Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: 7uJ6e+AKIi3dIOW4th7XHQPrPIaNf3C4B092ItE23Jg=
Subject key identifier: F2:3B:E2:44:1E:69:8C:89:CC:7C:D3:7E:66:AB:58:0F:E6:20:30:B6
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019CABDA096C96C3ED6DD9FD2AD7D12A87C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 140A
Signing time: Mon 02 Mar 2026 00:01:59 +0000
Manifest this update: Mon 02 Mar 2026 00:01:59 +0000
Manifest next update: Tue 03 Mar 2026 00:01:59 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: NFeqGu7X6V/b6PhuPBMDj1h35DvjLllXRpJNwW+OCdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:09:6c:96:c3:ed:6d:d9:fd:2a:d7:d1:2a:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Mar 2 00:01:59 2026 GMT
Not After : Mar 3 00:01:59 2026 GMT
Subject: CN=f23be2441e698c89cc7cd37e66ab580fe62030b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:d5:86:c7:24:6d:e1:68:c4:43:25:df:9e:
85:53:ca:ab:8b:72:87:0a:90:49:33:dd:05:8a:9b:
53:ea:d3:8c:57:3a:19:29:9c:0b:9c:b2:e9:66:6f:
25:00:65:8d:0a:e2:02:ad:25:73:42:98:6c:92:b4:
04:4d:ce:1a:b8:ed:8d:ad:4b:b2:d9:12:c0:6a:93:
d7:c2:c1:7c:ec:c8:7d:52:e5:07:d2:80:f4:5e:64:
56:ae:d5:df:b4:ae:7e:c7:5c:8b:6f:29:71:60:cc:
e4:e7:a1:62:ce:e7:e1:7e:5d:85:12:e6:26:f8:ec:
78:82:ba:ff:99:bb:94:76:bf:da:7a:f3:fb:73:2a:
97:ef:07:ed:73:6f:fc:b5:6b:ed:69:98:fe:c2:44:
d1:19:cf:2a:da:29:ff:9e:65:0c:94:23:b5:70:ae:
76:84:ba:54:e8:23:64:d9:83:06:5a:26:82:a5:83:
35:64:31:fe:2f:23:4c:fb:b3:45:e1:7e:85:69:06:
c8:3b:d5:fd:24:c5:36:cd:f5:df:38:5d:dd:64:44:
88:8c:70:f9:a7:67:57:c1:c7:ba:35:6b:27:3b:e1:
12:22:fc:c1:79:d6:a3:d9:ca:11:42:ed:b2:97:01:
8d:8a:a5:d3:84:d6:3a:b5:44:7e:46:93:9b:25:ef:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:E2:44:1E:69:8C:89:CC:7C:D3:7E:66:AB:58:0F:E6:20:30:B6
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d4:c9:b7:8a:ef:53:af:27:1d:75:3d:da:a4:5b:f6:4a:c1:
dd:85:04:e2:b1:64:2f:68:57:54:b2:1e:f5:0c:97:2b:5c:a7:
f1:59:14:a6:8c:91:98:93:94:cb:de:bf:76:01:ee:aa:9d:3e:
62:4f:ff:f2:57:05:a7:14:ab:b3:8c:0a:53:1b:5f:55:86:d7:
49:90:fb:59:2f:4c:ec:4a:b6:30:70:98:c5:e3:e6:34:39:59:
e9:5e:02:f2:97:9e:92:3f:32:5d:f9:66:22:f5:54:34:76:57:
b9:97:e5:4e:fc:51:34:29:55:f0:93:2d:66:31:23:8b:a2:66:
f8:84:1f:52:fa:2c:23:7d:d9:38:36:8a:3b:f0:ca:a8:4f:b2:
a2:9d:89:e2:dc:e8:8c:61:b1:df:0e:a2:eb:cc:bd:8f:44:e5:
09:b3:7f:f1:f5:37:36:05:1b:bf:b0:13:5e:40:a3:f1:61:89:
b7:1f:7e:c0:70:7a:42:ae:c6:66:a1:e4:a1:c3:65:42:2f:02:
c9:7d:1d:38:a8:1f:3a:17:2d:47:f3:91:73:f5:5c:d1:e0:50:
65:00:ce:99:9d:71:84:3c:a6:5b:26:8a:ba:85:ff:a6:36:35:
70:a0:6b:c4:ec:53:f7:38:81:9d:0f:c7:4c:a3:8c:2a:cd:b1:
08:30:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:50 2026 by rpki-client