Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: DPt4S7pg6O/JS+fhDWxU3syxLO7sBw2DJPMUvJoumXM=
Subject key identifier: B7:15:4A:CE:05:2D:6D:EC:FA:D2:09:9C:13:A1:B8:B8:23:93:E3:DD
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019D2704204D9297DCA5F15FD00AC0C91A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0FAF
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: 5/VE9gWby0bUN/jpadM7A9JlQl4eC0CWZDCpK1T2K6s=)
4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:20:4d:92:97:dc:a5:f1:5f:d0:0a:c0:c9:1a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=b7154ace052d6decfad2099c13a1b8b82393e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:a5:67:69:43:f8:ef:3b:55:93:8b:63:da:
38:33:10:d7:ff:bd:13:be:51:ed:ec:0d:ef:3a:43:
9f:c6:61:c6:66:4c:72:e6:3f:8b:bb:d1:c4:34:e1:
6a:e6:f8:2e:d3:88:8f:2f:36:44:ac:07:60:d6:8a:
f4:05:aa:26:6f:fb:25:59:ab:97:81:19:a6:2f:d9:
bf:de:bb:cb:27:21:87:d4:97:8f:cb:4d:61:f7:52:
f9:ba:e6:46:76:ee:a3:6a:8c:61:f2:4e:8e:99:31:
2d:fa:32:d5:9a:44:7f:d5:29:f7:db:09:82:c6:e4:
26:1f:0f:90:3d:32:02:53:ba:56:94:1a:ab:d6:25:
c8:3e:d6:e1:42:d8:61:3a:95:42:b7:3f:a1:a0:2c:
8f:22:c3:ea:35:f6:4d:b3:33:a9:4a:82:93:b6:29:
06:1c:2e:bf:57:9c:15:b3:ea:7c:ec:2a:0f:41:03:
41:1b:41:f7:51:b1:a9:e7:6f:3a:04:4f:c6:7b:a6:
aa:8c:74:17:d5:75:4c:35:b0:2e:e0:fa:a6:4a:2e:
a9:93:b8:15:80:3d:b2:0c:39:11:d9:b1:a9:66:ec:
37:e5:a6:a7:a0:3d:24:0d:a9:8e:1d:62:a5:b8:f9:
97:2c:65:e1:12:58:80:5a:01:4c:8b:5e:bf:84:9b:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:4A:CE:05:2D:6D:EC:FA:D2:09:9C:13:A1:B8:B8:23:93:E3:DD
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cd:25:88:05:36:18:43:00:8d:77:ad:4f:f4:8d:bb:d9:cb:
fd:e8:38:a0:5a:b4:9b:a7:fb:ae:38:3b:d1:5e:e8:87:c8:04:
14:58:f9:26:73:c2:8b:cd:de:08:f4:70:80:04:c8:fb:c6:b7:
e4:3c:d2:bf:13:1a:03:00:79:fc:36:aa:cb:38:ff:aa:b9:1d:
fb:ac:6c:5d:10:06:eb:dd:ba:26:bf:c8:3f:0e:c6:74:f4:50:
d7:f9:6d:e9:21:13:07:8a:1b:a0:aa:aa:ca:a7:8b:ff:c0:24:
ea:15:41:b0:1d:4f:4c:d7:50:da:0e:4a:80:30:d4:df:f0:38:
c1:f7:ca:2a:40:55:2d:65:25:e4:f0:63:0c:55:68:47:d3:e8:
47:0e:3c:ae:85:d9:eb:2e:99:63:f4:b8:28:42:1b:3b:72:10:
05:78:fe:75:00:f3:cb:69:ef:13:fc:5b:d4:44:4a:e6:0f:9b:
cb:00:62:48:c4:12:a0:02:0b:2b:c0:85:8b:87:5c:55:d9:99:
f3:85:9b:bb:45:2d:40:a6:c2:a3:dc:cd:43:e6:8a:30:e6:6a:
ec:fc:7f:1b:46:b6:6a:b3:1d:45:d5:ad:66:30:c3:be:8f:77:
72:b1:59:14:3c:e7:20:78:36:fd:da:2a:28:5f:73:fc:44:9b:
92:f0:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:30 2026 by rpki-client