Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: qspOThf5KxocBOMO0djoq8tOCKim3vBJObB+C6eFrqU=
Subject key identifier: 9D:65:CA:5A:7B:C7:1E:67:AB:05:AE:0E:12:9D:AA:36:09:5A:34:0F
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019CABD92163DA62F541896B3C69005F048E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: FvzNgN6jOPrU7HLhiQ1ZbT-6tB8.roa (hash: ceH7xNtIASBG/OmWLD8LM3MYEGRNf6JiHbcW322GG3k=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: +5lYl/PZwJ4PAmZR0vVjYXkkiQHJWz9Lq+GAyokLNNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:21:63:da:62:f5:41:89:6b:3c:69:00:5f:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=9d65ca5a7bc71e67ab05ae0e129daa36095a340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:9e:15:7f:ea:ca:af:f8:2a:a6:1d:42:50:
d0:c5:84:00:f6:2a:77:e6:ba:5c:18:82:28:79:74:
dd:78:e6:67:bc:67:35:99:f0:72:89:ae:5d:f2:28:
e1:e0:34:5b:e6:d7:79:45:a8:54:c3:85:7f:d2:10:
92:4f:81:c8:b1:f4:99:49:af:37:a5:05:a2:0f:c9:
d3:a1:3d:d8:5e:05:9c:39:2f:9d:38:eb:8d:4e:64:
1b:ba:0d:56:82:e7:15:63:6b:84:1c:94:6d:ac:29:
e9:f4:b4:d9:b2:1a:e4:a7:46:fb:24:80:71:f8:f7:
66:e1:22:61:8c:de:7e:db:6d:22:cb:f8:7d:44:a4:
a3:ea:e2:fd:0d:0c:96:90:03:28:4c:35:c5:af:9c:
3d:4a:e4:28:2a:38:53:96:46:d3:5b:fe:55:ce:47:
41:85:04:b1:51:c3:04:43:98:21:8f:a7:d1:f6:65:
b5:46:d2:d1:b3:88:b7:cd:01:ec:61:83:bd:a0:e5:
6a:26:89:dd:3d:f9:aa:6e:2f:75:04:3c:9d:26:b3:
59:75:f7:1b:1d:ae:f5:a2:f3:df:12:64:02:90:17:
4b:78:03:bf:ad:54:6b:84:ea:26:a8:24:cb:4c:d7:
1c:41:55:3d:a3:37:45:e0:9d:ce:93:c5:5e:05:33:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:65:CA:5A:7B:C7:1E:67:AB:05:AE:0E:12:9D:AA:36:09:5A:34:0F
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d1:90:b6:eb:ed:12:c3:12:66:78:c1:d3:6a:fc:9d:c5:ee:
d8:83:de:3b:a9:c9:1c:d3:33:aa:cb:77:1c:08:21:a3:43:a4:
df:32:e0:71:47:ac:f0:4e:55:04:ce:b3:4e:8e:26:be:5d:7b:
52:8b:f2:5b:9e:89:28:38:6f:47:4d:09:6b:9e:9a:4d:8e:af:
ee:61:bf:ab:fb:01:a5:54:a5:7a:aa:bb:c9:2a:71:c8:a1:54:
8f:20:04:da:d3:00:44:6a:33:1e:4b:09:da:57:c5:61:61:fa:
2d:fe:26:dc:d4:18:eb:e8:0b:52:d9:0d:03:f1:eb:66:4d:fb:
6c:2f:85:ec:72:f2:87:a6:d1:85:f3:0a:32:02:14:9c:7b:fb:
8c:56:74:69:9d:46:bf:ff:2e:99:7f:25:79:d5:da:98:4f:75:
4e:5a:f1:2f:7d:7d:99:8f:04:15:32:9d:32:8d:6f:f4:39:ad:
b5:25:8d:d5:36:16:72:61:6e:c1:d9:b4:77:3a:00:62:b8:c8:
d8:83:54:89:7b:f7:27:9f:a6:09:87:95:71:11:f3:ff:39:9a:
1f:61:b4:19:6f:37:bc:10:da:3d:54:fa:18:e9:e8:7c:ba:5f:
61:a0:dd:33:9b:1f:12:2a:ac:20:79:83:2a:e7:b1:f0:6a:21:
55:37:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:56 2026 by rpki-client