Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: daUwTIm6ne8fKVSLlX6ssJqRFCdw8NWd95MI7tuI/jo=
Subject key identifier: 19:A6:6C:02:7C:76:A9:52:D5:7E:13:B5:BE:A3:49:40:D7:F9:BD:38
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019D2AE10EA918AC3C658BDF64B56E8F1962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 1287
Signing time: Thu 26 Mar 2026 16:01:25 +0000
Manifest this update: Thu 26 Mar 2026 16:01:25 +0000
Manifest next update: Fri 27 Mar 2026 16:01:25 +0000
Files and hashes: 1: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: g1OHjh6HIf1W4G+ih5TgxrHt6okdCM4A2qq8svQM7J8=)
2: qOlFxZL8qRvtCfn6pv83b3CjTWk.roa (hash: yAGRaZNO2UXU7Vp3V5rpWxYXofVJuCbat4KTkM4jlWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:0e:a9:18:ac:3c:65:8b:df:64:b5:6e:8f:19:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Mar 26 16:01:25 2026 GMT
Not After : Mar 27 16:01:25 2026 GMT
Subject: CN=19a66c027c76a952d57e13b5bea34940d7f9bd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:0a:2a:42:7a:e1:bf:1b:e5:13:d1:99:44:
e5:a6:b1:53:e2:45:dc:a9:02:9b:cd:e0:ed:fc:50:
15:f2:ef:6e:09:5f:07:72:75:20:fa:57:95:ae:38:
f0:d0:33:53:1c:58:f2:3e:8c:f0:bb:7d:01:b8:f0:
44:33:39:9d:c5:94:6d:45:a8:af:40:a6:0f:ed:96:
12:f6:1d:22:b0:d9:3e:67:38:08:01:32:8b:e0:a3:
70:83:ca:8f:14:c8:59:0b:86:47:e8:0d:69:5e:d1:
68:1b:d1:27:fb:f2:4e:19:ca:05:40:52:11:56:3d:
9e:7d:81:fe:91:90:6a:61:7b:69:e3:b2:06:30:2c:
73:e7:bb:aa:cf:a3:dd:46:f6:ad:fc:be:83:16:40:
53:03:28:a0:29:b8:3c:d6:0e:9c:b2:9e:a7:be:d2:
f9:5a:a2:2d:c7:05:2a:6b:97:41:ba:f4:87:e9:a5:
e2:12:93:72:e6:f3:12:1c:42:ef:1a:2e:ed:8a:7b:
16:10:61:f8:d5:37:14:df:f0:b5:a4:7e:18:be:1c:
43:ce:37:44:fb:97:96:c9:07:32:07:dd:06:9d:7a:
76:e3:0e:e8:d6:19:50:f1:30:48:4b:b6:b9:1d:db:
a1:d8:3a:a2:56:0c:fc:21:3d:e1:5e:3f:a6:67:86:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:6C:02:7C:76:A9:52:D5:7E:13:B5:BE:A3:49:40:D7:F9:BD:38
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f6:24:7f:99:5c:24:59:55:73:50:67:06:5e:92:27:c8:53:
81:ca:8c:b7:26:07:d9:be:be:9c:ce:71:9c:eb:01:56:d4:98:
11:06:27:0a:2c:d3:af:2b:8e:14:bd:2b:13:06:c7:1d:9e:65:
d1:e8:b5:6d:1e:2c:0b:6a:74:c0:d3:21:86:34:fe:7f:c5:86:
8e:f7:60:fa:2f:2f:f4:34:7d:15:d0:27:02:ae:91:52:7b:0b:
3d:09:d5:6b:80:11:cc:05:b0:e7:5e:c3:49:82:3f:71:5b:01:
77:85:ea:d5:d9:d1:c7:2a:70:47:4f:4c:e0:11:56:70:ce:07:
20:58:af:08:bd:74:d1:8d:44:a5:dd:5d:c4:09:2b:b3:6c:bb:
f9:4d:fe:e1:45:cc:1e:11:3a:f5:99:c7:57:11:7c:6e:ad:1b:
8e:1a:f0:8f:7a:90:46:e4:85:4f:50:9a:42:9e:44:4e:32:56:
27:ef:a1:4a:ac:46:a9:7e:e2:9f:8b:90:29:9f:f0:78:3e:da:
8f:80:ae:af:3d:29:e6:b2:0b:42:73:39:85:67:25:1e:b8:11:
c0:14:85:09:b0:71:ca:94:96:f3:60:9e:80:5b:8b:45:8a:5e:
29:da:08:7a:7c:42:90:4e:9d:76:12:51:27:15:cf:91:1f:3f:
f6:78:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:30 2026 by rpki-client