Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: 8WvZrHFDC79jse8RtAlmPbVQUmon1iq0/TOvcP6QvKU=
Subject key identifier: 3D:61:B6:30:03:82:EF:A6:AA:C4:01:6D:CE:88:EA:FF:B3:2B:57:12
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019CAF7F20AB09AA19B940CCAC3CF37ECCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 02A2
Signing time: Mon 02 Mar 2026 17:01:10 +0000
Manifest this update: Mon 02 Mar 2026 17:01:10 +0000
Manifest next update: Tue 03 Mar 2026 17:01:10 +0000
Files and hashes: 1: Ah1zkCt41Yg3NZ4mfPJC8T6zRHQ.roa (hash: NMfgnHqRrDwsZCUvzQT+wIBkVfDVMOG4Osq0Hs4uyVU=)
2: dTPhWcmoSCJmhGreyJsPD4EE5t0.roa (hash: hsV4SDj2rIN1TNflJCH5NKHRDE3joBuyhtpUXGC4Fik=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: lPMiAFEtdvzsiKtSgn078Y2NPDtr5B+awaQj3UPmS8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:20:ab:09:aa:19:b9:40:cc:ac:3c:f3:7e:cc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Mar 2 17:01:10 2026 GMT
Not After : Mar 3 17:01:10 2026 GMT
Subject: CN=3d61b6300382efa6aac4016dce88eaffb32b5712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:07:da:b4:b8:20:a2:d2:ca:e4:cf:32:dc:
2f:ca:4a:64:aa:70:e9:bd:ec:08:bc:e1:f9:86:66:
1a:15:0f:68:df:c5:99:c3:88:fb:ac:51:cb:c3:cc:
c1:84:89:dd:0c:fe:99:1e:a4:e6:b8:1c:f3:3b:69:
46:da:83:e2:67:c5:39:b1:16:e4:14:e2:de:8e:82:
fb:83:80:d7:a0:6e:5a:2e:a6:8f:a2:6d:3c:80:5e:
2d:c0:d0:3e:96:1a:74:b1:19:4d:1a:2d:84:5c:52:
e3:c2:16:95:7b:a9:7f:49:fd:55:b3:09:6b:73:04:
20:d8:d6:42:e9:b7:ca:d7:55:9d:b5:48:67:34:2b:
f5:c1:33:c9:62:b5:f2:1d:50:28:81:05:ed:b6:97:
10:90:39:7d:5c:29:77:84:60:63:f3:7b:51:be:9e:
3f:5e:94:57:39:b6:be:91:d9:5f:74:1c:96:b3:36:
e8:57:c0:6f:70:6d:24:ff:dc:c3:2a:5a:a4:aa:f5:
1a:c2:09:6e:16:07:69:86:23:ed:b5:6f:0b:08:a3:
7e:6f:e8:14:4f:78:e0:5a:23:03:a5:15:c4:2e:cb:
e0:7e:38:ac:50:c4:d8:06:50:5f:17:b9:84:c6:61:
2b:93:a8:e1:48:34:81:1d:ec:77:bb:c9:48:d9:3a:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:B6:30:03:82:EF:A6:AA:C4:01:6D:CE:88:EA:FF:B3:2B:57:12
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:30:90:71:71:eb:47:e7:93:44:4d:d9:a8:19:12:88:f4:
fa:93:aa:83:91:3e:a5:6b:40:79:34:9f:d8:a0:26:94:34:c8:
e5:cc:59:05:53:a3:99:bb:52:47:52:6e:94:88:31:aa:8e:96:
94:a9:5e:a2:22:61:df:75:38:23:82:24:02:12:51:87:1f:8f:
ae:65:5b:5c:1a:b6:10:87:8f:02:b2:40:c9:a5:fb:c5:80:ad:
fc:88:49:25:60:d7:e8:e3:e6:3e:ac:0d:64:32:2c:6c:ca:66:
01:2d:0e:b7:3a:50:36:4f:69:a6:bd:2c:b4:60:9e:61:6a:ba:
7e:0f:31:03:0b:35:1c:39:60:76:95:36:00:8e:3a:6d:b2:62:
29:01:7b:28:b3:75:2d:5b:07:d9:21:34:be:26:46:8c:1b:0d:
df:32:3e:eb:30:a9:84:b9:98:ea:d7:ed:18:ad:87:04:65:e7:
bc:4f:72:0b:cf:ee:05:62:99:b2:5d:2d:3a:ab:5e:6f:49:8f:
9c:2b:ae:24:dc:97:4f:08:fd:50:40:62:83:04:05:fb:58:36:
77:c4:15:27:80:1f:f4:80:64:4a:bc:23:9c:98:c2:73:f6:cf:
be:44:e8:e6:79:67:cd:23:57:d6:db:d4:e1:0f:3c:e5:3b:7d:
70:2c:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:15 2026 by rpki-client