Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: D1OZUzJWhLkl5Bi4T78pER917B9Wvl43gUZWnDHQTzU=
Subject key identifier: 34:AC:42:AC:82:FF:7C:D1:F5:AB:87:B3:59:0C:BA:B7:01:6E:3F:84
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 019D284DD20FA870228DBF9A9CFDCC8A8F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 135C
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: Ua2rZcCEqJUbk15omnDuXAdSwB0wJTvvDdsGtLg71Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d2:0f:a8:70:22:8d:bf:9a:9c:fd:cc:8a:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=34ac42ac82ff7cd1f5ab87b3590cbab7016e3f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:ee:85:0d:47:48:8d:49:3e:27:31:82:3b:
de:89:b7:66:7d:45:7b:47:e9:8b:62:06:46:a1:d4:
73:18:72:23:4b:da:ae:4d:6f:d4:8c:38:6a:60:49:
f8:f0:2b:84:c2:71:6d:b5:68:26:6f:38:a6:4f:74:
59:a9:7b:b5:34:03:3b:57:7d:97:ad:9f:ea:d8:5a:
98:84:5e:9d:f1:eb:d7:af:f3:b3:98:50:79:1b:b9:
c7:a4:84:64:fd:7e:17:75:be:d6:67:74:0a:d0:4a:
4e:cf:1f:af:24:a5:03:4f:a7:49:5d:4a:78:76:c9:
34:54:ba:40:3e:ae:be:27:75:d4:4e:b5:7d:cf:c7:
91:ee:70:e9:8c:51:75:83:55:8e:95:7d:17:66:78:
cf:2d:7d:58:ee:e4:0d:dc:fd:8f:63:a2:10:b4:3f:
8b:55:69:10:b9:45:0a:27:65:e7:eb:01:68:40:68:
eb:20:b3:e2:15:1d:80:d4:5d:a5:af:85:08:be:85:
0d:31:90:8a:e8:4c:0e:34:b4:46:bb:66:c8:15:0c:
6b:97:10:4c:d1:8f:8c:11:d8:00:17:d2:17:f9:44:
85:3b:bb:0f:6d:6a:97:5f:70:84:9f:39:93:ec:ee:
55:6a:00:b4:e6:7f:99:07:3e:d6:78:41:30:ef:9d:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:42:AC:82:FF:7C:D1:F5:AB:87:B3:59:0C:BA:B7:01:6E:3F:84
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e4:01:f7:44:34:d5:26:e8:a6:55:6d:de:c0:44:21:e2:34:
56:18:58:ea:6f:da:04:12:84:ae:5a:82:cb:74:71:8a:c4:32:
bf:4d:bc:8b:39:d4:80:61:cf:d2:6c:d9:75:57:2e:ed:03:96:
72:80:b0:61:54:7a:42:a8:ee:66:21:0b:ae:26:9e:9b:98:bc:
24:8d:2f:42:5d:64:b6:f2:41:ba:25:66:4f:18:25:3a:ff:81:
11:b4:06:e4:45:75:03:c3:bc:26:cd:93:13:bb:a4:bb:92:68:
b6:10:c3:34:58:79:74:b4:f1:e3:3b:0c:1a:c4:d8:18:dd:fa:
b1:ce:19:a0:0b:4b:2a:fd:8a:69:1f:4d:c7:7c:54:de:a7:bf:
ef:de:49:a6:b2:f9:33:6f:e3:c4:2b:da:e0:d8:7f:d3:62:c2:
96:1a:24:cc:f5:fb:0d:a8:52:a1:56:1c:ac:d0:68:f7:aa:c9:
06:75:c2:2a:4c:d7:35:41:8b:15:df:04:49:21:19:2f:87:bc:
00:30:bc:df:81:7c:44:ed:be:be:33:68:90:72:81:ba:03:6d:
13:b9:af:4e:36:b7:7c:e1:2f:1a:5f:61:34:55:6f:48:ba:b6:
25:ed:39:96:bd:e9:b4:cb:1a:05:22:db:b1:ff:58:8d:c9:1a:
a4:4e:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:34 2026 by rpki-client