Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: 8KV56ADEs19Ns/mBE2u5u477QCj5SyAUts5tbiCmotw=
Subject key identifier: 23:0F:54:AD:A9:09:F3:52:B4:C7:EE:1D:11:5B:9B:5D:48:05:AE:1B
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019D3941430FE3ABE7E5F1DBC3D3ACF20E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa (hash: JbEdz7DRUOFf0b29xjdSZVDAgz011LT+vbXjqHH3Ipg=)
2: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: HzZEilD0Rx8Bdc0ClsPS9odiUTg/Pt4iPlGkaOsh+pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:43:0f:e3:ab:e7:e5:f1:db:c3:d3:ac:f2:0e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=230f54ada909f352b4c7ee1d115b9b5d4805ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:a0:e8:bb:91:d8:9d:b2:1c:36:a8:d5:b7:
5f:a3:f7:88:93:ba:0d:ad:93:a2:6f:3f:c2:f8:e3:
16:4b:7b:b3:91:41:13:64:f6:a3:fc:4c:94:a2:32:
95:88:2c:5d:bf:3f:a4:70:a6:f0:72:9f:ae:0d:48:
72:50:40:bc:be:f2:e6:3d:29:5f:ee:25:53:03:cc:
4a:f0:c2:1f:ad:be:f2:0a:b1:a4:da:8e:9f:78:2d:
8d:7e:f5:53:6d:c0:45:0c:12:8c:ae:e0:70:22:11:
4a:90:d0:5b:ec:4c:c9:52:4e:84:0f:c4:d2:ed:79:
6e:92:39:3e:2a:47:da:30:a3:9a:72:83:20:32:9f:
4d:80:fe:48:0c:20:2f:dd:b9:ad:75:85:12:18:bb:
79:53:57:6c:8f:78:9f:8b:85:fe:30:f2:36:50:67:
b3:d4:13:ad:cc:fc:42:3e:c0:41:40:0f:5b:28:f5:
cd:c1:d8:76:98:f9:43:eb:fb:a4:c9:40:1c:80:49:
53:a3:dd:59:6b:4c:8b:90:b7:8e:64:37:7c:29:65:
58:49:8a:d7:b4:ce:ca:5c:2a:d4:ce:dd:62:b1:d0:
90:23:70:0f:1f:d6:e7:35:ed:31:a3:87:05:39:7b:
b6:9a:ee:37:0e:9a:1d:e3:bb:aa:84:a7:7b:5b:15:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0F:54:AD:A9:09:F3:52:B4:C7:EE:1D:11:5B:9B:5D:48:05:AE:1B
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:82:a7:e3:6b:4b:3e:c4:e5:8d:a7:89:0a:49:70:d1:77:19:
06:85:c6:7c:f4:c9:4c:8e:06:60:60:7c:09:48:bc:f7:38:4b:
ca:d1:50:09:db:ec:76:1d:e4:f5:95:ec:4e:37:11:3a:17:7e:
32:d5:d9:ca:ce:f2:14:08:37:6d:dd:07:90:03:cf:95:69:52:
dd:a0:c4:0f:90:46:b8:41:8a:b9:f2:0e:50:5f:23:e6:bf:78:
da:10:c6:33:e6:c6:4e:1a:27:38:e0:f0:c1:27:1a:88:e2:c5:
03:55:c3:6f:39:8c:a0:10:15:65:da:e2:b0:04:60:d5:ac:a1:
70:e0:68:ff:47:8f:4e:9b:2c:32:2f:ba:01:a3:36:ad:a6:fd:
08:45:be:5c:03:c9:a4:81:b5:9a:80:57:57:f5:e2:63:9e:f7:
ab:41:b3:dd:b2:e1:43:b2:2b:41:b8:ee:22:50:fa:6b:50:9c:
72:10:88:1f:0a:fb:ae:24:f0:48:66:91:e8:e1:1b:92:ad:a1:
de:f0:08:f7:32:f4:45:72:2c:50:06:f0:f9:5a:21:b6:13:42:
eb:7e:22:a4:e3:22:57:80:95:94:52:85:fc:aa:66:64:1e:4e:
14:73:cc:78:a3:b7:14:6c:2c:44:a9:23:bb:1d:2f:1b:cc:34:
72:94:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:42 2026 by rpki-client