Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier: qfTwJX7b/dJxTyroGTgmRbP+NN1DzNpRme/6swbOTUE=
Subject key identifier: 70:44:DF:E0:0F:CD:65:35:39:2C:48:D3:9A:91:66:F2:51:E4:7A:BA
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 019D3909BD16CC480BB91897F21414244A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: eFT3U1ebjz+1Mjx0jZ37ygtSYbO41aVSSaHqSyIbJG4=)
2: qv3Ej32YD_b_UD9Nd2LLu7Onshs.roa (hash: QDsiGpgCL1OjBF1UVwY4OIbEFPuPDLsm5/b5USJqJRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:16:cc:48:0b:b9:18:97:f2:14:14:24:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=7044dfe00fcd6535392c48d39a9166f251e47aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:b2:8d:0d:cd:02:87:b3:2e:60:da:71:06:
57:c9:fe:15:34:f4:36:d1:56:b3:d7:fb:73:88:f0:
1a:09:c7:aa:10:99:af:d5:31:1f:f3:b6:4d:27:8f:
19:d6:21:a1:e5:72:35:54:42:ea:24:88:90:a4:93:
66:03:ff:cf:04:72:cc:51:30:17:22:39:d8:db:f6:
17:3b:73:76:db:3a:66:cc:a6:b3:12:ec:62:83:60:
97:31:a0:01:57:31:cb:0d:d7:a9:cb:8c:7b:78:6f:
a1:01:77:04:b4:3a:bb:84:6f:69:a6:ff:a5:8c:b7:
5b:00:a0:b9:9f:e7:48:22:8a:c9:8c:2e:c7:20:07:
38:72:7f:10:b4:49:13:d1:21:fa:c5:a3:85:4b:92:
8f:a1:09:02:51:d7:e0:64:a2:76:02:56:22:cb:48:
3d:63:57:2d:09:79:6c:e9:e3:0d:0d:7d:ad:df:d7:
24:cb:86:d3:b8:9d:5e:e2:22:ea:fd:b0:94:d2:6d:
f1:a4:bd:47:c8:23:d0:83:ec:a2:1f:7d:a9:c8:a9:
c0:5d:0e:58:0e:b3:cf:11:e4:fb:05:c2:ca:39:99:
cf:5f:5b:57:7d:df:94:56:65:32:27:9b:c2:b6:5d:
67:9b:0b:bb:d5:b4:f9:e7:49:8f:96:e2:51:a2:35:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:DF:E0:0F:CD:65:35:39:2C:48:D3:9A:91:66:F2:51:E4:7A:BA
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f6:9e:43:39:82:0d:1f:da:7c:79:c8:66:42:e7:ba:88:77:
2a:83:44:78:60:75:b9:ac:9b:cf:ad:fc:f3:ff:67:9f:73:36:
42:8b:93:6d:48:ae:b7:79:b9:2d:3e:de:52:e2:06:89:f3:2d:
a3:af:94:bc:a7:7d:80:62:42:f0:29:d3:27:3d:f5:35:8c:15:
9d:39:8a:6a:8d:eb:8d:41:36:72:1d:55:93:de:53:21:b3:54:
aa:49:8a:8a:ec:96:18:c1:6c:77:0e:5d:78:9a:62:8c:0f:c6:
f5:18:a3:31:3d:72:a5:9a:5e:1d:ac:67:a3:31:1c:85:2f:f9:
84:13:79:30:cf:10:c4:7d:97:63:d1:10:48:bd:85:95:49:7e:
5d:e7:f9:7c:7f:a7:98:a7:ff:29:f4:db:e4:5a:d7:fd:b1:23:
a7:31:a4:b2:1b:a3:ba:07:26:32:25:30:bf:8d:3b:d3:6c:60:
4c:e0:ce:d2:66:89:f3:7d:6a:3d:ed:58:b8:ec:45:ad:e0:37:
23:c1:e5:8a:86:0f:6b:44:6e:f7:67:81:89:d1:cd:72:b2:81:
8c:3d:fe:1b:80:9f:46:f1:4a:80:05:e4:dd:73:e3:15:42:6b:
06:91:3e:ac:19:ed:04:44:b0:50:1c:21:0a:f7:9e:bf:67:09:
52:ec:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:19 2026 by rpki-client