Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: SByskUtFFcCpox/PAiNSvyj18mRYSs+qCnuIP+Lw/EY=
Subject key identifier: F4:D4:A7:85:27:B3:BE:3D:FF:58:A4:4A:D2:84:C8:CC:75:91:EB:DE
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 019D38D33FFF03ED9BFC4DC00B6326A46692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 08EF
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: RNm4M6_G_9bDqlzkkkMwOJsXxLY.roa (hash: lqA/RuUKuPMddo9q5IetsxxRlSYvHTaYbQoeU6IOKZM=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: Ip0eARs3IQf/B1fUf0e0JZCspvznglVAfQEf8ulE5KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:ff:03:ed:9b:fc:4d:c0:0b:63:26:a4:66:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=f4d4a78527b3be3dff58a44ad284c8cc7591ebde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:fd:d7:d5:1d:82:78:50:29:c9:22:92:e9:
f2:d1:c7:e5:2f:ef:42:4e:20:3c:73:10:50:4b:17:
5a:37:2c:59:9b:84:30:15:7e:11:12:5e:38:c2:4d:
b6:5d:f3:97:d1:d0:6e:e7:77:14:cd:68:4f:1d:2e:
d0:21:47:55:f0:e6:08:a2:5c:a9:96:f5:bb:a2:68:
90:a7:18:3a:a8:94:f4:ac:ee:b3:e4:44:18:12:0b:
84:60:00:b9:ad:01:93:3c:70:6f:69:bb:69:b8:9e:
74:c1:a8:31:9d:1e:3f:82:c4:ce:10:11:2c:41:0b:
a9:80:ca:f9:5e:5f:bd:fd:c5:4b:01:ff:9c:81:29:
30:85:75:47:34:00:9d:b9:dd:7a:73:35:d3:99:c6:
e3:74:37:95:9f:6d:d7:75:b5:e2:a9:46:c3:ce:61:
be:95:2c:9c:c8:d1:68:f9:7a:a0:75:05:ae:f0:79:
c3:15:24:10:7a:20:dd:32:ef:ea:f4:1c:17:28:cb:
b6:84:55:80:ff:d9:c2:6c:d9:11:ea:88:b0:15:32:
5e:4f:4d:c1:48:98:ae:f7:c6:01:a7:c8:de:e8:83:
64:dd:d9:85:4d:8f:fc:b2:3a:eb:5a:fd:cd:1b:d5:
7c:11:98:65:2b:88:ca:9e:79:4a:b3:36:9e:24:c4:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:A7:85:27:B3:BE:3D:FF:58:A4:4A:D2:84:C8:CC:75:91:EB:DE
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ee:eb:4e:94:df:ef:1d:0f:f2:23:8b:c7:88:62:6e:c2:eb:
4b:42:53:b0:ad:0a:f4:1c:50:b8:56:ab:75:ab:da:f8:a1:72:
ea:6d:de:94:40:94:6a:c9:73:ff:f0:bf:42:f1:56:5b:60:ce:
ff:79:19:27:75:80:42:68:96:91:7c:6d:ce:ca:f1:5c:65:30:
6a:4b:b6:48:ce:59:a5:e4:5d:87:2c:c1:5c:74:c7:b9:6f:73:
39:18:15:06:b6:bc:92:4c:21:1e:cb:a3:fe:52:bd:4e:a7:ef:
69:f6:d4:13:3a:08:76:f0:db:61:d6:b3:f2:1d:b0:17:a7:ea:
58:0b:83:97:8f:f7:4b:ab:b8:07:06:83:84:69:bc:1c:5e:97:
3d:04:b0:ca:d4:77:3e:8f:2c:a3:be:27:34:91:d5:42:4d:0f:
88:be:4a:85:0c:04:93:b3:08:63:ba:30:96:7f:28:e3:f0:d8:
dd:0c:ab:7c:cb:60:4d:41:22:b7:ba:40:d6:41:42:df:b1:05:
81:38:c1:fd:25:ef:7f:38:f0:28:73:8d:04:9a:ac:87:57:7c:
23:1c:98:12:46:2a:e2:36:c3:3a:ca:33:36:89:47:4a:72:00:
72:2e:48:5d:57:e7:4d:15:75:30:b8:e1:38:06:90:dd:5e:22:
dc:04:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:41 2026 by rpki-client