Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: kCfiLQDuD2vdtxM1AT6z3q1qBce9Y8xc7unYEqED0qs=
Subject key identifier: D2:94:86:E8:3A:AE:99:2D:D1:59:15:76:F7:78:E5:B6:83:3E:25:C1
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019CADC7A975ED324BF3D3F44119E9D9B6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:01:09 +0000
Manifest this update: Mon 02 Mar 2026 09:01:09 +0000
Manifest next update: Tue 03 Mar 2026 09:01:09 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: 4j8kiExDmnkJ2s6Ri8gR7agVd7TIskTgThJhyZz5O0s=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:a9:75:ed:32:4b:f3:d3:f4:41:19:e9:d9:b6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Mar 2 09:01:09 2026 GMT
Not After : Mar 3 09:01:09 2026 GMT
Subject: CN=d29486e83aae992dd1591576f778e5b6833e25c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:c7:64:43:06:6c:18:8b:4e:28:96:91:1e:
fc:77:95:8f:c4:f8:13:32:8e:ae:6c:f5:3d:26:39:
f2:6b:ca:b7:cd:ed:fc:49:dc:36:2b:c7:1a:35:f7:
b5:70:a2:d8:d6:f0:57:f7:1b:c5:2c:36:ae:45:b8:
ff:96:06:33:1b:8f:17:83:b2:51:4d:0a:68:a0:a5:
9d:6c:d3:36:0d:86:87:84:99:a8:87:d2:00:7a:9b:
61:07:c4:11:c5:68:4a:ac:7a:34:14:cf:1b:35:76:
49:e5:f1:aa:ef:54:c0:56:ac:b6:11:f4:1a:f9:ae:
6f:9a:98:22:cf:a4:ec:aa:38:bc:51:e7:c7:01:6c:
c1:5c:36:b6:38:f0:fb:dd:65:8d:00:3a:81:2e:32:
75:0a:a3:bd:29:ee:a9:7c:d4:78:48:94:4c:62:ff:
f9:ec:87:0c:75:f9:d9:9f:f7:b3:85:e2:6d:71:87:
38:d4:97:fb:1f:a9:64:a7:33:00:7d:a0:81:4d:2a:
5e:1f:ab:ce:89:e1:76:f5:ff:58:3c:92:60:41:95:
90:6b:93:2f:d0:2c:37:eb:94:e1:a5:0d:46:62:5f:
e3:55:7a:94:a7:22:69:97:26:a1:1b:16:8b:90:b8:
07:9d:3a:99:66:2a:e1:a2:19:ec:d5:2c:96:bd:15:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:86:E8:3A:AE:99:2D:D1:59:15:76:F7:78:E5:B6:83:3E:25:C1
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:8d:9c:6c:5e:65:9d:b9:77:79:d4:7c:d2:68:cf:3f:49:
7e:b3:3e:36:30:97:99:9f:5b:1b:b7:31:f6:7f:8c:be:dc:e7:
4d:65:81:0b:8f:3d:7d:2a:2a:b8:8e:06:f4:bc:04:59:94:dd:
b8:f6:3d:8f:79:09:3b:dc:86:15:02:08:98:88:12:6c:f2:93:
46:cb:4e:78:7a:4b:ed:dd:7a:d0:5b:61:bb:fc:e9:20:3e:30:
12:90:e2:38:dd:2e:4f:74:59:30:bc:76:95:34:31:57:d2:18:
8c:22:34:b2:31:78:22:45:62:3c:84:e7:e1:f8:e2:d4:35:33:
8b:ab:7c:9d:dd:4a:54:74:5b:e3:2e:a8:db:f3:8c:e0:80:5b:
47:8c:bb:a9:e6:09:be:9a:e6:e4:5a:5c:d5:4b:4e:8b:b0:67:
39:be:52:e9:ad:b9:29:ca:64:c6:7a:7a:ab:9e:dd:92:0a:1f:
dd:02:31:0b:e2:d3:dd:99:44:51:27:8b:0e:59:4c:6e:98:6f:
1d:6c:14:5c:94:b6:78:bf:f0:42:79:2e:c0:b9:93:ad:03:b6:
a7:f6:34:5a:eb:67:2f:56:7f:54:66:87:a3:38:94:69:79:ff:
19:c1:d7:20:d8:61:50:aa:ab:27:74:72:83:d1:7b:d0:b1:28:
95:fc:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:43 2026 by rpki-client