Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: aHwkH/emCg23wjjSk9nt/caHzHeHNTF4XZyVRpT+nKA=
Subject key identifier: F1:BE:6D:3A:39:61:F9:87:DC:C2:52:6C:3A:23:19:B5:4E:09:7E:15
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 019CAC4725F0FD35565AAF502E1306CF9372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: 1f8yNz_6CeZb2_cKtFYjakkUYu0.roa (hash: CQrSvmHUDyMuGsezkRUoXIh9i5m3+0vp+bw6nOrytp0=)
2: eByvcSZKJ0C054yav4nbHodBBYg.roa (hash: iRSBboUDEVdKSWCvgZE0xP0Y8IB0acvS1GqTMfNLmr8=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: JLKEV0Nftt6qwohW3+i0M/W3B6OUP6QHFmMlGKlc+u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:25:f0:fd:35:56:5a:af:50:2e:13:06:cf:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=f1be6d3a3961f987dcc2526c3a2319b54e097e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:bc:d1:cc:a7:30:0f:59:d4:24:12:43:24:
20:80:13:6f:88:de:9f:ac:66:15:81:be:c2:17:bc:
c6:fa:ba:00:97:ea:db:3e:87:8f:18:09:3c:cf:6b:
f9:3c:3c:03:65:65:c1:88:ea:c1:78:01:fd:24:5c:
b6:b9:0d:ba:66:2e:88:73:c6:01:a3:02:35:c4:6e:
e8:26:cd:f4:bb:8e:da:7c:47:a5:fc:f8:e7:bc:5c:
b9:e1:1c:b9:e7:70:f5:30:b0:ee:71:85:77:24:85:
d0:bf:1a:9f:19:8b:9f:c5:ae:7d:82:54:05:12:4b:
75:ae:5b:0f:02:70:d0:cf:b0:12:87:a1:af:75:f7:
91:e8:cc:17:bd:1f:8e:28:c3:a8:1b:8b:29:db:2f:
71:5f:91:36:2d:23:8d:fb:a4:e3:f3:ce:97:37:c6:
18:5b:b7:2f:cd:c2:dc:17:e6:06:fc:74:5f:29:0d:
5e:c3:ad:33:5b:2b:04:1e:67:af:fb:66:22:30:e7:
e0:78:88:2d:d7:0c:b0:3f:c8:70:de:ae:b3:82:9d:
dd:92:1b:c2:44:77:2a:e8:6f:8f:ff:4e:32:2a:7d:
60:b9:a4:1b:2f:6f:17:be:ba:20:e5:a1:62:78:48:
84:59:d2:a4:9f:0a:ba:f7:c3:cb:f4:51:e2:cd:10:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BE:6D:3A:39:61:F9:87:DC:C2:52:6C:3A:23:19:B5:4E:09:7E:15
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2a:95:3d:e5:ab:8f:58:43:f2:7f:71:77:aa:02:94:ee:eb:
7a:14:92:51:3f:15:7f:58:49:62:69:ab:1b:83:ec:3d:49:0c:
07:d3:6e:d7:71:6f:4a:32:8f:cc:93:2e:51:44:3a:74:62:48:
ee:ab:e0:91:5e:80:ca:b9:03:cf:a9:fe:bf:5c:d6:9e:e2:cf:
88:f9:23:1e:9a:4e:ca:3f:22:f9:45:29:51:ae:7a:77:87:70:
64:85:b1:87:55:cf:d2:de:2f:b1:51:26:ba:92:86:9b:10:3c:
44:df:d4:73:86:d9:bf:9a:6b:63:90:e3:02:c5:1c:1b:fd:c0:
4a:b4:9d:b5:bf:dd:e2:bc:88:1c:a6:1b:24:b7:7e:8d:75:97:
51:2d:90:b9:2f:72:8f:64:c6:e9:29:d0:4a:d9:6a:f4:30:0f:
d0:3a:b3:da:46:5c:42:8d:d4:46:15:c4:fb:55:9a:eb:78:96:
5b:44:1d:dc:7e:e7:a6:7e:6e:9e:af:51:1d:f7:90:e9:10:6a:
74:58:88:99:b5:90:d8:03:a1:e5:01:83:ec:e3:7f:8a:2e:b1:
c6:37:a4:74:4e:96:9e:20:36:49:66:8b:d5:20:0b:d2:3b:b8:
d9:9a:3b:bc:bd:e3:81:01:e9:25:d2:15:5d:29:8b:fb:2f:50:
86:80:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:20 2026 by rpki-client