Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: WqhGbFr0nva1QLRAADx9lrZkSQIcD/4oU2fOBP24yR4=
Subject key identifier: 31:34:11:87:3A:8D:AF:06:81:69:50:7F:C2:14:40:20:3E:0E:9F:10
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 019D2816902B8B971CAF68207A0A3DF97A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0D26
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa (hash: RiIz/j+OmLa7FEdZbMFlKrhGfrujyA65C/HnMjy7A3s=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: fIn1iNSJZMSSMOYB1a4NTZWz7k8x4MDw/Vp31EiJFqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:90:2b:8b:97:1c:af:68:20:7a:0a:3d:f9:7a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=313411873a8daf068169507fc21440203e0e9f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:c9:c6:f7:9b:16:be:ef:1f:d5:09:f5:db:
c4:f0:b5:1c:a0:e7:0b:e1:49:37:95:3e:20:eb:4b:
03:c1:7b:63:d2:f7:37:07:53:41:a9:7e:30:6e:38:
72:66:f6:19:d9:05:88:ee:cd:da:e1:fc:d6:82:4d:
00:1b:c6:02:53:d7:0d:a6:a7:58:1a:30:e1:74:eb:
d7:18:9d:1a:f4:7e:44:6c:7a:3b:f6:1e:48:e7:ac:
04:c3:ab:05:8d:e2:b3:af:0d:4a:3c:0f:38:43:3c:
2d:b3:2c:0b:89:b8:e2:6b:39:1c:52:7f:27:43:b0:
59:a7:90:33:24:1c:95:4f:6d:e1:d9:26:5e:c8:33:
80:b5:1e:fa:0f:63:2a:21:fd:2a:20:b7:32:5c:16:
47:b7:ab:82:f5:be:c5:2b:1f:ef:d9:7a:8a:41:58:
4f:84:fe:6f:b8:8d:a1:bc:ee:68:68:61:7a:25:1b:
04:b8:b2:dd:fb:7f:ad:97:e9:25:51:dd:44:29:0a:
6c:2a:ed:c2:0e:76:c0:14:b5:92:f1:12:11:5b:66:
3f:20:86:68:0d:5d:a7:d6:4f:74:af:f2:b9:82:13:
c3:10:ae:10:68:5b:be:1f:6b:72:32:c3:80:56:2f:
d3:37:97:c4:cc:49:55:ec:57:36:2b:43:e7:50:54:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:11:87:3A:8D:AF:06:81:69:50:7F:C2:14:40:20:3E:0E:9F:10
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bf:f1:da:8f:64:8a:eb:55:df:b0:00:ac:c2:c0:cc:c2:81:
3c:19:68:97:3f:f6:0f:a6:01:51:a3:a3:67:3c:86:38:3a:18:
14:98:66:96:25:6f:61:ee:bb:7b:91:89:6b:61:96:75:64:71:
38:80:72:92:21:34:bd:68:36:a5:36:f7:ab:fc:4a:99:8a:de:
00:01:71:04:d3:01:16:58:bc:a0:7f:be:8d:89:6d:1f:20:5c:
aa:23:19:10:7b:6c:1b:89:2f:3b:2c:57:a1:a1:5f:88:3b:fa:
8f:76:90:13:df:1c:c8:41:ad:ee:0e:b2:2e:dc:81:f8:af:30:
2b:6e:cb:7f:f1:b1:b0:e8:fd:50:a6:6d:9d:59:57:95:42:4d:
d0:ff:ed:8e:97:36:04:e3:6a:7c:60:e9:14:ba:2a:8f:5d:8f:
32:97:74:97:99:e2:bc:bd:75:83:45:f7:50:11:7b:7c:88:1f:
f8:eb:19:05:66:14:4d:fd:1c:33:cb:dd:79:78:bd:95:d0:cd:
94:d3:3e:01:44:c8:74:54:df:8e:75:97:51:ec:a0:22:c6:3e:
ea:1a:d1:f1:37:68:aa:95:32:7d:82:de:37:dc:b3:66:73:de:
be:a1:7e:f4:1a:29:c6:1d:14:2f:c9:14:e7:32:db:67:26:56:
8d:02:54:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFpAri5ccr2ggego9+XoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NThkMmYxMzE3MTVjYmFmM2NkZDkyMDY0NTkyNGY1MzUw
OGUwNjcwHhcNMjYwMzI2MDMwMTAwWhcNMjYwMzI3MDMwMTAwWjAzMTEwLwYDVQQD
EygzMTM0MTE4NzNhOGRhZjA2ODE2OTUwN2ZjMjE0NDAyMDNlMGU5ZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGvJxvebFr7vH9UJ9dvE8LUcoOcL
4Uk3lT4g60sDwXtj0vc3B1NBqX4wbjhyZvYZ2QWI7s3a4fzWgk0AG8YCU9cNpqdY
GjDhdOvXGJ0a9H5EbHo79h5I56wEw6sFjeKzrw1KPA84QzwtsywLibjiazkcUn8n
Q7BZp5AzJByVT23h2SZeyDOAtR76D2MqIf0qILcyXBZHt6uC9b7FKx/v2XqKQVhP
hP5vuI2hvO5oaGF6JRsEuLLd+3+tl+klUd1EKQpsKu3CDnbAFLWS8RIRW2Y/IIZo
DV2n1k90r/K5ghPDEK4QaFu+H2tyMsOAVi/TN5fEzElV7Fc2K0PnUFT/jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE0EYc6ja8GgWlQf8IUQCA+Dp8QMB8GA1UdIwQY
MBaAFChY0vExcVy6883ZIGRZJPU1COBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0ZqUzhURnhYTHJ6emRrZ1pGa2s5VFVJNEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83NWRiYzQtYWUyMi00OTcxLTllZjUt
YTNmMzU1YmVlZWRkLzEvS0ZqUzhURnhYTHJ6emRrZ1pGa2s5VFVJNEdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83NWRiYzQtYWUyMi00OTcxLTllZjUtYTNmMzU1YmVlZWRk
LzEvS0ZqUzhURnhYTHJ6emRrZ1pGa2s5VFVJNEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7/x2o9k
iutV37AArMLAzMKBPBlolz/2D6YBUaOjZzyGODoYFJhmliVvYe67e5GJa2GWdWRx
OIBykiE0vWg2pTb3q/xKmYreAAFxBNMBFli8oH++jYltHyBcqiMZEHtsG4kvOyxX
oaFfiDv6j3aQE98cyEGt7g6yLtyB+K8wK27Lf/GxsOj9UKZtnVlXlUJN0P/tjpc2
BONqfGDpFLoqj12PMpd0l5nivL11g0X3UBF7fIgf+OsZBWYUTf0cM8vdeXi9ldDN
lNM+AUTIdFTfjnWXUeygIsY+6hrR8TdoqpUyfYLeN9yzZnPevqF+9Bopxh0UL8kU
5zLbZyZWjQJUxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:58 2026 by rpki-client