Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: IfuWCr0ygNqE17z9QUvWBK7T4jT7n0wGyUPbfIbaWS0=
Subject key identifier: 56:06:AE:AE:9D:A8:50:0D:11:81:F3:C1:C3:B3:30:C1:A4:D8:83:8A
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019CABD95CAB3F3EBD5D1AD4A1D1DE69C3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 14B5
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: rb5UG2it6dp7+t4FCmSo489bfvUMGdVX4/VG0q1N+zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5c:ab:3f:3e:bd:5d:1a:d4:a1:d1:de:69:c3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=5606aeae9da8500d1181f3c1c3b330c1a4d8838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:17:65:65:08:d7:30:3e:87:6b:23:a1:ce:
e9:9c:d4:be:21:30:b3:04:51:14:47:be:0f:c0:05:
d0:60:62:f2:65:c5:11:cc:15:44:c4:6d:7b:63:d0:
02:f6:eb:8a:f4:ef:09:3f:4e:3a:e1:3b:7b:72:bc:
a4:ed:81:54:26:cd:4f:c6:7f:57:89:7b:5d:ac:21:
f3:8e:97:67:66:31:61:ee:ec:4e:e9:f4:0f:c4:3a:
7c:f6:0b:9f:01:ae:5b:2a:d1:c3:51:21:60:60:9c:
72:ea:96:4a:df:ea:1e:9d:aa:ff:cb:8d:ec:1f:74:
2b:f3:92:03:68:e1:1e:13:c2:30:69:02:f5:4c:97:
7b:40:03:7a:c2:13:c2:f4:ed:70:c6:b4:79:72:25:
aa:07:9a:5e:7a:04:6e:41:e1:09:d0:ca:5d:2e:25:
fe:69:90:d3:27:d7:04:a2:68:f4:d6:97:71:16:5a:
a7:cd:8f:7a:da:03:28:52:ec:e3:22:63:9c:ad:0d:
6f:f9:da:73:b8:c0:f3:6c:75:71:03:21:9e:09:e0:
a9:d9:ae:b8:d0:f1:be:ba:b4:7d:43:dd:81:fc:1c:
bf:42:b7:3c:c4:a5:32:f9:94:85:68:2a:9d:18:cc:
4b:fb:75:73:c3:a8:ef:a0:8f:6e:23:c7:b9:9c:2d:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:AE:AE:9D:A8:50:0D:11:81:F3:C1:C3:B3:30:C1:A4:D8:83:8A
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a8:c4:bc:7d:c6:67:d3:4e:d6:b1:55:9c:10:21:e6:df:b7:
5d:7b:a8:97:ac:98:53:4d:2f:32:ac:a6:69:60:70:7e:d2:15:
21:fa:21:d0:21:8f:bd:a8:cb:df:14:68:8a:4c:2f:66:fd:98:
ff:de:31:8f:98:89:05:e5:11:34:db:ff:ae:09:bf:72:96:52:
e4:82:7d:75:cc:b8:dd:f3:df:c3:23:89:30:cc:d8:20:a1:1f:
74:ed:11:ca:3a:6f:a3:d2:45:0d:96:1c:50:9f:3a:53:72:54:
f9:4a:44:5e:1e:e5:7b:28:21:40:2f:37:42:cb:5c:d5:11:21:
ef:b3:5d:75:72:5d:b3:7e:f3:14:e0:63:e7:ef:23:1c:aa:ce:
e9:ef:e2:4c:d5:a5:6f:30:33:6d:86:47:03:a6:62:fb:1a:29:
36:56:c1:6d:a9:06:f0:a5:6e:c4:c3:c1:a2:db:23:70:08:11:
a1:99:bb:43:20:5f:1b:f8:5e:05:34:83:26:f6:09:c7:8d:b4:
8f:85:50:2a:ec:b2:cc:1f:3c:53:54:ec:f7:ca:8f:d6:3f:d8:
c4:36:72:1f:22:40:3b:d1:b8:e5:ed:da:bc:06:7c:03:73:ff:
9c:36:51:04:eb:3d:d9:ca:7d:f2:75:a7:3d:14:ef:9b:53:55:
d9:4f:9c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:02 2026 by rpki-client