Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: eiJSDLgjnpvD3rtU+sXzhSZ17b4811qhPB/uvrA+qx8=
Subject key identifier: 73:2A:7E:DB:BB:9C:06:A9:12:36:3D:DC:5C:D7:7E:6A:70:F1:BE:8C
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 019D9E1BA257C1A1C8D568AA02CE8CDC9F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 0101
Signing time: Sat 18 Apr 2026 01:01:44 +0000
Manifest this update: Sat 18 Apr 2026 01:01:44 +0000
Manifest next update: Sun 19 Apr 2026 01:01:44 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: lUOi7AbVzQL1yuokY7FHs1yT4tQ8Znksvxn5EJoZdVE=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:a2:57:c1:a1:c8:d5:68:aa:02:ce:8c:dc:9f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Apr 18 01:01:44 2026 GMT
Not After : Apr 19 01:01:44 2026 GMT
Subject: CN=732a7edbbb9c06a912363ddc5cd77e6a70f1be8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:fd:cb:51:a1:d8:12:77:18:ae:98:cc:fe:
97:75:bc:08:be:85:31:05:e5:24:cd:1f:75:c2:a0:
37:9e:48:01:89:c9:7c:77:5c:67:08:a0:47:04:7f:
7c:73:58:ed:e3:bc:43:8c:ad:4c:bb:17:dc:24:f5:
06:a2:ac:06:27:97:e1:be:f4:78:96:be:9d:81:f2:
23:96:91:85:c4:a9:42:1f:e1:86:e5:c6:08:db:9f:
7c:74:75:96:ed:07:7f:3b:ef:bd:b6:cf:e4:00:54:
22:a8:49:cb:da:31:90:36:79:74:ab:23:8a:9f:9a:
ba:79:70:2a:6a:de:21:be:59:68:71:a5:33:2d:17:
cb:cc:ee:50:3b:1f:4d:cf:03:64:0f:07:75:19:ea:
8b:85:10:f3:36:c7:d9:3e:54:70:3b:78:6c:12:27:
6a:ce:cf:a3:6c:93:77:2c:1d:13:9d:1b:a6:fc:48:
25:8c:f7:96:02:7a:0d:f4:3b:61:88:06:f7:f1:f9:
07:0d:80:c3:1c:f2:4d:d2:d9:39:1b:a7:d2:89:bb:
3d:55:4c:59:5b:6a:82:3b:06:aa:05:3f:15:52:77:
62:03:da:94:ef:0a:dd:bf:65:aa:3b:57:73:60:a1:
b0:36:26:26:fe:38:35:a7:7f:91:8d:26:c8:de:3a:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2A:7E:DB:BB:9C:06:A9:12:36:3D:DC:5C:D7:7E:6A:70:F1:BE:8C
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:8b:1d:89:d6:b3:2d:3a:e9:e4:9b:04:c7:89:61:0f:cd:
5e:7d:d3:a1:70:94:bb:d2:ef:bd:f6:b0:20:3d:27:cd:3f:32:
66:8f:cc:5e:03:f4:ca:66:ed:17:33:81:a0:d4:a4:8b:50:7b:
01:03:ac:84:69:b4:dd:00:80:f3:8a:9d:b5:84:a9:14:71:06:
cb:0e:c3:59:1a:ff:5c:b4:49:bb:08:22:fa:cd:f9:5f:8b:fa:
00:ed:5e:21:fd:b3:2d:ef:77:38:49:9e:ae:07:9e:5c:4e:d6:
eb:8c:12:cd:64:3f:6c:6e:eb:0c:77:bc:2c:0e:f0:57:76:7a:
d3:dc:4b:20:00:7c:3b:5c:0c:48:47:c3:57:14:fa:82:5c:47:
e1:ab:a1:62:38:4e:bc:51:5d:c6:cf:c4:ef:b9:9e:d7:f7:29:
11:0d:84:36:e4:01:dd:ca:82:f4:dd:ae:46:be:eb:ee:38:e0:
7a:18:98:af:26:fb:f7:a2:2b:b6:00:c0:dd:59:60:91:9f:b7:
30:26:cb:77:46:fe:8e:21:50:8f:d9:0a:1f:93:49:73:7a:a4:
70:7a:fa:c4:74:97:6d:ed:0d:be:ed:a3:4e:d5:39:1f:c7:18:
b7:40:27:ce:51:06:d0:3a:a7:f0:70:b9:57:ea:b2:f9:9b:1e:
6b:c9:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:39 2026 by rpki-client