Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: TC6vSQXeDPEGMoEUfU1jUBkwJcAVgMvTohJEwmEc02U=
Subject key identifier: 05:A1:37:BB:75:00:FD:C6:C7:9D:70:52:D5:84:A1:93:6D:FE:F8:F8
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019D1233B8DD2EF9587BD91ED0C1E36D6420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 187E
Signing time: Sat 21 Mar 2026 21:01:12 +0000
Manifest this update: Sat 21 Mar 2026 21:01:12 +0000
Manifest next update: Sun 22 Mar 2026 21:01:12 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: SLLWdxeRj7rXzDXJVTwA1dbe1i2VXovdXMwdJQeFB24=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:33:b8:dd:2e:f9:58:7b:d9:1e:d0:c1:e3:6d:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Mar 21 21:01:12 2026 GMT
Not After : Mar 22 21:01:12 2026 GMT
Subject: CN=05a137bb7500fdc6c79d7052d584a1936dfef8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:6c:35:f1:f9:2a:ca:02:3c:46:f1:fd:f9:
4f:d0:88:ce:c0:a5:d1:11:48:8d:b8:fd:19:0c:db:
14:66:53:e0:1a:3c:1c:85:83:45:6e:53:e5:5d:e6:
97:c2:85:cd:0e:b4:3e:86:f7:ab:21:7b:9f:bc:9f:
ac:f5:2e:95:b0:9b:66:05:18:60:b3:5e:f6:97:d2:
c3:db:96:21:6e:80:14:97:b3:f5:11:4f:42:76:6e:
08:40:b5:5c:17:51:93:b5:ad:30:2d:c4:b8:11:af:
35:7d:eb:c2:83:e5:34:7a:b2:a2:85:4c:78:04:8d:
3e:20:51:8d:56:04:9d:87:bd:f0:15:43:11:2b:d2:
90:db:3e:03:00:ae:2e:07:53:e4:37:60:a1:db:c2:
5a:f7:47:d3:a7:88:6f:2d:7b:f9:59:29:08:e1:7a:
cd:26:a8:15:b0:82:cf:36:07:a0:d6:77:f8:2e:ae:
ef:18:21:1a:0a:e4:40:ff:68:cb:45:49:21:7f:c5:
e9:d7:13:2e:a0:77:22:d6:ba:e2:c1:15:7f:4c:f3:
0b:5c:05:63:26:8a:2e:61:4f:d1:ff:54:ff:4c:78:
2c:4c:a3:19:7c:b7:1f:97:20:c5:e3:ed:6d:e2:46:
93:b8:4b:a4:06:6f:86:de:90:28:dc:22:f6:fa:62:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:37:BB:75:00:FD:C6:C7:9D:70:52:D5:84:A1:93:6D:FE:F8:F8
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:17:4a:63:1b:36:71:2b:cd:cb:bf:43:9c:4e:ba:20:7d:dd:
a0:95:3f:87:20:5f:08:a9:b9:df:1b:b4:73:f0:6a:d9:3c:33:
eb:db:61:ac:29:2e:b2:bf:3a:37:00:e6:e4:2d:39:0e:89:ee:
3d:a2:5d:f9:dd:7f:ab:61:b4:11:fc:ad:38:b7:8f:d6:b2:fd:
87:b6:99:ee:d0:c0:88:a1:12:65:fd:3a:65:d8:5a:53:6e:97:
b2:1e:20:22:bf:60:57:cb:a1:23:bf:82:40:4b:ae:50:6d:3f:
a9:a8:97:fe:ba:78:e9:46:ec:a2:ff:a0:e0:bb:46:cb:ae:70:
f9:49:aa:7e:b4:f9:c4:5f:53:85:23:46:a9:e1:f4:74:a6:e1:
63:5e:b0:6a:e6:96:0f:5e:9f:4f:b3:82:e4:f9:d9:a9:03:7a:
d8:97:3f:ba:e5:ca:60:1f:b9:60:a5:57:9f:cf:2a:5c:f3:35:
e3:45:7f:e0:53:a7:e5:19:2f:0e:f7:07:31:b4:43:09:f5:de:
5c:7f:8b:57:d2:da:51:30:58:f0:c1:bb:9f:47:f4:0c:de:43:
20:37:a3:f9:03:74:91:3f:3a:0f:4f:74:f6:50:0d:76:85:76:
b2:6f:cc:a5:51:66:fb:44:05:29:a6:71:25:e9:a0:a4:ea:15:
81:bd:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:38:09 2026 by rpki-client