Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: 778xUMYbOohodx4K2Bcre2YoLKEAhggleF6MgIpFuSI=
Subject key identifier: F1:05:72:EA:4E:B9:99:9F:8F:92:FC:17:D0:FB:F1:9B:0C:46:80:29
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 019CAD5A0DF151FCE969D6D5B258C9A164F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: H6Y3_w5a1_i-L1M075HehP8YsoI.roa (hash: uNroeOFalDlUw3uGgFmeF8VXUs3UXidLQdLtm01sWMc=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: 9NggDJ4ruurseFubRDYdGX7wYtHHiecS4STO66YeNQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0d:f1:51:fc:e9:69:d6:d5:b2:58:c9:a1:64:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=f10572ea4eb9999f8f92fc17d0fbf19b0c468029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:0f:76:8e:22:71:e0:a5:90:ce:80:98:bc:
5c:62:d7:b3:e8:aa:f4:d8:07:f1:a4:a6:ff:c0:fa:
e1:35:f9:92:08:42:97:78:d8:a2:04:c2:50:29:53:
d6:92:90:2f:d0:30:b8:33:04:19:76:37:3a:01:0b:
65:1b:b9:1f:79:b1:e0:72:fe:fa:ed:7e:b4:08:ac:
b9:eb:38:98:a7:19:f7:04:c6:f6:15:1e:de:82:cf:
58:b3:3f:81:b9:71:93:74:f7:e0:fb:59:68:ca:fa:
10:95:27:a2:71:d1:ff:21:97:fb:55:84:19:f8:e0:
99:66:74:8c:11:9a:f3:6d:2a:12:7b:7e:c0:dc:72:
15:1b:84:99:7c:cf:56:94:3c:68:98:b9:88:3f:77:
0d:9e:24:dd:4b:53:5f:30:c4:df:5f:d1:ae:2f:d3:
23:96:dc:f3:4e:fa:00:48:b4:ca:3d:2c:7a:f8:cf:
24:3b:03:12:77:64:4b:de:a3:e2:47:51:82:d8:c5:
28:dd:50:09:26:08:15:87:78:b0:a9:21:ed:0e:45:
d9:1f:09:8c:61:31:22:65:fc:5b:3b:96:50:23:ba:
45:52:af:c9:7c:cb:fb:e0:b5:53:06:cc:f8:e5:96:
08:bd:61:1f:fb:81:48:88:f2:e8:14:f4:e0:78:ff:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:72:EA:4E:B9:99:9F:8F:92:FC:17:D0:FB:F1:9B:0C:46:80:29
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:41:76:d4:69:14:1c:c8:02:e9:12:9a:a0:ca:51:06:d1:91:
c3:30:89:db:72:1d:d5:5e:ca:0b:bf:b0:f1:5a:89:63:76:32:
f6:b2:45:fb:32:25:1b:b8:2d:ed:1b:68:fb:85:eb:08:1d:ad:
8c:b2:dd:af:ee:2e:3e:5a:63:86:70:5a:d2:63:22:c2:fd:72:
0b:30:ce:b0:65:81:4f:3d:1d:05:d3:c8:7a:cd:69:f3:73:d2:
9f:99:fd:ad:23:05:0f:fa:6c:e3:48:ac:91:b2:1c:02:ab:fe:
34:f4:94:e5:9b:db:45:77:c3:ee:a0:b6:24:0b:cf:b9:61:d5:
f8:c3:8b:a2:74:a4:2d:24:49:70:74:09:53:40:1f:48:f6:ef:
47:90:67:3e:dc:6f:d8:6b:82:51:ea:4a:18:26:62:48:52:b0:
b7:2b:9d:e2:14:56:44:08:aa:63:c4:9a:b6:cb:3a:fb:25:58:
08:24:65:71:77:74:c4:d3:ba:10:1f:a7:f4:d1:03:5a:8b:e1:
2b:b3:58:a7:85:29:6c:1f:c2:d5:55:a0:bc:c5:f1:1b:c5:96:
1a:f5:b5:1a:5a:c2:43:b0:19:f8:5d:4f:1a:d8:e6:1b:33:54:
b4:e8:42:1f:9d:f1:3c:f8:9e:34:1a:21:db:70:8e:98:bb:98:
e0:08:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:45 2026 by rpki-client