Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: ZgwGEhj6lFpJyfymKP98jvBR353wjAJqoN2A53MmGA8=
Subject key identifier: 72:40:03:88:00:04:82:8E:AF:45:10:8F:C0:9D:DB:4A:85:50:DB:68
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 019D390994D07906E300D37E8A3ADF8A446E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: 1uE9x6kErVCemmvGtU5h92iTdMY.roa (hash: aInWw6Wfhot9N2dvPiHCOhDAZMsuEWsBTYzGqfwz6bI=)
2: gTuD19nmTp2j0NfdVM92eulUz50.roa (hash: m8yAhVyb51tG8BtWITG5vAfuqvzjN7V08miYWQPPSis=)
3: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: WGXlOmpeD7ndFNIZQfx/mPe0SU/R6F2numZwsbn3aH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:94:d0:79:06:e3:00:d3:7e:8a:3a:df:8a:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=724003880004828eaf45108fc09ddb4a8550db68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:08:b9:41:e7:70:ec:ca:26:d0:01:c4:4d:
b6:bf:8a:54:f6:98:42:de:f7:bc:47:07:30:70:f8:
c8:e4:81:70:ef:c7:05:73:40:1f:06:4e:cb:74:da:
b1:df:f1:8f:5b:74:6d:f5:31:6a:b2:26:fa:da:90:
94:ac:bb:bf:58:9b:a6:01:c9:9d:b0:51:c6:9f:be:
42:40:cb:59:52:2b:0e:6f:5c:c2:57:ab:e9:60:ee:
70:40:fa:28:54:d7:b3:be:fc:ca:f2:d3:f4:14:eb:
91:ab:ca:19:d5:33:76:d4:bb:6c:98:e0:e7:78:06:
0d:18:93:1b:63:a9:ba:76:b2:dc:18:67:0d:0e:69:
65:d2:06:87:bd:33:6d:53:f5:f9:98:11:29:c6:2d:
59:29:76:3b:b4:01:41:6d:e3:10:b8:f9:0a:72:4d:
b1:40:91:c8:b6:42:61:b3:6c:fe:8b:d5:43:69:28:
43:dc:e4:f2:c5:d3:c0:e2:c3:f4:b4:d8:b6:25:02:
da:dc:a2:91:bf:2d:9b:38:01:90:6e:23:76:8b:46:
13:50:31:17:47:ce:1e:16:49:39:7c:fc:40:42:bf:
71:6f:c7:81:26:f1:d6:43:3c:49:06:dc:bf:2f:48:
6a:26:fb:53:2e:07:20:3e:ac:6b:10:f7:f5:8f:cd:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:03:88:00:04:82:8E:AF:45:10:8F:C0:9D:DB:4A:85:50:DB:68
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:af:c3:1a:4e:99:9b:1f:03:03:4d:ba:d8:e4:13:f1:c5:7c:
84:7e:0f:9f:72:f7:4b:00:15:cd:57:fb:83:c0:99:ad:33:c6:
36:3a:eb:2f:3d:e9:ba:02:d3:ad:47:7d:b7:a3:12:d3:62:f4:
38:28:fd:2f:4a:93:11:75:42:de:ee:fa:d3:d8:52:33:aa:55:
00:de:3c:f7:0f:fa:ba:1d:f3:a9:e3:95:98:ed:e3:1f:98:2c:
ed:98:dc:68:5b:d0:3d:17:e1:e1:28:b7:b1:1a:c5:fb:e3:5e:
0e:35:a9:11:e8:37:03:92:18:48:7e:5a:50:43:11:39:4d:6e:
1e:b1:aa:68:53:4e:1b:80:99:1c:bb:b3:75:3d:03:84:35:36:
71:ab:8c:82:46:04:77:14:41:05:26:70:3b:ee:de:2a:8a:e9:
42:30:e7:49:50:d3:0c:4e:68:b8:c2:66:0e:21:f1:9e:af:2f:
9a:87:27:34:3e:20:86:42:36:51:16:c3:ba:0e:cd:8c:f7:71:
45:56:e5:59:99:4b:07:06:37:dc:32:5d:c2:3a:a3:74:f5:67:
e9:17:ad:fb:c6:83:a7:37:c3:92:29:7a:13:9b:64:b8:a7:c6:
f6:0e:4c:fc:60:16:db:cf:d9:65:4d:a6:83:f4:b8:fd:09:da:
9b:e2:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:05 2026 by rpki-client