Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: GGfUSmk/4aNuGTdgvLPOnEFxd2FqMl4NkTY9p6cjTIk=
Subject key identifier: E9:A4:8B:08:F5:ED:DE:D5:90:E1:6F:52:49:82:8A:C9:60:7C:F2:A4
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 019D359AE0CF179886E61746F42A02AC3CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 189E
Signing time: Sat 28 Mar 2026 18:00:35 +0000
Manifest this update: Sat 28 Mar 2026 18:00:35 +0000
Manifest next update: Sun 29 Mar 2026 18:00:35 +0000
Files and hashes: 1: 1-AOMCdmeoYbt2ya7aina0jr4jtY.asa (hash: xTwHqHanvk0kgMpXCUgJVeavuxMbD2EF+e+t7yaNRxM=)
2: 3W7usHsAz5z3pRj0N-iDHGm2czc.roa (hash: E4GnjrWRndz3AnBRx+9OaWV9XAb0zCBKRFe07lFMNTM=)
3: F_BgJOvocs04aWFuQm0POmDC4qk.asa (hash: 8pzNWyrC83klHScR8mmfAawPECea/FNnp40sU7XiI9U=)
4: GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa (hash: 3Lkr3jjmSNfu4xmvpJepQZV62v8KdzELhqGFYD46GB4=)
5: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: Tp5aSBYd1a+jvudqd7KrVNDsKxyCY5Z561OYJ63yt+8=)
6: m0G5GX11-PLi8Cf5dbRKsch6VxU.roa (hash: B5VOYp4J4pteli5ym2in+54bvDMlgr4itugyDjzngoo=)
7: o1nw85DsZ7czict7FbvJ_kQ779I.roa (hash: SMVCZ8WXzySWtmomiDw5Tx85wLb4riJVskzdAhjKnkA=)
8: s8RwLaAcYW-FcVFkTHdO592EBJw.roa (hash: 23Vx3ChhQtBmCL55miGjdzYucRN+3e2NsCi7uSICISw=)
9: x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa (hash: WjqVws7+vV9QS4+QUh1ff5JcBRwxUgUec5H+AxoP0GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9a:e0:cf:17:98:86:e6:17:46:f4:2a:02:ac:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Mar 28 18:00:35 2026 GMT
Not After : Mar 29 18:00:35 2026 GMT
Subject: CN=e9a48b08f5edded590e16f5249828ac9607cf2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:22:f0:c9:6e:67:47:68:bb:4a:01:e6:2e:
73:6a:37:94:67:1b:67:e7:88:f9:85:28:56:65:74:
69:1e:73:57:b7:e4:59:23:d5:f1:09:f8:1d:df:34:
fb:a3:31:86:95:42:e7:f9:7f:51:71:e7:65:8a:86:
79:90:70:f4:22:6a:3f:cc:48:7a:3c:f7:0b:5e:30:
1e:7c:f7:d0:c6:b4:89:31:ba:4e:b8:0e:b0:f9:db:
0d:64:b3:17:1c:b3:23:52:a9:4a:1a:c2:51:14:1e:
90:b9:51:16:88:09:37:e8:69:0c:52:c3:db:09:ef:
4d:3d:9e:02:79:54:7e:5a:e3:69:16:f7:2f:40:88:
6b:d1:e5:39:fd:26:9d:d0:18:f3:97:16:db:90:bf:
b7:46:9d:b1:4c:ad:01:05:a4:cc:6e:59:d4:03:59:
64:16:fa:e9:82:88:b1:bf:8a:41:bc:30:37:4f:d4:
50:d6:73:11:e8:80:65:26:d2:e4:4f:75:28:dc:7a:
f5:42:21:4b:0a:b2:c7:13:d6:8d:55:44:cd:ce:8d:
00:aa:90:3d:02:ce:a1:d9:86:92:df:8b:48:a1:1e:
19:ec:9e:5a:38:79:5f:83:d6:c9:87:2d:3d:b5:30:
a3:01:b2:23:1a:60:30:8c:d2:d6:8c:02:23:5c:34:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:8B:08:F5:ED:DE:D5:90:E1:6F:52:49:82:8A:C9:60:7C:F2:A4
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ab:5b:87:08:36:fc:09:40:54:a7:59:e6:5c:2b:33:17:0a:
94:d4:d3:38:7f:19:6b:e2:68:11:20:45:63:4e:ff:52:db:8a:
89:5c:6b:2b:58:ad:7a:ef:65:15:ca:ee:a5:95:2f:e6:15:a5:
d4:20:5a:4f:5b:8f:38:7d:70:f5:0c:b1:a2:d5:40:22:1a:a1:
24:53:1a:dc:98:79:7c:5b:c3:9f:c8:fa:df:85:5c:dc:a2:08:
52:c4:4c:f2:ac:06:96:57:d9:6c:09:92:9e:86:5a:84:cc:47:
4f:fc:02:d6:2b:5f:49:91:fa:af:d3:d7:4e:df:92:85:33:c5:
bd:de:db:ab:11:a3:43:ac:70:44:67:29:87:8b:1c:a7:79:e3:
a3:d2:d3:eb:42:85:62:ad:22:0d:98:fb:72:99:76:68:6a:ae:
eb:07:15:5e:48:02:15:00:85:c3:69:68:38:00:2c:c9:02:4e:
56:0f:22:b9:e6:8c:03:12:3b:af:0c:5a:d1:45:61:28:8e:95:
53:77:90:4b:44:7c:3b:bc:d8:4e:5e:91:25:9f:b9:f5:81:e8:
58:e2:b5:b1:e2:45:a0:6e:3c:2b:91:39:8e:3b:d4:02:e1:b6:
26:6d:16:0e:0a:3b:44:95:bc:77:a1:3c:06:b6:ac:b5:d8:2a:
8c:91:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:14 2026 by rpki-client