Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: R1lXEkgCx2eq755sGUNqq4jJeJcJrQI3c4Ny1zzBJz8=
Subject key identifier: 96:B8:36:9F:8B:E5:D8:AB:82:AA:B6:0D:80:D5:0E:6F:40:86:B5:C4
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 019CAAFD2704BD8769EC08F14600F1CC07E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 0801
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: dUVx1WsP9urR4bjdJ0VT5B8j6T176rtJ6Q4vHd3KaLQ=)
2: tKebX1FWuux3IXuG2sUXIXIBJsw.roa (hash: +oj9FAD3Ulh0IuD5nAYshWSIbL3rR2EIAg3bpYOtpOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:27:04:bd:87:69:ec:08:f1:46:00:f1:cc:07:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=96b8369f8be5d8ab82aab60d80d50e6f4086b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:5e:55:2f:c9:27:ef:37:af:40:99:64:24:
c7:1f:bd:18:85:46:a2:d5:b5:49:e1:5d:31:1f:36:
2e:8a:30:0b:1c:51:3d:0f:72:6b:e0:f6:28:75:8f:
6e:67:f8:36:2a:d8:76:29:92:bc:53:a5:48:68:fc:
49:08:3c:ac:8f:79:96:a9:bb:d6:54:08:68:0c:2f:
e1:54:90:06:71:3d:c6:e2:eb:18:d0:b8:51:fd:4e:
16:41:b8:71:c4:d2:12:a0:69:24:02:84:5f:a1:f3:
2c:52:77:78:e0:38:fd:82:6d:e1:70:eb:46:7b:43:
16:b9:cc:df:d0:a1:97:0b:2d:86:b8:6f:d6:9f:39:
b0:2d:22:92:3c:bb:5c:a3:80:d5:6e:ea:73:dd:f5:
a7:9e:aa:f6:ab:99:38:de:aa:45:9e:8c:5a:09:69:
85:3b:13:8b:5b:83:07:04:f4:8e:a7:f3:b5:01:04:
1c:28:b6:f1:b9:93:51:92:ba:9c:34:10:8d:4d:fa:
5c:59:98:39:46:55:16:38:88:7f:b7:94:55:bd:6e:
86:e0:a7:bd:0d:18:6c:c8:f6:87:30:d6:43:b0:c7:
8c:ba:12:8f:5a:85:90:21:bd:06:f0:87:13:fb:19:
a8:84:39:a6:69:cf:03:29:27:e8:cc:9a:e8:95:b2:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:36:9F:8B:E5:D8:AB:82:AA:B6:0D:80:D5:0E:6F:40:86:B5:C4
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2e:68:0c:ef:db:64:f4:e3:75:b6:79:10:07:04:b4:7d:00:
8c:bc:da:4b:a6:0c:b4:73:f1:81:6f:5c:93:c8:f0:98:46:12:
e9:c6:f9:2c:7e:dd:b1:11:f0:16:a4:19:c5:d3:f6:ad:53:de:
f9:6b:16:40:30:2f:01:78:97:66:2c:3e:74:de:5d:af:44:19:
0e:16:53:b3:45:6b:f3:30:10:53:8d:7c:73:47:da:b7:2b:20:
e0:ad:09:11:4a:c4:47:c2:76:16:6e:41:99:9c:5b:9b:85:5d:
8d:51:ef:c0:c8:a6:c4:2a:f3:d4:dd:05:7f:e5:87:12:a8:15:
b8:7b:c9:9a:e1:7c:17:e2:8b:77:73:32:a5:b9:2a:e4:1a:8a:
43:22:15:53:45:94:6c:9d:b7:8b:6d:3a:13:3f:c0:92:e1:c0:
ac:5a:18:4d:88:74:ac:f0:bd:bd:42:6a:0c:23:de:86:df:1f:
35:a7:b6:a9:cf:65:62:c3:ed:29:71:64:9c:34:05:65:9b:07:
72:cf:dd:68:53:e4:35:ea:7c:71:f0:49:39:93:d1:03:67:3d:
f5:b1:b9:3f:c2:a5:c3:da:8e:3e:24:31:ce:5f:49:f2:16:52:
93:9e:86:91:7d:3e:1d:ce:24:61:43:97:1c:e2:52:d5:75:91:
03:5e:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:11 2026 by rpki-client