Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: hvhtMDm18zIzO9deY+6LuiU4cYTCdcKNoxMrmey7FU0=
Subject key identifier: 41:1B:12:91:A6:4E:CB:37:45:84:05:0C:22:30:FA:71:5E:36:8F:BD
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 019CAC7DEFD541EB355C813ABE3A80663D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0C5B
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: P_Lt8AY8fM5LppruerzO34vRqLY.roa (hash: zp6zmtIN8JWsWA0pcCGjGihKqrwJVCtW0jabbQoyYms=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: MUag7KxFtLjKjC32c2IfpNNYs5tbqdtBeUMJEelaWDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ef:d5:41:eb:35:5c:81:3a:be:3a:80:66:3d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=411b1291a64ecb374584050c2230fa715e368fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:11:f7:05:48:be:4f:21:88:8c:5b:0c:dc:
5a:43:cf:35:91:a1:c2:a2:dc:48:48:48:44:42:ab:
7a:38:7d:d6:ef:40:1b:e0:15:39:51:47:7d:ab:b4:
a0:76:c4:93:11:fd:aa:bf:4e:43:58:25:e5:5b:5e:
97:7c:e1:9e:73:05:06:30:5f:86:ef:3b:f1:71:9c:
80:71:6f:78:b0:e4:73:32:8d:d7:a7:a6:9e:64:32:
aa:c1:35:67:21:22:0e:fe:4c:06:9b:f8:ce:99:1d:
36:9f:0a:f2:9e:11:83:e0:9e:e7:b1:30:fe:5d:58:
b5:5d:56:6c:08:0d:5f:db:8e:50:6b:10:62:52:1a:
ec:3b:0d:70:04:6d:23:a7:0b:ab:b0:7e:e2:b0:32:
42:2a:73:e2:6a:8b:4e:fc:fa:ba:e9:69:1e:11:ae:
1b:1e:6f:74:eb:e7:93:e4:7b:b3:e2:ef:b5:8f:a4:
b6:5e:fe:95:90:61:55:6e:7b:46:65:bf:fd:70:e3:
cf:5d:3a:ad:19:3e:96:74:55:d9:ad:83:92:99:b4:
14:94:5d:ed:8a:6d:59:35:0e:06:a3:45:91:0a:c2:
2a:94:95:5a:1a:85:80:c3:d9:66:18:b6:d2:21:a0:
b4:71:0a:92:ec:9f:4a:3f:d4:71:cb:01:83:02:d0:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:12:91:A6:4E:CB:37:45:84:05:0C:22:30:FA:71:5E:36:8F:BD
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:10:1a:44:b1:53:a4:cf:51:fa:7e:b9:95:a0:83:7a:3a:2c:
6b:ac:fa:75:27:88:f5:7d:0d:ee:32:62:1a:15:2f:dd:48:d7:
98:20:eb:43:47:87:50:4b:ad:8b:73:72:1c:1a:6b:2c:24:27:
7b:81:13:14:36:3b:65:a3:b5:1c:ff:64:5f:ca:fc:35:82:49:
22:73:a4:3a:7b:71:f1:02:ff:72:00:ae:ce:62:95:49:0e:ed:
94:ce:56:b6:dc:1d:b3:98:90:94:8c:f7:8c:f4:30:54:67:e2:
ae:a0:4b:3b:b6:87:70:2b:47:b8:dd:8c:e6:a4:2d:88:b5:9a:
17:c4:95:94:fe:68:69:26:53:73:2e:50:05:9f:28:c2:f1:34:
91:36:3f:ac:9c:80:1a:75:87:68:63:cd:c6:33:9d:6d:e9:95:
f4:94:a4:6f:dc:19:b5:74:7d:85:67:af:5c:4d:de:21:54:2e:
dc:0f:d0:17:a2:1b:27:64:6e:4f:98:4c:ea:df:36:51:e9:f7:
5c:a5:e3:d6:c9:24:71:e0:b5:ab:c2:90:fe:d3:a6:bf:6b:fc:
a4:e9:61:d6:b2:6b:ea:38:1b:75:56:ed:4b:09:07:5f:7f:b6:
85:a5:62:11:94:27:da:a1:0a:85:f3:e2:74:90:6d:d7:51:6f:
8d:38:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:14 2026 by rpki-client