Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: SBJWXhU6+FIp0kYcMIWmUoD5MYwf4rquEBZVjlpXmGQ=
Subject key identifier: 01:E6:53:C2:AD:C2:89:AE:21:85:5C:B7:BE:D4:42:DA:BE:AB:2A:BA
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019D97E1B02CE0DFE886E0ED257AD9FFEDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 078F
Signing time: Thu 16 Apr 2026 20:00:43 +0000
Manifest this update: Thu 16 Apr 2026 20:00:43 +0000
Manifest next update: Fri 17 Apr 2026 20:00:43 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: SiM4H4V6aXm5MarrxtljmqcEH/7x3tuqpekKz41PyZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b0:2c:e0:df:e8:86:e0:ed:25:7a:d9:ff:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Apr 16 20:00:43 2026 GMT
Not After : Apr 17 20:00:43 2026 GMT
Subject: CN=01e653c2adc289ae21855cb7bed442dabeab2aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:a2:a0:bf:a1:b5:e3:26:dc:2e:52:7d:c3:
12:f1:27:16:dc:cd:33:b3:d2:14:95:a3:32:af:99:
fb:e8:f4:68:3a:13:d7:a4:48:34:fc:0b:20:98:25:
7a:78:26:f1:38:03:b4:3d:f9:7a:46:bf:5a:25:de:
42:09:15:fd:8b:c2:fa:e7:65:ee:95:88:38:6a:a5:
b3:82:4d:c2:4e:fd:d5:ef:55:7d:4b:58:d5:2e:4d:
8c:ea:52:06:5c:16:1c:28:20:d9:4d:7e:5a:3c:77:
ed:61:0e:64:ba:7c:6f:f3:64:db:89:d5:f4:09:28:
c4:77:91:53:03:45:f6:cf:c1:be:ec:49:11:15:f9:
73:19:fe:77:b6:eb:4b:ee:9a:81:46:68:34:98:c0:
59:fd:b4:20:a9:73:17:70:55:72:39:e5:9f:6e:b7:
3d:35:0b:c7:c1:e8:26:a8:1a:93:12:6a:e1:4c:eb:
7c:60:4b:ac:f8:bb:b6:5a:76:8c:b5:fc:cc:88:db:
d4:7e:2f:04:5c:aa:34:88:d6:01:f6:b4:fe:41:4a:
ee:53:5f:96:c6:9a:f7:3e:8c:01:5a:6b:d8:47:f0:
c1:74:12:f8:22:01:ac:c1:e0:82:13:f7:b2:6b:8c:
fa:76:eb:be:88:a1:fe:13:95:db:2a:94:b6:3c:3d:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:53:C2:AD:C2:89:AE:21:85:5C:B7:BE:D4:42:DA:BE:AB:2A:BA
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:07:fe:91:5b:fb:2a:9b:20:db:fa:63:32:c1:e7:3f:8c:
2d:21:ef:f3:5d:9c:d8:a9:90:3c:8c:05:75:46:99:d9:5c:71:
cb:01:09:1f:9c:99:da:39:8f:d4:21:14:01:52:67:3c:37:67:
7a:81:bd:1d:14:3d:0b:58:30:e7:da:48:71:bb:40:27:6e:82:
76:df:68:36:e0:b0:91:3d:a1:de:5c:26:17:a1:f5:bb:9b:0e:
a2:de:8b:85:d6:81:dd:1c:94:5d:d3:b9:29:ca:48:40:b0:d4:
a9:b4:24:04:9e:3a:31:5e:5a:a1:3d:cf:ab:ad:cf:10:b4:60:
8a:47:77:47:bc:47:0b:d4:7b:3f:b9:db:1c:fc:e2:ee:b8:ba:
41:0e:ac:5e:3e:70:67:cf:f8:c7:95:6e:b9:c4:43:22:b4:96:
66:37:c2:98:76:18:04:23:5b:9d:bb:4c:45:49:a2:93:a7:e8:
00:a7:f6:56:5e:3b:90:a7:6a:f6:74:71:80:af:f9:2f:3a:9a:
52:0e:f8:32:dd:08:ed:f8:e2:2c:8c:c0:31:5c:5d:79:76:6c:
72:d7:3d:64:4a:5c:a9:09:f2:bb:7e:87:22:c2:bf:c7:45:d2:
83:16:6b:0a:87:c5:ab:c4:05:56:11:80:49:c8:29:df:aa:7a:
6a:eb:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:52 2026 by rpki-client