:8d:f9:2b:03:86:b1:6c:20:88:d2:
d0:ce:20:e3:3f:7c:0b:91:ca:2f:e6:d0:44:f9:53:
f8:85:59:cb:e4:ac:b0:55:7d:de:68:92:04:c0:6c:
15:e6:64:6f:78:58:47:03:3e:bb:f7:a3:e1:fd:c3:
5d:8f:86:df:3c:6f:75:e4:46:d7:88:9d:2e:fc:9e:
c2:1e:c3:90:85:b6:3e:24:b4:67:2e:64:0c:32:70:
41:8c:6f:0f:45:35:e6:7e:5c:96:8c:68:27:fa:07:
54:8e:c7:01:68:b4:fe:f6:53:1c:e3:62:76:ce:d6:
f7:84:d0:ff:b2:09:6d:ab:ae:96:5c:cd:3d:c6:20:
32:d2:a6:33:68:a9:7c:94:d8:3d:fe:10:7e:92:d8:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:36:BB:33:4C:44:10:61:13:78:DC:15:2A:35:24:F9:3A:40:8A
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:95:80:be:11:23:1e:6a:ba:62:b9:d8:5b:ef:5a:22:1f:f1:
cb:31:9e:f2:d5:e4:90:88:f4:d3:f4:d4:52:31:e5:2d:8d:fe:
71:3e:bc:12:20:df:dd:ed:15:5f:39:4e:49:50:e8:74:17:75:
9a:7a:73:3c:47:31:b6:1b:56:b5:3a:26:5c:12:db:77:a4:58:
27:66:6d:7d:b9:f2:9a:35:ce:49:f3:95:01:9b:d9:a6:d0:c2:
b9:fe:82:4d:e3:53:fa:45:3d:87:60:a5:2e:39:83:54:e9:e6:
0a:81:05:83:8f:d2:b9:32:85:4f:2b:23:73:6e:a6:5f:6c:64:
1b:8a:87:7e:f4:ce:d9:15:88:fb:49:d2:6f:1f:c2:7d:c2:20:
ab:4f:63:65:ba:02:5a:20:3d:cd:56:7d:27:39:b1:76:6c:a7:
b3:34:40:11:89:05:31:93:53:55:91:95:3e:3b:c6:8c:7d:49:
aa:5d:f8:49:aa:61:09:33:81:93:92:ad:05:d1:6f:fd:26:2e:
62:f7:13:8b:ed:19:fe:60:a4:c7:66:6b:63:05:28:51:a9:87:
81:46:ab:18:c4:c4:c4:aa:1f:43:c6:6e:2a:9d:3f:a8:ab:3c:
4f:0f:58:c2:45:4e:db:86:d9:8e:36:cf:f1:a5:5b:b7:9b:a4:
1d:b4:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:39 2026 by rpki-client