Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: roiUm8qrMkD65/6AzgDA+k9292N87yZpCpnJMTgrGV4=
Subject key identifier: A3:68:B1:DF:6B:C6:05:8A:F0:1B:E9:A6:06:16:10:94:52:26:79:0F
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019CAC104460EA436A528A9FE6CDA7FC70EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 16B6
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: r02G8uMGUDGVwr7FVQ8dfP0GzcJsXvVAm6HSa09fGGU=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:44:60:ea:43:6a:52:8a:9f:e6:cd:a7:fc:70:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=a368b1df6bc6058af01be9a6061610945226790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:7f:90:2e:c1:b2:3b:a0:88:a4:4d:16:4e:
41:b7:d6:c2:ea:df:38:d7:38:a9:15:2a:61:b2:9f:
ac:8b:64:67:0b:a1:cb:e8:b0:58:0a:6a:f8:fe:37:
d1:13:80:a0:c7:21:dc:42:5d:cc:49:b5:f0:05:a6:
43:5e:20:19:95:5e:b7:5a:74:d5:2a:b0:f8:cd:4d:
7d:cd:af:36:9d:50:43:21:24:3b:ec:9c:bb:84:06:
a4:2b:5a:1d:5e:58:e6:06:fd:85:8e:8f:27:06:bd:
79:77:50:89:d4:ad:f5:69:d6:49:fb:35:c4:41:96:
85:29:c6:dd:c8:e0:87:29:a2:ee:b4:09:90:84:3b:
95:2d:a0:62:c0:36:ad:3d:d4:de:8d:ef:fc:0d:ea:
72:1a:bf:7f:8b:ce:ab:f3:04:e0:88:df:70:c1:36:
8f:fb:66:0a:94:2b:6a:9b:b3:af:53:87:2f:7e:1e:
c2:05:ec:c5:8f:39:10:c8:bb:3c:38:00:82:2d:1e:
c5:0e:2e:41:46:96:a3:b7:ba:aa:53:16:9f:b5:ce:
45:c4:26:35:0d:2c:cf:44:ec:b4:a0:f9:a2:c3:8d:
db:27:31:86:40:bd:b3:14:7b:bc:75:bb:4c:ca:18:
dd:b1:75:b5:57:c9:43:33:c5:39:83:25:8b:b5:5a:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:B1:DF:6B:C6:05:8A:F0:1B:E9:A6:06:16:10:94:52:26:79:0F
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:39:f5:1e:5c:8f:0f:a2:ff:83:e7:2f:8f:51:71:07:9e:
c9:42:0c:31:48:b5:7a:cf:bc:aa:e1:de:58:51:09:57:3a:dd:
73:38:10:9b:8d:dc:93:82:e2:47:4f:88:6d:09:3b:82:78:29:
39:b6:75:05:0e:fb:4f:de:75:5c:08:85:b3:e0:33:de:ee:9f:
3b:5d:25:56:dc:d6:cb:c0:94:48:59:f1:00:b0:70:7d:0c:93:
52:d6:0f:ef:56:30:45:76:b7:1e:6a:98:7d:f2:c2:ec:73:79:
3d:05:68:59:83:f1:4e:3b:6c:ad:1e:2c:ab:83:16:c5:80:4a:
f1:3c:f6:bf:77:45:64:c3:1e:3b:80:31:2f:01:5c:21:9b:44:
6d:2e:d3:04:e0:5c:51:d2:76:9a:78:cb:98:c3:ab:54:64:b8:
a0:40:1b:91:f6:bf:06:5f:c9:ef:88:f9:f2:66:22:f7:3c:48:
6d:0c:9e:eb:c1:a1:12:2d:e9:63:14:4b:cd:e8:c3:71:2f:8d:
e6:73:6b:05:8a:c1:5f:44:8d:1b:ab:77:98:27:5d:9a:c1:77:
89:6f:bd:79:7e:c2:c3:b2:c3:61:ab:0f:5b:5a:3f:ce:f8:82:
b8:30:22:54:7e:10:38:81:79:5b:76:ee:82:43:c0:0d:cb:a9:
8d:a5:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:10 2026 by rpki-client