Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: Qdi44MJFoZS0XBewAm5hAq9rj24jYciC99VA/c0vlSs=
Subject key identifier: C5:0B:9A:BB:5D:E1:78:75:EB:58:90:0F:12:13:44:99:CF:FE:95:6E
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 019CACEB94D88351671334C4CF8B3D6FBD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 1543
Signing time: Mon 02 Mar 2026 05:00:46 +0000
Manifest this update: Mon 02 Mar 2026 05:00:46 +0000
Manifest next update: Tue 03 Mar 2026 05:00:46 +0000
Files and hashes: 1: 7Na1prGJ4FkiFdW0x9CfNk6_xWg.roa (hash: +rpN0xtGV1MKYV/A1+8x9wSd5PmNaR+b6CBOkrX1H6A=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: hYGBo9QtkI7gdE8zXGJYvmSFnwzrkF3/GSu2se62w94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:94:d8:83:51:67:13:34:c4:cf:8b:3d:6f:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Mar 2 05:00:46 2026 GMT
Not After : Mar 3 05:00:46 2026 GMT
Subject: CN=c50b9abb5de17875eb58900f12134499cffe956e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:b7:ff:3c:ee:5d:b5:e1:a4:f4:b7:14:b4:
66:82:63:7f:61:db:a1:1f:59:a5:98:d8:08:5a:ee:
da:0e:2f:0a:ad:c8:8a:09:d2:65:84:e9:c5:78:05:
7b:94:d2:48:30:2d:e4:91:8b:30:58:ca:4f:55:44:
40:3e:72:b6:eb:ce:6b:45:e0:37:c8:51:e5:1c:e2:
65:89:0e:47:ea:00:5b:d1:df:ab:5b:b6:85:ff:ea:
6e:8b:a1:55:6e:58:48:9c:17:7e:ec:66:cb:63:82:
c8:0d:1f:d7:51:90:66:a3:de:51:7f:5a:b7:c6:12:
17:fb:c9:91:70:bd:43:55:f3:a2:95:35:06:e1:af:
f8:1f:1d:00:16:b5:e7:3d:0b:54:fb:4b:5f:f5:5e:
47:e7:36:f2:d3:b3:8c:20:6f:b1:ec:dd:5e:4d:a7:
2f:21:79:46:44:d1:95:10:5f:01:c7:ee:7c:e6:f9:
de:bf:70:0a:9b:17:b3:6b:81:1f:8d:89:a1:5e:d0:
a5:28:b6:21:7a:b7:a2:19:a6:91:b8:02:d0:ea:88:
ef:e0:b4:1b:10:cb:34:b9:e0:fb:09:74:a2:b0:18:
20:36:c9:da:3c:45:57:7f:9d:55:4e:de:68:fa:2d:
89:1e:d9:76:17:09:12:a9:21:1f:24:88:3a:42:75:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:9A:BB:5D:E1:78:75:EB:58:90:0F:12:13:44:99:CF:FE:95:6E
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:df:67:69:43:74:3e:7f:17:2a:e0:09:a6:5d:bb:d5:8e:63:
95:e8:54:94:02:b0:8b:c5:ce:83:9f:05:30:8a:b9:b1:5d:ad:
93:14:6b:4c:2b:f6:a9:cd:e4:cf:2a:02:7a:a6:7f:4f:ec:79:
9b:db:2d:64:96:61:6f:78:1c:59:00:9e:b5:3b:ee:8c:7e:37:
da:8d:84:59:1c:e2:10:2d:2f:c4:d3:54:4d:20:b8:94:93:84:
3a:10:ab:8a:69:32:f6:6b:d2:fa:f4:ee:97:2c:32:23:7b:06:
05:1f:bc:8c:ec:b1:c3:03:78:bf:d4:46:a3:9c:c3:d5:2f:f8:
dc:d7:e5:42:21:4e:f1:04:21:15:2d:15:84:74:71:55:0b:84:
08:f0:d1:71:ca:7b:79:3c:80:24:5c:9a:f0:58:65:45:e2:07:
26:1b:d6:2e:96:e2:ee:5f:76:af:9e:6e:b2:bc:4b:35:dc:16:
10:90:18:ce:21:df:f2:cf:4b:20:b9:44:56:f3:15:2e:9f:75:
71:0b:78:06:73:ba:c6:21:44:73:48:42:13:9a:2f:94:74:15:
6c:d4:bc:1a:9a:20:96:48:f2:63:36:37:c2:61:c1:99:e1:75:
dc:42:28:bb:29:6c:76:78:c2:27:17:e4:bd:41:2c:a1:aa:ee:
f9:4c:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:51 2026 by rpki-client