Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: YCKGPHgq8jQFi7C44aAeJr6i8XD3i9fyx8uTdayw0OE=
Subject key identifier: 18:65:3D:6A:52:95:1F:08:05:A1:C4:14:47:30:CD:A8:94:EB:42:5F
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019CAAFD1D06CFE80A409BAFEC70FD7ECEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 1097
Signing time: Sun 01 Mar 2026 20:00:40 +0000
Manifest this update: Sun 01 Mar 2026 20:00:40 +0000
Manifest next update: Mon 02 Mar 2026 20:00:40 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: Ivgi5feJ0MoxKTDOkORo1TtAJ8Fb+Ytv04H2EG5HfJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1d:06:cf:e8:0a:40:9b:af:ec:70:fd:7e:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Mar 1 20:00:40 2026 GMT
Not After : Mar 2 20:00:40 2026 GMT
Subject: CN=18653d6a52951f0805a1c4144730cda894eb425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:18:68:2a:6d:8e:c9:5e:ad:3c:92:32:d3:
42:7e:77:04:a8:9d:a6:b8:f8:3a:db:42:5f:f0:f4:
1d:0e:48:a0:c4:53:b8:71:4c:fd:47:8b:57:1b:63:
55:3f:84:b4:1c:07:c0:36:35:52:46:14:fd:0d:5a:
93:6e:e0:db:6f:52:89:02:b2:34:7b:48:4c:73:73:
ad:61:88:5b:8f:58:da:7a:f2:ee:e8:e1:71:5e:cd:
ca:8e:3b:7a:f7:6d:64:b9:b9:2a:6f:df:1d:51:9e:
bf:4b:01:1f:39:d5:2d:0a:cd:65:fc:9b:f7:34:e7:
6a:4e:e9:ac:c0:51:1d:83:87:bb:29:a1:30:5d:26:
71:fe:ad:f1:f6:d8:e2:4f:bf:f5:2d:e7:ef:40:25:
42:81:0f:cd:ee:72:33:00:b6:cd:cf:48:83:ea:80:
45:a2:4b:cd:97:3d:90:6d:7c:df:46:69:52:51:53:
6e:72:92:9a:76:a2:e7:c2:6d:96:06:84:1b:df:6f:
41:5e:56:c2:8f:3d:11:be:f4:7d:56:a5:c9:7e:94:
20:f4:5d:20:de:7d:18:52:37:9f:2c:ab:7a:ca:80:
f8:ed:94:c9:a3:14:27:93:f2:ad:95:c1:09:f4:7e:
66:3b:71:35:cd:67:30:bd:d3:f1:2b:bc:f7:d6:ea:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:3D:6A:52:95:1F:08:05:A1:C4:14:47:30:CD:A8:94:EB:42:5F
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:de:e6:78:b9:13:c4:87:87:11:16:55:44:88:51:95:cb:0c:
1d:19:66:7d:b5:03:15:1c:8b:c0:88:6f:52:06:df:af:a6:1e:
c3:4b:fe:09:33:cd:fb:cd:c6:bc:a5:0e:99:33:0d:8b:6b:cc:
58:a0:48:a0:78:b7:38:0f:61:30:7f:30:50:68:a9:62:d5:25:
e4:43:20:32:30:d0:1e:73:4a:e6:85:a8:85:f2:f4:97:d7:86:
30:8f:05:85:6d:14:13:c9:1f:01:0c:14:37:96:58:22:cd:69:
b3:5f:09:7e:80:31:6c:0a:eb:66:1a:c4:21:b4:42:67:3a:6d:
6a:d7:6b:31:44:15:00:9b:15:3b:8d:6e:a6:99:69:83:59:14:
03:2b:87:2d:8b:55:33:41:51:6e:54:ff:d9:8b:0c:5c:09:87:
90:73:83:2a:b8:39:53:85:10:38:60:af:14:7f:71:8f:c1:ad:
4d:fb:1f:c2:96:fd:f0:98:08:7b:1e:3e:b8:f5:7c:63:70:39:
81:00:35:be:dc:78:02:90:2c:ec:5e:23:42:54:ac:3e:0a:de:
b0:d3:ca:3f:1f:28:34:51:69:b5:7a:ab:3c:41:46:77:54:46:
c5:87:10:18:0d:aa:61:f3:d0:f9:38:13:4f:7c:12:dc:6b:50:
34:ca:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:27 2026 by rpki-client