Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: lxtKSiIYqrK3GDh2sKdlIsKg7I92WWobrPUNqGBSyr8=
Subject key identifier: A0:A1:67:8D:30:65:3B:80:A3:A9:7B:10:54:03:8A:10:88:01:16:56
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 019CABD999C72164F5734087EE2FD049149F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: LreDM9o_4jG6OEjmO_dWYG_Jb_w.roa (hash: ryTaJPSpPyp4HVacNx6TqyKRXMOPCVThkC5CxXFK++o=)
2: Yn86QLVAHpPgUIOHf9xuouUcLOQ.roa (hash: 6awOm1GCHlzhqt7HZ19OchKYQoEQ3dPq9ujImJdFJic=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: RIcBqTgtPq9e4/cxsz685nT4y513IWrZJg9Tm3wA+t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:99:c7:21:64:f5:73:40:87:ee:2f:d0:49:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=a0a1678d30653b80a3a97b1054038a1088011656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:1a:f8:80:00:96:8b:1f:c3:2e:7e:f8:ad:
c7:17:3b:1c:24:19:b5:01:d7:3d:a7:f1:e1:91:5f:
21:a9:00:a0:f6:79:06:2f:aa:b3:f4:b5:03:f0:a7:
ce:b4:6c:17:f6:84:85:c3:05:ef:b2:89:7e:8a:b6:
05:b5:84:da:91:7e:40:59:02:f6:97:c6:c1:c0:15:
2d:bd:63:e1:a1:65:77:7f:19:09:74:20:fc:fa:cc:
10:aa:21:76:51:6c:85:e8:e7:68:1b:b6:64:ae:37:
6c:c6:40:4c:90:00:84:35:7f:12:9d:e0:8e:ed:96:
e5:77:27:39:41:d3:57:5d:47:60:e4:89:57:40:8e:
74:60:38:fe:c2:14:63:0a:20:34:83:86:10:f9:ef:
28:ea:16:68:24:6e:b9:4a:53:11:58:4b:cf:ae:4c:
b6:ba:e8:52:f4:57:24:d4:42:2d:64:97:74:fa:82:
58:3e:16:24:9d:0d:6d:9f:c8:f0:fb:6f:83:a2:54:
a5:05:cf:97:38:a0:34:b1:6d:4d:54:e1:cc:d1:ab:
db:e0:0b:ea:be:2f:08:fb:c7:ee:ac:c1:6c:8f:16:
fa:26:5a:f1:c6:dd:64:68:7f:7a:cc:04:d5:9e:18:
d3:8f:fb:73:bd:c6:be:73:4c:6b:08:c6:15:ea:e8:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:67:8D:30:65:3B:80:A3:A9:7B:10:54:03:8A:10:88:01:16:56
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0c:b5:3d:b1:96:6d:fa:47:0a:3b:ae:a6:c9:e6:e3:1c:0a:
ad:14:57:76:98:4b:15:46:61:de:ef:28:c0:bb:de:c0:5b:e3:
6e:36:d6:cc:11:ee:87:78:75:fc:f0:2a:d0:2f:8c:20:16:06:
46:e1:52:1d:c1:5a:a0:e5:48:1b:d5:8e:15:58:f5:1e:1b:66:
b8:4d:ec:38:05:35:92:a2:1c:4a:76:fc:11:1a:0b:c7:9b:5b:
d4:5f:35:12:48:2f:8e:13:cd:9f:8e:42:a5:c8:07:d6:37:17:
a9:d1:e7:36:c2:ab:c3:78:b7:57:3b:63:97:e0:b4:10:20:c9:
f9:6a:f1:c7:ca:a1:b9:5e:fc:03:be:c0:ec:a9:44:d7:26:e8:
83:8e:ba:1d:4f:f2:2b:68:21:58:98:66:c3:69:80:d8:a8:71:
4c:08:22:1c:ac:b2:62:4e:8e:c9:8c:16:2c:d8:49:b2:12:a2:
c3:86:96:99:81:a5:10:5d:71:a8:a6:13:d5:e9:ee:76:54:c3:
b4:66:e6:62:e9:e2:ef:d4:07:a8:37:7f:fd:28:7a:e6:99:01:
61:d9:a0:99:87:19:32:26:00:65:be:c6:97:7c:07:b3:4b:b2:
b6:ec:19:c4:28:9e:39:07:9b:65:78:6a:4b:4b:dc:f1:8f:82:
73:d5:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:51 2026 by rpki-client