Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: YFR4vaXsNLfi6hOpgyYZTIiuLE3Lu72sko1hzOzcZ0U=
Subject key identifier: EE:6E:17:47:72:69:9D:B4:56:FF:07:B3:F3:CF:06:D7:AE:BD:3C:09
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019CAA5837FFC5F6444327729BF169326BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:34 +0000
Manifest this update: Sun 01 Mar 2026 17:00:34 +0000
Manifest next update: Mon 02 Mar 2026 17:00:34 +0000
Files and hashes: 1: IB47LcL5EYCAXhYGlZmz2Yqr9cw.roa (hash: JbEdz7DRUOFf0b29xjdSZVDAgz011LT+vbXjqHH3Ipg=)
2: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: fVZOjpakMvzt1nE2maQOrafJYxr0baea5OY3ttctxcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:37:ff:c5:f6:44:43:27:72:9b:f1:69:32:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Mar 1 17:00:34 2026 GMT
Not After : Mar 2 17:00:34 2026 GMT
Subject: CN=ee6e174772699db456ff07b3f3cf06d7aebd3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:1b:6b:f2:bd:98:b1:d9:37:f4:41:06:39:
05:45:93:50:84:93:e3:d2:23:84:77:55:ea:7a:a8:
f2:6e:94:30:a5:6f:b4:a1:4f:e1:23:42:57:c7:0c:
9d:5f:d9:2a:b0:4f:2d:61:67:9a:75:e3:e5:60:73:
1c:b0:23:03:5e:26:51:6c:10:f5:e0:9a:ca:e2:f1:
2f:85:84:c7:fb:38:9d:4b:3d:7d:24:7a:19:c1:aa:
7f:ec:cd:cd:4d:cd:1b:37:67:43:b7:79:4f:7d:6b:
43:5e:29:68:19:31:c0:ab:21:73:70:87:8f:18:5d:
31:3a:90:1b:06:2a:d3:65:d8:a4:63:a3:b5:c3:8f:
5d:b4:fb:fd:47:c5:8a:bb:fa:d0:8e:10:ad:36:a2:
55:c7:b0:b0:26:bc:cb:63:24:cb:84:e4:f2:a2:2a:
3e:a3:ea:23:d2:dc:5b:5a:4c:fe:6b:f8:ab:9a:d6:
ef:3e:dc:b3:c1:f0:6c:02:95:00:04:e6:7b:a7:d7:
ca:ba:a2:71:27:40:23:c1:58:e7:e9:5d:22:70:68:
b8:8b:9f:39:b9:6f:3c:ef:af:75:bf:53:0e:82:db:
06:e7:ff:21:aa:ff:50:c2:d5:93:ad:70:9e:5f:e6:
c4:66:98:5e:cc:75:15:ff:c2:3f:ac:9f:d6:e7:7f:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6E:17:47:72:69:9D:B4:56:FF:07:B3:F3:CF:06:D7:AE:BD:3C:09
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:68:2f:3b:5b:91:8a:6b:f9:e0:c8:45:61:36:bd:ad:3b:0d:
ab:4a:77:62:d9:06:8d:6b:bc:42:c2:ef:ea:87:ea:ab:12:19:
0c:d6:8a:46:7d:96:34:19:53:ab:c6:09:00:be:83:25:c4:3d:
c1:c6:31:0e:42:c3:f0:d8:25:a1:19:98:5f:cb:01:2f:93:ad:
4e:2f:95:07:cd:7b:cf:62:05:8e:fa:fe:04:57:4c:e0:ef:57:
e8:c7:92:12:b4:a7:06:b4:39:2d:39:b6:5b:4c:6a:77:08:12:
86:e3:82:cb:15:0b:d9:07:3e:f8:cd:00:09:2e:a9:b9:30:cd:
28:6f:af:73:c9:5b:3d:9a:19:5a:da:e7:4e:da:46:e1:1d:9a:
c7:8a:bf:72:10:8b:53:8e:e6:0e:fb:8e:92:14:7d:cc:a7:39:
f6:c1:ee:13:71:61:8e:10:39:15:57:7d:aa:12:02:ed:ab:19:
fe:9e:d4:29:00:83:ab:22:97:c9:58:16:c1:1b:88:a8:52:d4:
a2:9c:61:05:c5:f1:12:80:f4:7b:bf:d5:3d:d0:ce:9e:36:db:
e0:7c:0b:d2:75:be:61:0b:92:9b:74:3d:c1:b1:99:d8:05:ae:
d3:62:96:10:2a:ce:f3:c6:ca:ee:45:d8:a7:fb:19:a4:26:17:
a9:73:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:06 2026 by rpki-client