Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: rlDDhTPfc9KKZUZ15OC7qf1a7g5oqE9/0PkMBKpX2MU=
Subject key identifier: 34:23:15:A6:87:3A:FF:EE:52:85:11:10:0C:3A:66:9A:C5:C6:0F:78
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 019D378995D4BF38B09926DAAFF8CBEDE467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 0555
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: Rok7bhVcrvMGmCeWCMtB237UrvA.roa (hash: Xpw27Y+b5oWmTMptkoA1gCQxfXLZzXNMTUlev3rzVHE=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: AaZjFvgRhZds5IMSjlx88kFmXn436rKc5P2rSfWPbQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:95:d4:bf:38:b0:99:26:da:af:f8:cb:ed:e4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=342315a6873affee528511100c3a669ac5c60f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:39:3f:f4:bd:49:e3:80:31:6a:f9:a2:05:
a3:1c:b3:fa:cf:ac:34:58:e7:74:0a:4f:40:76:ea:
2a:51:c4:ad:3d:5f:d1:16:0d:70:f8:66:f1:89:21:
f3:28:b2:05:47:24:86:25:46:4f:0f:3f:94:10:7d:
82:48:c8:93:69:7f:6e:d2:7e:51:59:de:46:b5:d2:
d7:b0:75:7b:9f:30:fc:a5:94:03:aa:73:d8:01:f0:
43:a9:2e:a2:3a:c0:16:5f:64:bb:e4:d9:1a:e4:3a:
22:f6:19:54:5f:73:ba:73:6f:2f:51:db:7a:00:cb:
ed:a5:35:6a:40:a5:ed:83:ac:c5:eb:91:42:0c:a4:
ae:b1:31:c7:41:06:c1:9f:14:92:18:81:07:db:65:
c1:2c:bb:84:d7:76:20:d9:c6:89:36:ad:2e:aa:c5:
d3:d6:63:54:9a:32:f6:05:43:39:8d:6c:0d:ff:26:
09:f5:23:a2:48:bb:a8:9d:20:f3:5b:25:30:32:15:
0f:3f:b7:23:ca:f8:2e:df:2b:2d:b0:f0:ef:ce:a4:
db:35:7a:9d:3b:d5:a2:c4:5d:29:bd:d9:7f:81:53:
87:a7:9f:8a:c2:ef:e1:df:08:34:67:cf:95:f2:44:
ab:1d:9a:c9:57:e7:da:89:ae:f5:09:23:6a:85:52:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:15:A6:87:3A:FF:EE:52:85:11:10:0C:3A:66:9A:C5:C6:0F:78
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a9:3d:31:59:25:30:dc:80:2a:4c:62:b9:94:14:fa:e1:0f:
94:cc:4c:b2:bb:0a:cc:c1:92:57:b6:c0:34:ef:1f:53:92:fd:
8b:a5:32:17:d3:af:d9:92:49:15:84:91:e1:ac:a8:c6:aa:78:
0b:6f:93:77:66:43:da:f8:09:f8:b1:50:0b:8a:76:aa:b1:cf:
47:ef:97:e5:e6:41:8d:ce:e6:6b:90:92:9a:ae:7d:d9:fc:b0:
99:7f:88:46:29:21:9a:ec:ab:4d:98:21:bf:2d:ab:78:b5:3c:
ae:df:06:4c:91:4d:fe:60:6a:f1:78:6e:ef:a7:9a:29:4e:03:
80:68:2f:d6:7b:66:31:f0:41:2b:b3:f8:5b:1e:87:e0:29:a8:
0e:e3:7e:7a:3e:c1:ec:c7:02:80:a9:3b:49:1e:91:6c:3e:a3:
55:b3:a8:2d:a8:59:20:3b:e6:af:b8:73:f3:2b:9b:f1:72:b9:
c6:a6:25:ff:1c:48:72:54:1d:7b:9f:2f:d2:9f:9b:d7:b2:19:
75:fd:f1:64:e9:85:d7:00:f7:d3:67:46:c9:34:3b:a6:8d:45:
5e:20:48:98:ac:a9:e7:30:1c:4d:eb:79:ee:76:21:ea:fc:0c:
c6:3e:b5:bf:f1:65:11:eb:fd:5e:94:c0:7f:8c:17:1c:83:88:
d2:4b:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:19 2026 by rpki-client