Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: 8h+OQc4Ln9DYjV2GmQdoJVS2jDFSTGiAPPv9I0X51UQ=
Subject key identifier: D6:CF:2E:55:59:30:E2:92:0C:94:FF:EF:66:B1:32:C6:E0:82:79:2F
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 019D3865941097D855D9090ACFBF87E370AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: H6Y3_w5a1_i-L1M075HehP8YsoI.roa (hash: uNroeOFalDlUw3uGgFmeF8VXUs3UXidLQdLtm01sWMc=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: MaCKPiQSpfJGr+o5ngziUwEYiFlMWXynn4m6jqVqMAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:94:10:97:d8:55:d9:09:0a:cf:bf:87:e3:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=d6cf2e555930e2920c94ffef66b132c6e082792f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:ac:17:63:44:73:c2:54:ba:3c:07:e7:69:
da:81:86:5a:8b:a6:3f:05:db:43:bd:6b:4f:57:86:
bc:f5:5c:9f:c4:a7:83:ab:e7:8f:2d:bb:d2:ef:74:
69:b1:86:03:6d:20:aa:af:f2:f5:82:4b:58:6d:99:
a7:ca:ec:68:c1:34:10:56:ac:37:91:cd:d5:9c:42:
bf:5e:b3:83:f9:5f:7a:9c:94:c8:16:0a:03:5e:70:
16:a3:3f:d7:a3:84:26:7b:3c:71:8d:fa:45:27:f3:
0b:ea:95:39:a3:22:e9:ec:e2:5f:44:8d:fd:3d:bb:
7f:f1:34:f6:fd:85:7f:2c:ed:05:da:ef:3e:72:70:
6e:c0:54:b5:8a:8b:35:c5:a1:ac:cd:e4:8d:e3:f2:
9d:e0:67:2e:4f:db:49:d7:2c:28:2a:54:96:ab:cc:
ce:c6:51:e8:6e:bc:a5:d8:ba:1c:8d:5e:6d:8b:2e:
fa:08:7b:ab:78:b4:eb:8d:ba:e9:2d:d0:ad:31:87:
af:b4:b4:1e:ef:f5:44:de:a3:bf:14:bd:90:87:27:
d9:e9:f4:1a:eb:c6:cc:dc:35:cb:61:6d:fc:1c:93:
c5:c8:8a:e1:93:33:03:6e:88:d3:3c:f1:e4:22:c0:
42:1e:6b:69:18:62:4c:a4:78:36:5d:0e:6e:e5:9a:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:2E:55:59:30:E2:92:0C:94:FF:EF:66:B1:32:C6:E0:82:79:2F
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a3:dd:9a:1f:2f:6b:7f:4b:83:8c:c4:d8:51:db:95:80:1f:
f4:9f:e6:7a:9d:87:74:af:6d:ed:49:de:0f:c8:a2:bd:6b:33:
24:51:5e:ae:f0:9f:4e:95:30:6c:67:00:dc:bf:f0:3b:da:fb:
50:64:57:7d:60:0f:32:d4:84:2d:7e:64:99:a9:c6:26:bc:d6:
d8:72:36:3b:aa:1b:ed:08:c4:8b:ee:51:3d:42:a8:cd:5e:f9:
9b:db:ce:04:a2:3f:7b:f1:91:91:59:8c:18:d6:4a:c9:f5:87:
b9:ff:9a:6b:5e:f7:0e:44:1e:52:52:97:bd:33:10:89:b8:0a:
84:81:6d:6f:e0:19:fe:44:a1:d8:51:4d:0b:41:f6:60:68:a7:
bf:76:0d:0d:24:54:61:b4:f7:8a:e9:82:18:63:a0:77:a2:ef:
29:60:79:68:73:ca:0c:59:16:6c:05:0d:04:49:d3:c0:06:a5:
96:b9:54:da:e1:a2:3b:1a:0e:c1:b5:fe:4e:4f:35:02:52:fc:
ba:1f:15:76:b1:a1:03:70:43:00:5d:d9:1f:cd:8a:7b:40:9a:
67:78:24:6b:7e:d3:3a:ea:b1:8c:86:59:0e:49:9a:05:95:96:
3f:39:26:fd:d2:f4:68:66:79:9a:22:56:09:f6:33:2b:2e:43:
f5:65:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:17 2026 by rpki-client