Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: fZwge0aoTgi5zKWKjgIJ9pS5tBpi18fxTOXm2BSNvz4=
Subject key identifier: A5:EF:C0:F4:C6:00:A7:48:1A:1E:D4:C3:AC:5B:F3:20:5E:3F:BF:AB
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 019CACB5740D7C545C1357D4E7C7ADC2BFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 04:01:38 +0000
Manifest this update: Mon 02 Mar 2026 04:01:38 +0000
Manifest next update: Tue 03 Mar 2026 04:01:38 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: V2Fgx6gCUp/AGj2+T6qa0NPMxHyba2yXTT8V7k7mimQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:74:0d:7c:54:5c:13:57:d4:e7:c7:ad:c2:bf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Mar 2 04:01:38 2026 GMT
Not After : Mar 3 04:01:38 2026 GMT
Subject: CN=a5efc0f4c600a7481a1ed4c3ac5bf3205e3fbfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:f5:1c:cf:25:a0:ff:3f:89:e7:00:71:3a:
a0:c4:41:4d:23:ef:fe:17:2a:db:9e:7e:80:4c:bf:
6e:cd:20:95:4b:75:f1:8a:f8:a3:d0:f7:83:2b:fd:
e7:6b:fb:10:46:d6:53:20:6d:df:08:67:73:bc:45:
90:c1:77:3b:1a:a0:3c:a6:2b:d6:14:53:23:45:b9:
68:11:c0:92:d2:34:99:de:01:34:ed:73:e5:eb:1b:
d8:6b:fd:76:4e:a9:a3:c0:ee:d1:46:93:db:db:e6:
ca:01:e5:d3:8f:a9:ba:4d:3d:ba:dd:2a:9a:29:50:
e5:9a:64:c7:f0:53:12:d9:7b:3e:24:10:5a:94:48:
5d:b3:cb:e5:2d:a6:45:43:ce:cd:cb:c8:8c:a0:fe:
22:78:a6:db:10:27:83:b8:d0:ee:35:c1:1a:20:c4:
45:96:cf:d2:ae:8a:5f:01:be:33:fe:1c:ae:e4:7c:
15:2d:51:24:2b:fe:30:f4:89:b0:92:34:07:5a:8f:
f3:fe:c6:4c:1b:6b:78:ba:b1:ac:af:51:b9:8f:af:
6e:26:95:c0:a5:37:02:04:86:23:54:ad:3f:63:e0:
41:d3:c1:44:68:0c:4e:85:9c:3f:41:68:06:74:d3:
4d:1e:92:f9:ee:e4:ba:ac:18:e2:82:47:4b:76:c7:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EF:C0:F4:C6:00:A7:48:1A:1E:D4:C3:AC:5B:F3:20:5E:3F:BF:AB
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:de:67:6e:4e:72:88:55:8e:c6:3a:fe:95:9a:05:1b:78:a2:
8f:db:8d:d1:e5:0d:92:95:d5:d8:cc:04:33:3c:4f:6c:75:55:
6a:bd:a2:50:aa:6f:ec:88:a9:59:dd:39:1d:d8:96:87:6d:83:
04:11:aa:02:b9:39:d9:a4:25:9a:6b:7f:56:83:12:17:3e:e8:
38:e3:88:87:ee:07:e6:78:9c:74:e1:98:5a:f5:bb:50:b1:19:
7f:78:df:fd:16:21:a8:f8:4b:b0:fc:44:37:10:27:31:db:57:
8c:99:8e:ff:50:35:5d:1c:2e:f0:d8:dd:3c:ae:b6:6b:d3:7c:
5e:0e:e3:e4:8a:f1:39:fd:37:a1:42:4a:a4:12:36:49:8f:16:
45:b6:e9:05:44:c1:54:0c:50:3a:0c:db:8e:8d:48:97:02:74:
69:f6:fd:56:98:3d:28:a6:58:48:ad:fb:6a:fa:0b:75:c1:f6:
67:20:77:64:bc:59:63:5f:cd:08:32:e5:13:f0:52:02:bb:bc:
06:9a:7c:ff:5f:54:aa:27:7c:bf:47:3f:31:cc:d7:2b:ea:c1:
54:22:2c:c5:10:82:b5:33:88:ae:c6:98:8f:cc:02:fa:39:87:
fb:22:f6:b6:8d:ae:1b:93:a3:1e:a7:9c:7b:96:cf:48:1b:fa:
69:9b:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:32 2026 by rpki-client