Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
File: kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json)
Hash identifier: 2gKqq4/K6WJBpJ+NkrTETHrf38+lKcvEvzbQP6dFl2E=
Subject key identifier: B2:DF:69:35:D1:40:E3:D3:A6:2D:C9:67:01:36:AD:E1:3B:17:E4:CC
Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
Certificate issuer: /CN=907a4d12924b5357e30267afe3c5cc7364241158
Certificate serial: 019CAB6AF75AA9A9C8E8BB73C5233D225E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
Manifest number: 125B
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: oQrWitWAOOr60CpMWX8mc4MpgEdYsOd8qCvsIJHeoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f7:5a:a9:a9:c8:e8:bb:73:c5:23:3d:22:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=b2df6935d140e3d3a62dc9670136ade13b17e4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:8b:da:5f:51:c6:eb:ff:14:1d:5a:1c:20:
48:58:59:f8:39:9c:dd:16:2d:9e:54:52:d7:de:3b:
2d:8d:21:c0:55:c1:8f:20:b8:9a:2d:61:f0:3d:8c:
6c:dc:1a:3f:93:3f:c0:70:be:3e:16:64:99:5b:5a:
0b:78:69:08:6f:b7:47:a1:62:51:a6:c6:24:91:3e:
90:a0:7b:54:6b:07:19:60:35:aa:68:5c:9b:9d:79:
04:6c:b2:6f:3a:a6:00:29:92:9e:69:ff:be:b2:4c:
4e:3b:0e:74:c3:3f:3f:5e:5a:90:1a:d8:84:f3:f7:
af:2a:f9:52:de:45:a4:94:81:8b:e4:48:3a:2b:09:
c9:ea:0c:bd:42:0d:76:9d:c2:78:df:aa:2e:ce:a2:
18:1b:39:67:ad:5b:e9:66:fb:78:b5:c8:dd:3c:ca:
30:25:5d:74:44:1f:b8:eb:74:37:23:f3:6c:46:d1:
20:e9:c1:6f:95:68:49:e6:4d:51:c7:46:52:9b:c9:
45:cd:8e:2e:fb:d3:7c:5c:71:d5:93:fa:66:9a:a6:
f5:22:1e:08:59:ff:b5:ca:ef:cd:d4:6a:e2:90:f3:
bf:e8:02:c7:96:96:bf:c5:d5:48:f0:63:35:04:03:
60:55:80:3a:80:22:3e:fd:8c:a1:90:04:54:49:92:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DF:69:35:D1:40:E3:D3:A6:2D:C9:67:01:36:AD:E1:3B:17:E4:CC
X509v3 Authority Key Identifier:
keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:13:19:00:c4:8c:85:10:d7:9c:5a:c2:70:26:a8:81:41:
67:1d:cb:b1:c6:4c:c5:b4:56:9e:66:d9:59:1b:92:c0:66:e9:
13:51:5c:16:e5:8c:d0:2c:43:00:85:2b:57:6a:c2:d4:d3:41:
03:5a:7a:9f:dc:1f:fb:75:ea:f7:51:cc:cb:44:a3:ed:55:d2:
69:f9:54:22:fc:30:aa:4a:93:c3:55:1d:19:70:1a:52:cd:bc:
74:88:d2:7c:e2:9e:53:a4:0b:33:a9:31:35:51:8c:cf:0e:de:
61:d2:b1:e4:31:3e:53:a1:b7:94:41:16:fc:bb:ea:d1:0d:dc:
3d:12:e2:b5:a3:96:32:2b:36:07:fa:b8:70:9b:a5:ef:aa:6c:
ae:c3:2a:f4:c0:9a:59:d0:da:f7:57:1b:5e:4b:04:be:2a:63:
3c:9b:5b:b5:cd:a5:68:c6:ea:ac:f5:e4:ef:de:f3:a1:d8:ef:
38:78:cb:c4:cb:09:be:d2:ea:da:d4:56:44:c4:fb:7b:7a:59:
f9:7f:3f:f6:62:f4:fb:f4:86:db:8c:a6:8d:ad:3a:02:f0:c5:
cb:5e:50:8e:62:34:53:df:22:82:46:d6:e5:13:cb:bf:62:4c:
0a:01:e5:5b:80:ca:42:37:e0:57:7b:0a:e2:5e:2a:52:2e:0f:
08:bf:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:51 2026 by rpki-client