Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: +3Jo47Yh4YRWsmg3JSxahLYxIDJF5LqV9bd9kPziaXA=
Subject key identifier: D1:CD:37:43:B8:41:BE:B3:40:42:57:1C:39:47:BA:F3:75:8E:3B:2E
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019D273AC813393B592508FF706A73C6A9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: KVSAIFN2DeAYjm1xy1fBkEbie2jGJJy67vXu5uV5Rn0=)
2: Yuog9y8JF_gUyOtwmx2LA41kaSA.roa (hash: bgBtmLlCdZ3iz8t6uBn4uo/dQZySgZ2naQr/qUoBKkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c8:13:39:3b:59:25:08:ff:70:6a:73:c6:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=d1cd3743b841beb34042571c3947baf3758e3b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:3c:07:6b:c5:39:db:b2:96:91:04:47:91:
f5:c0:6c:99:51:66:3a:dc:8e:82:13:30:74:51:cc:
0b:cc:a4:7b:3f:a7:ea:8e:10:d6:90:94:39:b6:f9:
e2:82:a3:b9:31:f1:30:dd:28:a0:96:19:56:9f:30:
35:17:c8:09:0c:0d:0e:f8:a3:ef:b5:4f:6d:2c:00:
e1:a8:71:87:95:ae:5a:93:c8:32:08:83:33:34:c7:
5b:fe:c2:1d:b2:7f:2e:6b:df:99:e8:16:a8:97:a8:
dc:57:a3:32:16:27:a9:8d:83:f5:e4:a5:1e:60:ab:
fc:46:3b:f0:ba:9e:18:85:90:2c:79:80:1f:db:9e:
fc:48:b0:4f:f1:7f:ba:8e:a3:1a:12:f9:52:30:3c:
1e:6e:de:11:a8:11:83:a5:be:18:a7:08:c4:a3:9b:
74:3d:48:9e:0a:c4:1d:4f:56:23:62:b6:b4:67:9c:
8d:3b:27:1a:cf:8d:cb:c5:fb:43:f7:e7:13:36:22:
98:dc:ee:05:a6:b3:9e:fe:ea:71:a2:f7:47:96:c4:
ad:b6:15:00:d7:b3:20:db:06:05:3d:31:76:47:f3:
de:76:db:23:78:f5:29:c0:c6:3a:9a:1a:a2:4f:1f:
ed:f3:b1:8e:22:e0:51:e2:fe:fa:25:ab:73:d4:20:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:37:43:B8:41:BE:B3:40:42:57:1C:39:47:BA:F3:75:8E:3B:2E
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:e6:3a:60:87:30:68:71:75:ee:b0:a3:8f:4d:32:1d:e5:
2d:98:d2:e9:37:1c:b3:cf:fc:93:df:a1:fe:1e:20:87:b4:d7:
00:32:d6:e3:cc:bb:a4:1a:2a:7b:78:14:d9:da:c6:1f:58:bd:
56:34:32:e6:e7:9b:3c:4f:70:11:68:7f:f3:d2:93:2c:d5:86:
76:d9:23:1c:0a:47:e5:64:95:7f:90:15:ec:94:50:b8:1f:4d:
af:4a:03:17:e5:1a:08:69:d1:7d:dd:52:15:f5:32:65:e3:96:
da:8f:9a:27:76:ba:fc:a0:b3:1b:94:e3:bd:15:09:2d:45:80:
2a:ea:e5:00:7b:9a:63:ae:49:c6:e5:14:10:ca:39:81:a5:84:
d0:4f:ac:ab:4d:e9:23:70:27:1a:d6:04:94:ad:34:48:db:28:
33:ed:14:03:19:19:f7:04:7b:83:b9:73:ec:d1:21:66:1d:74:
19:bf:85:7d:f6:32:70:72:8f:b5:98:fe:bc:20:a7:ae:68:dc:
65:3c:ca:a4:c8:ec:b5:bc:71:bf:28:11:13:81:77:c0:ee:9a:
d4:8a:f6:6f:b6:12:e2:e0:f9:07:63:d5:7e:d6:d8:6e:2e:4d:
a9:98:e1:9f:a4:32:de:fb:1a:24:f0:cb:5b:5a:46:09:fc:6b:
5f:be:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:43 2026 by rpki-client