Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: keaekjZoAKg6zjYvke737CzpFfyiduoWYGjSV7TaV4c=
Subject key identifier: 94:4F:D2:03:0B:99:69:D9:1C:9A:AC:5B:A3:4F:D6:03:8E:71:0E:F6
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 019D9C6392863E655474EB5F624BE5CB5F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 083D
Signing time: Fri 17 Apr 2026 17:01:04 +0000
Manifest this update: Fri 17 Apr 2026 17:01:04 +0000
Manifest next update: Sat 18 Apr 2026 17:01:04 +0000
Files and hashes: 1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: 50eduQYFS6bIOYtNQ38+aEwFIuFNzNl+RO4q+ZEOQAI=)
4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:92:86:3e:65:54:74:eb:5f:62:4b:e5:cb:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Apr 17 17:01:04 2026 GMT
Not After : Apr 18 17:01:04 2026 GMT
Subject: CN=944fd2030b9969d91c9aac5ba34fd6038e710ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:73:6a:b7:a5:32:7b:60:65:21:76:61:bc:
10:f3:44:af:c6:af:ba:3f:3e:da:99:dc:6c:60:34:
81:fb:d3:8a:e6:58:e4:35:b4:ad:52:f6:6c:80:ae:
bd:1a:45:7a:05:eb:32:9e:9c:fc:9c:86:ce:c2:f2:
da:fb:f5:2d:6d:f1:36:a7:07:2e:d1:85:22:ca:7d:
10:f8:6b:82:14:0a:ca:39:46:85:c4:f7:8f:a9:25:
d2:32:5a:4c:fa:ac:68:5d:c7:9b:14:b8:56:55:40:
5f:7d:61:2b:80:cb:b6:5b:4a:63:ac:b0:5c:60:83:
99:61:04:a0:c0:90:ce:6e:26:b6:08:c0:79:26:65:
21:8c:d2:ee:86:81:78:7b:f1:69:03:02:d6:f4:0e:
6a:ab:c4:bd:db:bd:c7:5a:0b:64:fd:61:45:6c:a3:
22:99:b9:5f:13:a1:dc:49:bf:ba:cc:76:ec:fa:4c:
95:af:55:53:da:66:65:0c:bb:8a:42:57:7a:d8:6a:
d7:c0:03:f9:2b:d4:2a:c9:67:c5:25:0a:c2:f7:ab:
47:65:54:f6:54:88:91:81:61:9b:62:bc:25:41:fa:
22:66:a0:47:c1:1f:de:1a:aa:3b:8a:87:27:1c:d9:
a9:b1:69:23:d1:d3:f5:d6:06:7a:25:dc:e3:f8:fc:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:D2:03:0B:99:69:D9:1C:9A:AC:5B:A3:4F:D6:03:8E:71:0E:F6
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:50:2b:84:a5:12:bd:cd:2a:df:8c:38:52:0e:77:06:9e:
7d:8b:02:97:da:d8:e2:65:b0:47:e5:1d:cc:ee:ae:96:3d:8c:
54:49:be:99:d1:2a:68:aa:8a:a2:fd:99:1c:90:86:0b:3c:ce:
c8:92:3e:69:b5:a2:c1:6e:d7:b4:09:e8:0f:21:a8:ac:7a:b7:
08:ae:a2:10:ea:d2:ce:7a:f4:66:16:6f:52:8e:84:eb:eb:34:
81:c2:ce:40:b4:dd:46:d9:bc:10:ea:97:98:eb:07:2e:7d:30:
73:01:6a:0e:0b:89:a4:37:e9:8e:4e:70:68:ef:5d:09:ee:c2:
64:d3:70:2f:54:2b:ae:60:28:83:7c:c6:22:69:c7:a7:45:1e:
1b:fd:a3:fc:cb:b1:1f:4d:97:ee:41:f2:83:73:65:e8:72:85:
0b:ec:07:4e:99:1f:88:86:f7:73:d8:de:c9:1b:1b:14:62:dc:
57:da:5b:d7:a6:0e:68:0c:86:f0:a7:c6:3a:cc:ec:e6:2c:a9:
0f:13:4d:6d:59:b7:cb:2f:7d:2d:b4:ca:2e:9f:d2:38:26:eb:
da:4f:a8:84:79:e6:2f:ee:bf:de:93:c0:06:0f:bf:d8:79:dc:
22:47:f4:4f:36:99:5d:0e:f6:52:f2:28:84:4e:5e:3a:30:08:
f8:04:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:35:44 2026 by rpki-client