Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: Uh/bDvtLvLoiNC8BzISrifZnYPRAXC+2UhsYk+U2Qnw=
Subject key identifier: 88:99:83:7B:E3:68:C8:53:B9:33:B1:05:61:DE:74:7C:EE:92:D0:AC
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019CA7FCA0832C26B9F34129F6BE7DE69DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 06:01:16 +0000
Manifest this update: Sun 01 Mar 2026 06:01:16 +0000
Manifest next update: Mon 02 Mar 2026 06:01:16 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: JE6ANcVGNMTjDjw2RW+ejizoYZvj1MZA5GmEigcNB7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:a0:83:2c:26:b9:f3:41:29:f6:be:7d:e6:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Mar 1 06:01:16 2026 GMT
Not After : Mar 2 06:01:16 2026 GMT
Subject: CN=8899837be368c853b933b10561de747cee92d0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:55:3c:cb:7a:0b:c6:a8:69:1c:e0:e1:04:
7f:1b:bf:31:ba:39:d1:0b:81:a5:23:b3:27:55:03:
be:dc:c5:73:ce:0a:f2:4c:a8:90:bb:df:84:7d:38:
f4:af:38:78:52:b5:5f:ef:f3:3a:63:71:28:38:d1:
18:bb:4b:cf:13:97:89:45:55:60:27:84:99:31:8f:
99:e5:b7:4f:fb:f2:03:63:14:5e:53:61:96:68:50:
c7:5a:18:46:1a:42:53:e1:12:d7:a8:94:e2:1a:7d:
e8:bc:a1:b4:23:de:df:76:57:ea:f8:20:2d:18:b6:
94:a6:7d:ad:a8:45:72:ee:58:a5:48:49:26:22:6d:
ab:b3:dc:6d:88:70:52:b9:73:30:d8:08:41:a3:12:
5e:ed:7b:ad:7b:58:22:5b:94:4b:62:fc:a2:a0:48:
6c:8e:90:fe:15:2a:51:42:aa:6e:4f:08:ec:e7:45:
fe:37:ad:93:88:a1:a2:01:3f:ab:88:f2:a7:e6:e5:
41:35:aa:6c:f1:79:11:cf:e4:55:34:20:f2:e6:f9:
61:cd:7f:70:58:37:7d:a5:11:9f:48:15:49:a2:81:
af:20:dc:16:78:16:43:a9:0f:8f:75:3d:db:42:ec:
b4:5b:ec:5a:9d:92:45:c6:ab:2b:90:f5:e5:19:39:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:83:7B:E3:68:C8:53:B9:33:B1:05:61:DE:74:7C:EE:92:D0:AC
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:54:c8:c7:fc:da:78:77:c0:3d:9a:c0:76:1a:82:c3:08:
5a:7c:1d:00:6d:99:39:60:ee:65:09:b3:1b:f9:31:46:d9:c7:
d1:f9:12:a8:e1:19:e9:9a:16:7a:0c:b4:9a:d7:f7:62:9c:0c:
b0:1d:bc:78:ae:41:36:d1:ff:f4:86:6e:82:34:ec:ea:b4:52:
b1:67:11:6d:58:53:09:ad:44:b0:10:21:28:a7:ec:d3:4f:8a:
74:8e:0a:81:5c:a0:7b:f4:0f:9d:6b:55:37:78:a4:a3:03:c4:
6d:6a:88:3e:07:c3:52:97:8b:de:b3:c1:89:ef:25:1c:e8:49:
16:1d:71:28:be:ad:68:47:3b:18:98:89:54:71:06:fd:ad:79:
0a:02:ba:77:8f:1d:bf:63:a9:d1:46:fb:5d:65:5a:b9:96:02:
76:2e:4f:03:3a:68:84:32:8e:89:50:c3:da:47:8b:f2:58:a3:
0a:aa:72:a8:68:98:dd:19:31:de:4c:88:db:5a:a5:ac:46:c8:
22:d3:61:97:c1:2f:4e:10:12:22:6c:39:80:3c:3d:7d:0b:95:
46:08:26:6b:99:8f:d9:9b:95:3b:57:1e:df:78:36:ae:71:06:
6d:24:ce:ec:58:1a:1d:7f:9f:8a:da:f8:55:9e:bd:98:6f:74:
30:1f:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:07 2026 by rpki-client