Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: pvvOc0+Khut52t8faSXTrsf0AynchmC0ZQdW1sejW04=
Subject key identifier: CD:8D:72:FD:A7:65:E3:0E:AB:7F:1C:4B:79:99:E0:F6:A6:F5:9B:31
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 019F91A3FD406A18A833E412CA9A25EB1DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 0382
Signing time: Fri 24 Jul 2026 01:01:11 +0000
Manifest this update: Fri 24 Jul 2026 01:01:11 +0000
Manifest next update: Sat 25 Jul 2026 01:01:11 +0000
Files and hashes: 1: MvpTS49h0GRvY0Tj2YEwLbaS2cM.roa (hash: gDgNzdOYz3KjBH95RxNa3YAdnlDk82nruMEoI3Ezi38=)
2: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: Km64KPL4gUZZu0iN4yc4z8BoO6pfDmqIl6/0LPCf/vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:fd:40:6a:18:a8:33:e4:12:ca:9a:25:eb:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Jul 24 01:01:11 2026 GMT
Not After : Jul 25 01:01:11 2026 GMT
Subject: CN=cd8d72fda765e30eab7f1c4b7999e0f6a6f59b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:b6:ae:c3:50:79:5d:95:e1:ef:f5:b3:94:
f4:d3:20:6e:fe:b2:36:f7:9d:df:3a:ae:2f:a5:6f:
71:47:1a:21:0f:ff:ab:eb:cf:74:e4:e6:3c:f0:d8:
1f:77:9d:b8:c6:6d:e0:88:c0:c2:14:83:28:56:ea:
b6:c7:16:a5:3e:e1:32:d5:7c:96:86:bf:2a:09:53:
b1:3c:42:b7:19:b3:58:2f:61:68:c3:93:c6:c3:8a:
59:1b:16:3f:32:ad:0c:65:cb:db:15:25:dd:d0:de:
9f:55:82:14:e7:2a:7a:13:3d:3b:ba:8b:ec:f7:25:
a8:4d:ea:c6:d5:09:2b:bc:cc:37:16:b9:70:9e:1a:
6c:e4:b0:13:fa:39:3f:b9:d7:4f:c7:90:76:59:aa:
9b:fa:77:a5:2a:56:59:6a:ef:e1:0e:7a:52:fa:00:
f9:f5:fd:1a:89:4d:43:b2:5f:c7:33:c2:14:fc:56:
5f:5d:f9:53:f0:95:0f:75:52:27:d3:9e:74:fe:82:
8e:bc:ef:05:31:53:df:e6:75:4e:f5:fb:5e:0b:fd:
00:4b:b7:9b:b9:60:d8:84:8b:17:a0:b9:d1:3b:ab:
31:5d:c8:45:d3:1a:1b:5e:69:52:16:15:a8:72:f7:
cb:8f:24:a0:78:8a:71:70:df:20:6b:cf:f6:4a:0b:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:72:FD:A7:65:E3:0E:AB:7F:1C:4B:79:99:E0:F6:A6:F5:9B:31
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:68:56:35:9d:e0:a4:4e:8b:52:ff:0c:f2:03:06:68:8a:
c7:96:40:fd:a8:47:46:93:f9:d0:2b:99:9a:d5:5a:9b:29:c8:
dc:47:85:c7:3f:03:7e:70:f8:f4:f5:b3:74:63:5f:9b:0b:a3:
17:e2:97:f4:f3:08:64:6b:5b:54:c2:73:41:fd:c1:ec:c4:b3:
a0:1f:4d:42:5a:13:dc:de:c6:ad:c5:17:47:3d:c3:8b:9b:f9:
c5:32:a9:a1:76:e4:a2:95:33:da:12:8c:07:8a:f3:12:2b:59:
b8:61:1b:da:17:a8:29:7c:7e:3f:75:40:ef:91:71:1d:a1:13:
08:5a:46:9c:18:3f:9a:15:73:83:b5:a7:ff:ae:9e:10:a2:ef:
aa:70:0c:9e:b9:b0:a2:0e:ac:11:3d:b8:00:a0:8a:92:1c:80:
0f:37:84:a5:e2:41:d0:a3:40:7e:53:87:bc:ab:93:28:e2:b8:
d7:17:db:9e:31:5e:d4:39:2f:ed:5b:89:55:67:d6:25:55:b5:
88:ac:78:a1:c1:55:c7:54:dd:19:30:b4:42:9b:2e:b9:7d:fa:
81:fe:40:b0:10:4e:b9:df:31:fe:d6:04:c4:40:8d:82:d9:0e:
77:71:b7:a2:f7:49:d4:52:0f:e1:45:1c:03:08:42:1e:a6:ee:
c1:8d:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:40 2026 by rpki-client