Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: IByE6jEU56VNdGGrlpm/5+kSAhkr2DT2tEq3t6oCEeU=
Subject key identifier: 73:7D:2C:25:CA:B7:C9:B6:CF:00:95:68:06:3F:7A:99:1B:1B:90:FD
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019CAD22CE252A5474096F418EF7972461A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:01:05 +0000
Manifest this update: Mon 02 Mar 2026 06:01:05 +0000
Manifest next update: Tue 03 Mar 2026 06:01:05 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: TBmGlAn+CifDWIz6gT3dYZD9rsGz2GjLtI0Bo95r7FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ce:25:2a:54:74:09:6f:41:8e:f7:97:24:61:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Mar 2 06:01:05 2026 GMT
Not After : Mar 3 06:01:05 2026 GMT
Subject: CN=737d2c25cab7c9b6cf009568063f7a991b1b90fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:2f:ce:68:0d:48:f6:fb:9f:e1:b7:32:49:
ab:e0:12:b5:df:58:57:a9:39:93:6e:ba:6f:7a:f2:
8b:42:04:2b:3d:fa:eb:49:9b:8e:01:6b:d3:4c:e6:
40:b7:55:92:43:97:b1:97:fe:b1:3c:13:76:0a:85:
38:ee:e8:85:c3:56:37:3e:e1:34:e0:ba:b2:5d:53:
b5:42:8b:c9:71:0e:df:4f:fd:b1:98:c9:f8:50:f0:
ca:5c:7c:df:e2:8c:e2:6a:dd:51:c8:e6:da:a5:95:
c2:38:59:ae:36:7b:fc:0d:4a:d2:57:84:1c:1d:18:
1d:65:44:0e:20:a3:a5:7d:45:64:fe:9d:96:4d:08:
ce:0b:85:6e:f5:e3:72:96:70:30:ec:27:7b:cf:0d:
35:b7:8d:60:6a:58:b2:e3:7d:b1:d6:79:2e:a9:88:
75:be:bd:61:e9:17:16:05:05:ae:d5:42:9d:cd:0f:
51:77:41:5d:2e:19:02:68:02:a3:77:3d:f4:4e:cf:
08:6f:d5:49:01:1a:f0:20:91:87:dd:4e:b2:5d:ae:
e4:02:6c:5e:2c:79:5e:89:a6:be:0c:bf:24:99:81:
e7:09:d3:35:92:29:bb:6a:4b:10:3a:e1:f4:5d:6f:
16:40:1a:a2:d3:33:2f:01:f6:c4:fe:3e:76:79:a8:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7D:2C:25:CA:B7:C9:B6:CF:00:95:68:06:3F:7A:99:1B:1B:90:FD
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:c8:f2:95:a6:0e:dc:bf:f1:cf:9a:e8:c8:2d:b8:04:f5:
14:79:1c:45:34:98:d8:05:6c:67:27:c3:c7:7b:0a:2d:57:41:
a4:3c:ed:99:c2:8f:92:23:70:81:72:a4:1e:56:25:1e:d4:37:
79:a6:89:49:80:da:b7:02:b4:95:2e:f0:a0:04:f4:1f:8e:6c:
16:53:85:e9:6d:23:fd:f9:eb:bb:93:ac:28:b9:da:1c:d2:f7:
7d:db:8e:21:59:f0:ca:13:bc:0c:2f:0c:c7:e1:09:c2:f9:b7:
bb:be:b9:13:43:f1:ff:12:09:f8:33:22:70:43:c5:93:86:52:
52:eb:f3:64:2d:86:90:1f:89:74:0c:5e:c2:52:12:f8:1b:9b:
2d:e4:9b:50:e6:05:c5:f4:ca:ba:da:f4:89:0b:c5:bc:75:58:
01:6d:9c:98:b5:f4:5c:3e:54:7a:8a:38:7f:d9:83:e3:36:41:
6a:a9:96:7c:2e:ab:76:f1:63:aa:6c:5e:5d:0f:4e:ae:be:af:
dd:e4:0d:fb:d6:b6:b5:8e:aa:75:3a:d5:51:ac:90:eb:ae:76:
d9:f0:bf:62:77:fb:bd:2c:91:61:45:bd:9c:8c:44:b1:d3:70:
a6:62:98:8f:0d:a8:19:d8:14:18:01:91:37:f7:92:c0:f8:bc:
06:c7:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:33 2026 by rpki-client