Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: hcw9qXtgBZhjtgFkt4SSoeLQ/sM2v7afFenJJ4VFqvQ=
Subject key identifier: 0D:3C:86:1F:29:28:A0:7D:2B:0C:3C:03:D7:31:72:A2:C6:89:0E:29
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019CAA214E72F08FBDCA4EEDCB3ADF363BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 073E
Signing time: Sun 01 Mar 2026 16:00:35 +0000
Manifest this update: Sun 01 Mar 2026 16:00:35 +0000
Manifest next update: Mon 02 Mar 2026 16:00:35 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: QOKfPzSQFBwsxgmDgqWuSIfzN6eTgYVq/+pqzKCQHbs=)
2: qnaI3dSUo6JkKXowYAsIMeMpnOc.roa (hash: dUT0p+f2BUwnddx9s697e9AmQEvx5OAEb+TGVaVGOZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4e:72:f0:8f:bd:ca:4e:ed:cb:3a:df:36:3b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Mar 1 16:00:35 2026 GMT
Not After : Mar 2 16:00:35 2026 GMT
Subject: CN=0d3c861f2928a07d2b0c3c03d73172a2c6890e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:04:0b:78:99:7f:92:35:51:da:4d:80:76:
7b:d9:17:0c:65:ee:cc:f0:46:d3:21:cc:1d:6f:39:
c4:f6:9a:45:5b:ad:d1:63:6c:ed:b4:62:2a:52:b7:
7a:e6:88:02:0f:ee:b6:26:72:a5:58:5e:29:21:1f:
e2:a7:6b:6b:b6:4c:e5:4b:cd:67:90:f6:f1:7f:b6:
59:13:33:c0:e6:f1:21:30:0a:d3:2c:2a:b0:64:7f:
7b:c8:d8:9f:a7:0b:e7:2d:cf:e2:15:05:95:55:5e:
e3:b7:7a:7f:9b:8b:ae:36:fb:01:6c:c9:04:62:5b:
3d:43:83:0d:eb:9b:bc:56:50:98:85:8c:2b:c8:9a:
6a:9e:8d:02:83:55:d3:7b:a1:c9:3f:e7:ec:9c:d5:
72:7c:8f:45:e6:bf:22:33:42:2f:1d:4c:e8:90:88:
ae:2a:ac:2c:ee:e8:b1:15:62:be:b5:be:97:c7:51:
90:87:30:bd:c5:5b:af:1c:83:28:13:fd:c5:49:be:
80:38:12:79:9e:83:51:0c:82:7c:45:d0:7f:0b:05:
e3:fe:a7:72:81:e4:e8:cc:fc:3a:ee:44:44:0d:83:
e8:69:77:35:c8:60:57:22:f3:49:89:0e:b5:b8:4d:
b4:ce:71:c1:84:19:8a:aa:72:ca:40:40:20:2c:6d:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:86:1F:29:28:A0:7D:2B:0C:3C:03:D7:31:72:A2:C6:89:0E:29
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:42:f7:fe:44:18:45:3e:ce:33:43:80:8e:b1:ca:6c:29:
e9:84:99:4d:30:b9:6c:ca:27:2a:aa:da:d1:e7:44:76:1f:2f:
c4:69:06:14:b8:96:d5:29:8b:41:6a:9b:9a:45:d6:bd:4b:2b:
52:a1:bb:1a:de:3f:d6:f1:c8:e6:47:38:89:51:ea:fb:b3:6a:
87:4d:2b:a4:0f:22:a8:c3:43:94:52:20:1f:54:d5:20:04:03:
78:6a:dc:f9:1f:18:b4:70:bf:8a:d9:84:8b:ac:d1:e3:8e:fb:
b6:e1:ae:14:4a:b1:ab:5d:9a:7b:ff:5d:e5:bc:b4:28:de:1f:
e6:8b:72:9b:91:f0:36:16:c7:2b:09:0b:08:52:b0:6d:40:1f:
2d:a4:b2:27:89:77:4b:fc:bd:00:87:44:25:20:f3:7d:36:92:
36:c4:2c:ad:05:3d:e4:4d:33:8d:40:9d:4f:56:94:d8:8e:78:
77:80:44:a0:c9:9b:ee:cd:d0:ec:08:d9:7b:d0:8b:58:99:35:
60:d4:4b:a4:64:de:1e:c4:66:3b:61:d3:4c:72:d9:2c:78:c8:
25:ce:e2:56:81:4c:22:d3:be:ec:d3:01:b3:26:fa:ed:ab:98:
4d:10:f9:5b:5f:6f:e8:5a:35:da:28:b2:54:26:fd:00:fd:16:
70:43:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:49 2026 by rpki-client