Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: NteXXwbRGc8D2wUih61cZXlSi0LH8qwxQ3f4pQdbD8I=
Subject key identifier: E7:9F:04:E5:2D:D9:26:52:D1:E0:1B:15:2D:31:AF:F2:97:D5:2E:B5
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019D29613B5C962AE80B55A3496AD4CCC2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0C67
Signing time: Thu 26 Mar 2026 09:02:11 +0000
Manifest this update: Thu 26 Mar 2026 09:02:11 +0000
Manifest next update: Fri 27 Mar 2026 09:02:11 +0000
Files and hashes: 1: HVowXrdOWYwIxGgjLmeAVFsb2JY.roa (hash: hYRe+VklsUZJL10nJgEreFr/d/IK6lzb5yYEfqhUAdI=)
2: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: fupfsgUmzwDrIx7ft1r3hQwD25SvZpe6M/BroDLs0MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3b:5c:96:2a:e8:0b:55:a3:49:6a:d4:cc:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Mar 26 09:02:11 2026 GMT
Not After : Mar 27 09:02:11 2026 GMT
Subject: CN=e79f04e52dd92652d1e01b152d31aff297d52eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:11:07:cf:bf:75:58:8b:2d:48:9a:6c:08:
04:9d:0a:42:0c:bf:9d:72:40:4a:08:2f:31:36:25:
85:d7:56:48:46:ee:d4:5c:bc:69:67:a3:48:9e:27:
9b:6c:52:46:4b:f0:1d:91:2d:af:90:4c:f0:6c:e2:
a1:9e:39:cd:bd:bf:b1:d6:1c:2a:09:17:89:91:8f:
8a:eb:aa:1e:9d:32:08:6b:5d:2a:df:01:81:6e:73:
8b:09:58:f4:6c:80:a5:88:53:02:2a:13:ed:3c:9f:
2d:5d:7a:09:ee:ee:fd:f3:cc:0c:27:61:f8:b5:e2:
a1:bf:2b:4c:14:c2:54:a0:7d:aa:ff:4f:49:06:d8:
4e:cb:97:53:52:61:67:a0:ab:32:48:a7:60:bd:66:
04:40:93:75:df:a6:b5:1e:57:3b:16:26:4d:2b:a8:
ec:e3:55:5a:8e:38:3f:2d:96:c1:67:3e:0b:73:86:
8d:65:27:9d:6d:3e:61:55:60:6d:35:b0:ba:74:bd:
3b:ad:a7:14:e5:4d:aa:d9:5c:1d:4e:dd:dd:3c:50:
5a:9c:8b:11:6d:e5:2e:2a:e7:dd:05:48:0d:1b:a0:
95:0d:a7:e9:3c:a9:5d:62:7a:4c:4b:e8:c8:31:89:
ac:39:b2:60:39:3e:91:95:32:95:9f:92:7b:2c:23:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9F:04:E5:2D:D9:26:52:D1:E0:1B:15:2D:31:AF:F2:97:D5:2E:B5
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e9:72:de:4d:16:a3:c1:e3:41:35:4e:ee:28:ee:2b:f1:19:
58:1a:f3:88:b8:f6:b2:54:e2:b3:73:76:c4:a9:f9:f6:55:54:
57:ef:14:ea:ff:7f:26:e9:73:91:1a:2f:38:c1:1d:fd:e5:09:
6d:04:4b:72:72:f6:56:21:85:2d:a4:20:56:80:4b:d3:c3:8d:
4e:42:d3:d4:37:0b:52:9b:72:e7:37:ae:75:c8:45:57:4a:96:
71:98:b0:d9:a3:d0:6d:00:cd:21:cd:4f:f5:11:fe:39:c1:26:
22:c8:7c:95:4f:45:8a:3c:38:ee:b9:a7:ec:95:84:56:18:bc:
ec:92:57:7e:f0:1d:98:c4:53:dd:57:1d:1d:5a:bb:14:11:3a:
4f:08:2e:c1:f1:95:7e:eb:bb:04:8a:3c:3d:d5:3e:e4:7a:17:
57:b2:37:df:17:a0:b7:23:a9:f3:aa:00:54:76:ee:71:35:a3:
fb:bb:f0:5c:05:4c:3f:d5:f3:99:79:26:ec:84:81:bc:fe:ad:
9d:b9:31:ac:cf:26:4a:5c:02:93:2c:9d:ac:ac:67:ee:27:cf:
f3:b1:1b:a0:ee:78:4f:dc:a9:95:1b:6f:6e:df:c5:a7:bc:24:
80:41:a5:de:c5:c8:98:43:04:d0:73:65:00:e4:96:73:e4:96:
36:a7:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:13 2026 by rpki-client