Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: Kum6l3gZX87wfaXp0jXQ2GCdX+uB/3qfaZXhqy+Idt0=
Subject key identifier: 16:E7:0C:7E:1F:6C:19:03:E6:F2:FA:71:6C:6B:7D:E3:CA:17:1B:05
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019D37F71EF2AA36F4FA6A72B77442787CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: 0nPKlV2FgZ0LZAZQ71hQLBw38Uo.roa (hash: Fb/Fjfm/zNM0E1C+LzpEdYLGiz1+AVF8bxpn6ETeoj4=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: uKSVObBDS6wat2OtQZQsYG/1TtN9YH5BbA2kHxSDocA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1e:f2:aa:36:f4:fa:6a:72:b7:74:42:78:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=16e70c7e1f6c1903e6f2fa716c6b7de3ca171b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:d3:4a:36:74:12:78:da:5d:74:8a:b7:11:
9d:df:64:0c:ad:70:bc:39:75:61:aa:04:b4:82:36:
31:9c:ac:97:69:df:66:be:de:ba:5e:01:f5:8a:04:
2e:5d:c9:85:1e:bf:5b:11:1b:ea:ea:e7:b8:c7:9a:
27:de:d4:7d:bb:b8:f7:1f:34:78:11:1f:50:5d:d0:
71:a4:df:15:c3:9a:e7:6f:36:18:c8:61:97:4e:c6:
18:b3:d0:79:35:0b:55:f6:32:c3:e0:36:a7:96:50:
ff:31:d0:fc:67:ce:83:67:c0:72:09:03:1f:ad:bc:
6e:3d:61:e7:12:aa:5f:85:73:86:2a:f8:ce:41:96:
53:43:f6:03:74:6b:ca:22:0c:29:1f:fe:86:bd:27:
43:8a:47:dc:99:2e:5a:e2:5e:7b:10:d2:3e:cc:e9:
48:fa:00:b4:ab:dd:58:8b:ec:2f:30:bb:76:b2:c6:
0f:e9:f0:22:e1:02:e3:69:25:11:15:19:95:32:f3:
5d:94:8b:6e:9e:5c:d1:7e:26:2e:a0:0f:22:27:aa:
83:16:15:3b:99:74:e7:48:33:7c:b5:90:1b:06:36:
eb:02:89:d2:8f:fe:35:68:9a:a9:32:24:1c:29:b9:
38:a5:da:40:68:19:af:49:b5:ec:58:98:c9:f3:93:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:0C:7E:1F:6C:19:03:E6:F2:FA:71:6C:6B:7D:E3:CA:17:1B:05
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ac:8d:0d:b0:c8:b6:c9:91:71:7e:2d:85:24:1f:20:d5:1c:
4a:49:f0:00:f9:67:43:66:e8:40:23:4e:aa:f1:60:17:63:3d:
af:25:fb:f2:ff:c5:de:cd:ce:dd:66:2f:df:66:2b:de:93:8e:
df:1c:5a:ef:ef:f4:6d:2d:2f:3e:d2:4b:5a:f2:bc:d3:e0:a1:
3e:22:a1:3a:bb:8d:ac:0d:a4:b9:95:c8:1e:88:a6:d5:26:a3:
e6:b2:9a:4d:39:af:cb:9f:72:5c:2a:ef:77:14:c0:f7:a6:5e:
d1:71:9d:83:87:62:c2:05:e2:66:0f:42:25:57:72:63:bb:fe:
19:65:2e:6f:ea:d2:98:bb:23:66:63:62:40:cd:ff:24:e3:c2:
30:fb:73:23:da:40:34:4d:5c:b4:d0:1f:6e:c9:75:f7:9f:16:
21:46:22:1a:0b:d4:ea:78:5d:d5:5c:2b:ba:1c:f1:ab:74:4b:
ac:ad:cb:7d:25:46:e1:66:91:f7:9d:fc:bc:84:c2:90:1e:36:
a0:71:32:a6:57:9c:dd:e9:79:9d:1b:d2:46:d4:3d:e4:4f:27:
ec:09:b5:51:0c:fe:5e:2b:61:74:9a:1b:af:11:5b:f3:f2:f6:
b2:f9:7e:9e:64:80:2e:ab:8a:33:f7:13:8a:07:b7:21:ef:da:
04:48:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:46 2026 by rpki-client