Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier: SUfHCJh8QFYDRb1hC06MqwM6Nr0R+vWJ9uTg6Sk24MA=
Subject key identifier: 6D:D9:5B:7E:D0:68:52:B4:4F:C4:96:CF:6B:EC:EF:94:3A:1E:02:E6
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial: 019CA9EAC11132E24391CCEAE6BDBDC46E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number: 0EC1
Signing time: Sun 01 Mar 2026 15:01:00 +0000
Manifest this update: Sun 01 Mar 2026 15:01:00 +0000
Manifest next update: Mon 02 Mar 2026 15:01:00 +0000
Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: 7+e6/3WbjbR/MTYNxwhQ+25vO7gQ/DCt0lBfLbo5h/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:c1:11:32:e2:43:91:cc:ea:e6:bd:bd:c4:6e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Validity
Not Before: Mar 1 15:01:00 2026 GMT
Not After : Mar 2 15:01:00 2026 GMT
Subject: CN=6dd95b7ed06852b44fc496cf6becef943a1e02e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:3a:eb:66:e6:35:0e:15:82:dd:a1:41:74:
1e:ef:5e:65:de:ff:12:b1:8d:1c:97:17:ef:6e:1f:
75:1d:be:6e:25:aa:02:bb:e5:62:55:e6:b5:c7:c3:
06:74:f3:a1:b0:ac:73:e8:12:51:76:55:8b:fc:3c:
8e:30:e9:9b:6e:ab:8e:20:70:5b:17:fb:c7:73:22:
21:f3:ff:e1:91:40:d4:9f:e1:56:f5:91:e0:39:de:
09:8d:b0:c0:a0:3b:5a:6e:f8:e8:94:4b:12:63:30:
3e:28:b8:7a:ef:96:02:52:b1:61:b4:16:e2:26:da:
36:ca:31:f3:f0:ac:98:42:b8:51:11:c2:e7:8d:ed:
13:8f:6e:b9:b3:3f:f0:2b:33:61:1c:02:d2:e1:5c:
07:31:9d:ec:9b:dc:1f:41:66:89:45:2a:ad:fd:54:
53:52:21:59:86:cf:36:76:8c:33:d5:1f:49:7a:b7:
87:85:e1:65:5e:32:00:7e:5d:0a:d5:fb:13:96:bb:
a2:38:40:9a:07:e6:e6:63:db:be:c6:42:cd:18:23:
fb:2a:5e:60:89:e6:19:30:0c:04:37:38:80:90:a1:
5f:9e:e5:05:96:af:9b:74:81:2a:8a:6b:55:5d:39:
af:d9:1c:9b:52:eb:da:f7:40:a1:61:6d:38:15:f6:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:5B:7E:D0:68:52:B4:4F:C4:96:CF:6B:EC:EF:94:3A:1E:02:E6
X509v3 Authority Key Identifier:
keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:ff:ca:7f:8c:7f:a2:26:0e:e8:4f:23:e8:cc:2f:a2:fc:
a1:55:f4:40:02:cb:18:60:4d:09:fb:9a:4e:fa:47:3e:5d:74:
f8:8f:dc:41:36:f2:db:a3:67:be:13:80:01:4e:ae:8a:c3:73:
28:8d:ef:68:47:a4:9e:9d:27:3d:d8:38:ee:ba:0a:40:21:d5:
a1:01:32:4a:ab:6d:28:e1:a7:1f:07:26:d7:95:d6:0a:d6:4a:
96:4a:be:96:f0:de:0f:a8:50:54:dd:93:77:f0:40:ca:cc:dc:
f2:7d:08:ed:0b:c5:82:a3:13:97:61:ed:e4:87:13:74:ae:e3:
10:fb:8e:a8:1d:8f:39:7f:87:df:cf:7c:67:0a:48:cd:83:41:
2e:b9:50:f2:72:3b:5a:d3:1d:cc:96:5a:0b:dc:bc:51:16:d7:
37:2a:97:0c:aa:56:aa:fb:3b:98:13:78:4b:bf:00:64:e6:d9:
fb:a1:22:e4:48:00:32:4a:cc:07:d5:62:80:cd:ec:c6:47:74:
37:eb:ee:2a:7c:4a:13:4f:e2:ec:d0:e3:24:5a:6a:18:2a:38:
20:bb:db:fc:f0:43:a6:40:21:84:bb:49:31:9c:bd:3b:97:69:
d0:d5:80:7b:d2:a5:76:ad:5a:63:01:56:5a:45:56:09:d9:cb:
d3:78:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:10 2026 by rpki-client