Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier: FDde0tVKuZUREeA5bku45LJnKWsDgV0yQiB8cxv6Xd0=
Subject key identifier: 32:87:D3:60:E7:E8:7A:B1:BE:76:EE:C2:F8:92:F2:4B:D9:86:5E:A1
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 019CAA584B7E991A239C5202C7D22D49AEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number: 1864
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: EN-fsa953aMVETI0PGhysIbF3EE.roa (hash: frdZjusDaEBzWJUj9JdaF+Kkhr4AdRl43heo7DRLAnE=)
2: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
3: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
4: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: jHlwjOLk4pDNGycaKRuiEKl1A5nagSrhZvej8NBlSsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4b:7e:99:1a:23:9c:52:02:c7:d2:2d:49:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=3287d360e7e87ab1be76eec2f892f24bd9865ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:73:8b:a1:00:07:46:98:63:32:ae:bb:7e:
59:11:e2:ce:a3:b5:76:2f:c8:be:81:47:74:16:48:
12:ae:b5:00:f1:a9:b9:d5:30:8e:a1:cf:0c:d9:c2:
21:b1:45:c0:72:e2:3e:36:02:08:c0:67:fc:30:06:
0c:b1:c3:c1:9b:e0:90:fd:9b:aa:93:99:85:fb:c8:
ea:71:bb:e4:53:88:60:82:ca:81:99:32:25:b9:57:
19:4e:07:76:b4:1a:70:04:66:26:1f:f7:26:48:43:
ed:f9:cc:29:11:05:2f:56:c5:77:60:e6:23:30:ab:
88:e6:97:7b:b8:ed:f2:e2:3b:24:ba:a4:9f:48:cb:
5a:b9:74:b4:4c:21:d2:4c:f8:2c:d6:12:0d:22:0f:
1b:cd:67:96:ca:c9:b7:b7:cf:d9:5c:b4:64:fb:56:
55:bb:d6:14:d7:cd:99:08:3b:ca:67:06:b0:f1:81:
98:4f:05:a4:18:b8:e7:26:96:bd:c9:69:90:47:88:
f1:32:a7:75:ea:a8:96:59:bd:9f:87:1c:cb:d6:a1:
5b:35:25:36:a4:07:f2:05:2e:03:be:28:58:17:a6:
8b:d1:91:e9:00:42:18:04:d4:c6:98:e9:e4:54:bd:
21:67:7b:ed:13:75:9e:51:d9:de:a2:a2:74:c2:47:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:D3:60:E7:E8:7A:B1:BE:76:EE:C2:F8:92:F2:4B:D9:86:5E:A1
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:f6:4e:58:a9:a3:f4:a5:5d:77:d5:9d:43:49:b1:a7:61:
48:df:21:4f:cb:75:0c:ce:31:16:ed:c2:07:52:00:86:2a:0b:
92:16:ca:e9:bd:d2:5c:de:d3:1a:a8:80:1a:cd:ea:62:38:7c:
93:c8:20:62:39:e9:fe:08:4c:23:c5:de:4a:0d:05:04:e6:55:
9c:5f:10:cd:f7:8c:18:91:ef:6c:08:10:69:c9:00:e8:e6:8f:
82:a2:1f:e5:02:a3:cc:87:f9:fa:cc:f9:10:27:59:d6:61:d3:
eb:1e:38:31:5e:c7:68:78:3f:9b:2b:94:ea:f6:0a:16:b3:52:
c1:48:8b:d6:39:aa:4d:7b:7e:93:42:db:b3:a6:f6:e4:84:a9:
66:20:95:11:1a:d1:de:e3:c3:53:32:bc:a3:97:27:89:2e:7c:
83:ab:ef:4a:88:28:e3:f5:65:c5:c0:23:39:32:0f:6e:5a:1b:
cb:31:21:8c:2b:ef:a6:bd:e4:52:44:39:8e:b8:33:85:f8:3b:
27:12:c2:f5:cf:ab:06:ed:98:e2:0a:0e:63:28:7d:b0:a7:0b:
3d:4a:58:70:a7:9f:f6:b8:6a:30:0e:7a:48:ce:0f:4c:cd:64:
b5:30:b4:f3:df:42:3c:89:38:bc:c2:f2:89:62:d5:46:e5:5d:
57:6f:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:59 2026 by rpki-client