Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: FyUrZ5ueIuKNJ8nDDEywejAO6QKrqWimD9Haxq6GhWE=
Subject key identifier: CE:A7:32:D2:21:39:D7:FE:65:51:CA:5F:8F:23:61:7D:66:D0:27:3A
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 019D3752A8C752EC564B579CC18679B892AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:57 +0000
Manifest this update: Sun 29 Mar 2026 02:00:57 +0000
Manifest next update: Mon 30 Mar 2026 02:00:57 +0000
Files and hashes: 1: 1f8yNz_6CeZb2_cKtFYjakkUYu0.roa (hash: CQrSvmHUDyMuGsezkRUoXIh9i5m3+0vp+bw6nOrytp0=)
2: eByvcSZKJ0C054yav4nbHodBBYg.roa (hash: iRSBboUDEVdKSWCvgZE0xP0Y8IB0acvS1GqTMfNLmr8=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: +HrrDPsGkFEbbvYq/mxe2/cqtGjjSuM+xpq999Ac1Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a8:c7:52:ec:56:4b:57:9c:c1:86:79:b8:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Mar 29 02:00:57 2026 GMT
Not After : Mar 30 02:00:57 2026 GMT
Subject: CN=cea732d22139d7fe6551ca5f8f23617d66d0273a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:ef:f1:eb:7a:df:9b:01:c7:ca:de:47:22:
25:40:80:25:77:41:f8:b7:6d:d0:79:3a:b9:df:04:
2e:e9:d7:cc:f0:48:bc:60:c5:a7:8e:45:8f:cd:4c:
9d:fe:20:23:53:76:58:c5:7e:02:2c:09:3a:ab:e7:
2e:5f:93:de:e9:66:6f:70:4a:70:da:45:c2:35:d4:
7c:a0:65:03:5c:f0:46:c4:38:72:af:05:54:e0:22:
4a:07:c4:ff:5f:cc:74:65:4e:c6:d5:49:6e:44:fa:
79:c4:55:ed:75:ad:43:fe:c8:1c:63:fe:0b:4d:fa:
97:5d:09:17:3d:75:ad:51:8a:d3:60:76:c1:eb:32:
c2:8e:14:43:e4:ff:f6:59:d6:49:ab:6a:ba:27:c0:
41:16:08:a0:cf:ed:ab:ed:d4:83:ba:de:bb:90:4d:
15:20:b2:71:d6:5c:98:70:d9:52:b0:4a:15:06:d5:
7e:68:95:91:50:5f:bd:5f:be:d3:b8:72:2d:33:49:
a2:b7:73:a2:5a:d5:58:c3:05:6d:10:06:cc:29:e1:
4a:d4:86:7f:e0:a2:9f:4a:64:c4:88:6d:6a:a2:20:
45:32:62:77:7c:74:8c:1a:18:dd:5c:9a:ae:dc:8c:
fa:b6:e4:bc:db:91:cc:b4:aa:cf:d4:3e:11:df:ba:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:32:D2:21:39:D7:FE:65:51:CA:5F:8F:23:61:7D:66:D0:27:3A
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:17:f4:a1:c0:8d:01:3b:a9:42:ba:6a:fe:e7:98:60:66:
cb:92:f2:16:ff:8e:74:33:0b:68:db:01:4f:9c:62:15:80:a0:
83:28:ae:9e:93:cb:6b:d4:ad:2d:73:1a:9e:a9:8d:c1:1b:27:
67:12:f2:46:18:f6:f6:8c:73:cc:53:92:5f:b3:8f:02:65:4e:
2a:c6:53:69:f3:97:50:74:0a:08:5a:bc:9d:57:82:ee:6b:a8:
3b:bd:8d:28:f8:cb:01:90:c4:58:02:ad:d0:24:81:49:1d:62:
93:84:39:a4:f5:e7:15:ed:f7:87:21:7d:75:3e:8f:67:83:86:
3e:c3:bf:1b:2d:33:e1:e0:a4:a6:97:c4:ff:70:e8:b1:9d:55:
05:a6:2f:b3:60:1e:3f:87:ed:21:87:e1:05:50:fc:78:8a:76:
51:cf:5f:6b:68:bb:f1:b5:a0:9b:bc:ed:79:ec:51:85:00:df:
42:b5:a0:9b:3b:85:35:18:89:39:41:ab:06:24:5c:b1:99:2e:
ca:07:fb:8d:f6:6e:52:0e:1f:7c:13:56:d8:8a:04:55:5a:62:
5d:23:64:5e:03:63:5e:91:f0:bc:d9:57:5f:88:f2:15:87:17:
fa:a1:95:c7:bf:10:36:08:67:4e:c6:72:75:06:b6:b7:2a:d7:
c3:5a:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:50 2026 by rpki-client