Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: cTvk+GR7YaD9Bjw8CJWmUu7sLf8Kt76yEQugogufKX8=
Subject key identifier: 3F:19:B3:33:66:FF:11:E0:AF:55:06:EB:9D:B3:75:E6:6D:A8:C7:C0
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019CAC46F7C39407E1257B52F3B99F93F716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 0854
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: PymsuRY-XU_JjC-s7g8jov_R8Hc.roa (hash: eIduQ26VHE0PdG7zgjOYFtz0rV5pDOwOAUDByNGlGR4=)
2: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: Vo2EKCHnnZaTt1OHR5ZrwMtjuHI7vVCXATok7+w2tUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f7:c3:94:07:e1:25:7b:52:f3:b9:9f:93:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=3f19b33366ff11e0af5506eb9db375e66da8c7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:f7:5c:f4:eb:13:9f:01:72:67:67:f3:e4:
69:ff:18:0d:85:1f:1b:e7:85:ca:32:17:ce:da:f0:
cf:9f:94:28:f2:ed:6a:94:c9:c1:1b:46:82:dc:c6:
4d:1b:6c:aa:fb:55:06:4f:c9:65:01:ef:b4:00:4e:
33:8a:70:1c:a9:77:43:b3:d7:61:00:06:29:a9:b2:
69:c4:98:71:65:3e:98:be:db:d2:7a:14:12:94:ad:
4c:10:09:54:be:69:d6:4f:f9:82:42:17:fe:fe:5c:
46:8a:0e:60:b8:12:78:1d:91:38:70:a8:6b:1e:37:
ba:4a:f1:09:1c:33:63:1c:b1:97:9e:6a:01:fa:3f:
8d:e8:af:37:69:9b:76:24:df:80:97:db:6f:2f:43:
77:bc:83:ac:c4:16:b6:17:1d:78:cc:49:d2:ee:93:
66:1d:08:f3:10:79:3b:16:2b:e3:d5:1c:6c:18:a9:
a2:29:24:b0:83:34:e2:f4:66:7c:bc:13:10:9a:e5:
10:23:67:fb:e7:83:d0:7e:48:d2:83:82:df:79:73:
1b:ea:d1:e4:e9:0b:0c:23:8b:43:2b:28:71:df:b1:
52:53:ad:7c:b1:d1:ba:a4:1f:8e:8e:40:be:5d:60:
56:f9:21:01:52:9d:2f:1a:95:47:63:dc:e5:a5:7c:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:B3:33:66:FF:11:E0:AF:55:06:EB:9D:B3:75:E6:6D:A8:C7:C0
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:82:38:96:b7:47:01:e2:d8:0d:d8:a3:4a:5b:f0:c2:43:ad:
57:8e:f7:a0:e0:71:b9:54:ac:21:53:65:3f:2f:ad:5a:0e:54:
5a:1a:8a:da:b2:b1:5d:55:05:68:8c:1a:6d:6d:b2:a2:31:b5:
8e:99:4c:2c:c1:30:41:c3:f2:8c:86:29:e6:be:2b:31:77:34:
c5:23:af:7f:8b:c4:a5:12:9d:ad:3c:a6:0b:67:ac:70:8b:94:
06:d1:43:39:eb:5d:b8:7e:7c:3f:84:ea:0a:f6:4a:7d:96:6a:
28:2e:c9:b9:19:99:95:f4:08:1f:28:aa:cf:4d:d1:26:d5:1b:
00:d1:8a:dc:56:83:a8:2a:39:67:a8:f4:68:5e:26:b2:ed:45:
e4:59:e4:f8:7c:09:9d:02:51:86:69:e0:e0:2a:59:6b:04:99:
17:20:9a:ae:ed:48:8d:fb:92:3b:c7:b5:20:08:84:c5:57:d0:
45:2c:8a:0f:de:3e:1a:fd:2d:93:87:2d:3d:60:ae:2e:0c:a4:
b4:e9:4a:ba:3c:77:cf:18:99:c6:8d:ec:9f:76:d3:86:48:a0:
77:2e:ed:35:7a:af:44:9c:72:17:59:76:8c:6c:85:62:f9:1e:
d8:02:94:7e:4f:87:6b:5b:ca:f3:64:aa:ed:30:47:db:60:fb:
b3:34:c5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:54 2026 by rpki-client