Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: HLhLnX7zytGJrX7P76iutT9j9vfnS744CqbWto7SlDw=
Subject key identifier: 97:87:68:8B:3A:A8:52:CB:5C:F7:F2:D9:EA:0A:75:14:29:41:E0:92
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019D37F6FD406F33385C720F440192B35B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 10E0
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 1eDZpSCBr/ZWga3HApKMCn5aVKetuLyFUPkm3rK6O7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fd:40:6f:33:38:5c:72:0f:44:01:92:b3:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=9787688b3aa852cb5cf7f2d9ea0a75142941e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:9d:9e:3d:00:9f:c7:e3:37:f0:b8:25:d9:
f3:2f:bd:6c:f1:74:7c:d1:68:74:1b:af:e9:4d:71:
5b:13:1e:33:4f:78:30:b7:df:6f:69:f2:b7:9f:41:
56:02:ab:38:76:78:06:5d:55:31:7e:0a:d3:79:b9:
9d:c3:22:e9:27:11:03:3c:d4:b6:50:c3:3e:58:ae:
2d:8d:0c:94:a8:85:d2:f3:06:df:eb:51:c5:89:85:
41:23:48:02:86:a5:76:52:06:c7:78:24:16:57:e4:
4c:c6:ed:a6:6e:d3:e0:35:6f:4e:02:f0:ea:77:e4:
f4:38:0e:f9:40:50:37:64:9d:45:2c:ea:6d:9e:08:
03:84:b6:17:a1:94:d8:fb:a2:aa:9a:54:c5:90:d9:
a0:c0:69:b4:66:39:66:d5:c7:2d:78:42:44:02:2f:
f7:56:56:56:96:34:da:60:c6:c5:19:21:da:49:b2:
3e:ec:3b:1f:d5:71:18:82:94:2e:65:e2:f0:ea:32:
61:e5:04:7a:bc:58:56:a6:aa:f7:fc:28:13:e5:3f:
7b:d7:d3:7a:90:05:b0:1f:01:95:d6:6c:48:9e:5b:
b4:9b:1d:7b:d6:b6:19:09:0a:c7:3e:18:95:f3:8c:
91:6f:92:27:80:44:e2:98:fa:d9:5e:c0:3b:40:48:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:68:8B:3A:A8:52:CB:5C:F7:F2:D9:EA:0A:75:14:29:41:E0:92
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:26:33:0a:91:a1:82:64:29:ff:77:75:d4:b0:0f:1d:55:
07:75:b6:da:8d:1e:2f:5d:73:39:da:4c:aa:a3:a5:79:55:62:
48:e9:1f:8b:f1:dd:c4:7d:4c:4b:96:a3:bd:34:a5:f2:91:ad:
21:cf:ef:e1:c6:a7:f2:c2:45:1c:e2:99:66:43:41:63:18:69:
6e:36:70:d1:48:8e:b9:0c:84:3b:09:7c:53:27:0b:a9:16:7e:
ce:20:c2:df:cb:15:cd:34:79:a7:33:f2:e7:64:c6:f5:7f:38:
90:3a:06:0f:ca:81:3a:a2:46:3f:dc:41:e7:c8:a9:4b:cb:4c:
b8:d9:8f:0c:f3:b3:b1:d7:1e:ae:36:7c:43:89:2d:d4:89:a3:
a4:36:06:ca:b7:b9:9a:e2:a5:f7:42:b5:5d:6f:95:e7:99:8e:
e1:d7:ea:6d:e8:e1:bd:62:fe:7f:93:e7:58:85:0a:ae:ed:0a:
ea:95:af:af:bb:b0:fa:1d:f1:fc:a0:d9:5e:52:67:f4:d1:c8:
49:7a:cb:3a:0c:85:86:ee:9d:9e:94:e1:4c:56:9b:34:2e:6e:
72:d8:55:43:cc:46:af:46:87:4c:d6:65:2c:ab:00:df:60:1a:
0c:13:c5:28:d8:5a:bb:28:98:23:ed:2b:ef:a9:26:cc:f2:b4:
44:eb:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:42 2026 by rpki-client