Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: yeWGaUkoQL32XUrWikgBlscuRllHD3Bvel6Pd5wOtsI=
Subject key identifier: 3E:78:63:5F:BD:2A:F5:11:59:E9:E3:22:0A:8C:18:C1:15:49:CF:F6
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019CAAFD1F187AAF1107734F3D2A5088E76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 1598
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: DJfLC27ZRlLjzQtg9ejcohCVl8k.roa (hash: VymrYhadJDvH9BE1CUEs+UkSRt9NAMcvnOkL0G00Mj8=)
2: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: 8zM2wOpdZJWhzJr1zdJi/2cGjafE6/Y2hF8/d09XPGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1f:18:7a:af:11:07:73:4f:3d:2a:50:88:e7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=3e78635fbd2af51159e9e3220a8c18c11549cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:24:d0:9f:f1:f1:d3:5d:20:72:ce:5e:1e:
aa:87:d7:2c:af:aa:d0:ba:cb:06:01:90:d6:03:e2:
03:b2:6b:f5:b1:14:21:d5:b2:5b:30:b2:3e:09:aa:
64:5d:7b:a1:49:20:ee:ed:17:63:79:11:c2:0a:1f:
09:7c:7d:4b:42:87:db:7a:5b:cb:2a:21:c1:62:c4:
13:4f:ec:5a:a8:b9:6f:da:27:6c:90:20:2f:c9:7b:
e3:c4:c5:d9:e2:d2:58:15:80:3c:35:33:1d:55:e0:
54:9b:c8:62:d0:bb:55:04:8a:f3:75:d2:5b:51:36:
0a:8d:ee:54:ac:dc:b7:f7:19:e7:75:f5:00:ad:2a:
0d:f7:92:01:fd:dc:a9:0a:52:a5:d5:74:9e:d7:cf:
4e:37:73:ce:be:5e:0a:08:2d:de:67:77:4c:60:32:
25:a5:ad:90:ee:d5:71:7e:41:3b:29:85:16:8f:98:
df:c2:83:02:40:20:6e:60:4c:ff:f2:28:c2:ca:cf:
95:10:98:c7:7e:07:71:98:cf:c9:82:93:29:f5:ab:
38:f9:a4:39:d0:16:6b:bb:9d:7f:5d:5a:d2:8b:6d:
43:81:9d:ed:48:4d:cc:ed:2e:84:71:f0:db:ff:ba:
ab:b4:48:63:3f:44:00:ca:de:f9:48:3f:1e:f8:6c:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:63:5F:BD:2A:F5:11:59:E9:E3:22:0A:8C:18:C1:15:49:CF:F6
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fe:d2:48:af:c1:15:00:68:9c:b5:37:9c:25:22:f0:a0:f4:
22:4c:4b:72:29:ec:23:3e:b5:d8:c4:d2:29:ad:77:01:2a:c0:
82:69:bf:77:7e:aa:e8:2b:08:39:71:44:4e:aa:0a:4b:4e:11:
fb:4f:5b:c4:ba:cf:65:67:3d:6e:37:1c:16:2a:a3:40:89:c2:
ca:b3:6d:8c:b5:6b:a4:9c:8a:44:33:ee:cc:f9:b8:91:3d:f4:
d1:2d:1b:b4:74:f1:39:3f:97:d8:e5:65:a9:6d:75:26:9a:0a:
e8:cf:fb:50:7f:53:a7:e6:80:78:41:83:b7:bd:23:1d:15:58:
85:ba:58:0a:d7:91:fc:1a:ab:0a:70:5e:f1:6d:13:fe:fa:03:
99:6e:68:dd:9b:76:99:df:ba:98:53:9a:75:bf:27:c6:f4:f3:
fd:8c:5b:a1:ae:5f:0c:53:3b:d5:64:ac:d4:13:3c:60:03:f5:
b6:fd:5e:0a:6d:df:1e:70:7d:bf:89:73:c3:5e:b7:0b:4e:7a:
0c:7a:10:14:d2:0c:2d:cc:12:6b:da:76:6c:77:ea:39:48:88:
97:39:ea:d2:c9:dc:b1:fe:4b:ed:b1:98:50:cd:4e:25:0f:6d:
4c:16:db:3c:10:1d:54:fe:2b:5c:16:8b:81:25:6a:a7:57:5b:
59:c4:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:26 2026 by rpki-client