Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: S5KXV4MHr4W+Rg7SK4wwTebqPbSL37HxbMni6qL2NTk=
Subject key identifier: 4B:F8:7E:0A:6F:62:F7:F2:D1:62:BE:30:E4:1C:33:8E:E9:DF:DD:E7
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 019D265F74B69F6EBF1E896EF6944D4F82B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0BD4
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: lldNRk+sFRs7FBkjLBN0qlTxI6XtgM0G7nlvl/A0kQ0=)
2: OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa (hash: R70NXYY+s+0zLQXH0/qTZ8MSPj794apmQlMiNuT9CX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:74:b6:9f:6e:bf:1e:89:6e:f6:94:4d:4f:82:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=4bf87e0a6f62f7f2d162be30e41c338ee9dfdde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:b7:d7:3f:2d:2a:2c:54:08:f0:e6:6b:72:
e8:f5:2a:f2:29:51:d8:d0:73:c7:da:df:f6:1d:7d:
0d:0d:9d:1c:62:4e:b0:d7:09:23:3f:d8:2f:d7:b0:
d9:64:21:a5:de:a6:27:25:1a:21:c7:4c:c0:9a:44:
05:81:42:fe:ce:76:45:7f:f6:81:21:c7:f5:b7:ba:
de:b2:a4:b2:2f:b2:d9:af:ae:d1:d6:2b:a1:f5:75:
24:3f:e5:93:7d:3d:34:54:39:9a:25:aa:95:1e:a6:
4e:71:ee:45:fa:39:b7:31:bb:b8:08:92:bb:2b:1b:
00:4b:8d:2b:f9:09:89:4c:6f:96:e9:8d:0d:c6:c8:
10:e1:6e:41:8c:3e:51:97:0e:4f:8a:92:29:de:62:
f2:3c:69:23:b9:7b:23:1f:43:a5:db:8d:a7:e7:f8:
66:6f:fd:12:b1:ab:03:0e:5d:d9:98:4a:14:ab:b5:
e2:f5:ee:3a:aa:b0:6a:3b:a1:1f:4a:85:f0:ea:d8:
aa:ad:60:f9:7f:4d:95:01:af:50:de:14:d7:94:e9:
2a:b3:f8:c7:23:a0:4e:2e:1b:b6:82:13:ad:f4:51:
fc:1e:26:24:7f:08:f3:2c:5e:10:7f:60:67:aa:b2:
ad:7d:1f:8c:59:fb:7b:4a:b7:ba:34:8d:b3:05:47:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:7E:0A:6F:62:F7:F2:D1:62:BE:30:E4:1C:33:8E:E9:DF:DD:E7
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d0:73:80:77:3f:db:6f:23:93:00:71:44:2f:08:5a:6a:a9:
14:9d:93:aa:b9:e9:29:a1:fc:71:e8:3f:02:d5:50:42:78:42:
a9:51:b7:dd:8f:4e:21:22:d4:6c:d6:4e:f5:67:7f:31:c5:36:
ae:7e:62:10:c0:0d:fc:45:df:35:38:e3:8c:f9:5b:84:73:7d:
f7:aa:18:52:6c:86:47:ba:f6:54:36:08:48:92:0a:b7:1d:f1:
17:a7:11:4e:25:62:4b:9d:c6:cb:57:66:4d:64:e2:82:25:3a:
65:6a:9f:f8:71:b1:67:45:9f:fb:c5:4e:8f:26:ad:27:73:7a:
55:f1:b0:d0:a8:ff:e7:7c:7b:6c:fb:af:5d:cb:5e:81:d5:88:
79:15:c7:63:bf:c3:0d:04:40:fc:01:fd:d1:3f:e9:8b:ca:d4:
82:bd:2b:f0:7a:c4:9e:0b:fa:c0:60:1b:60:eb:07:03:0b:c1:
d5:22:dc:ca:75:48:cf:7d:a0:21:9a:c0:8f:0d:5a:2f:a3:90:
38:83:fb:12:aa:a0:0d:d2:3e:c3:23:c9:a5:46:5b:dd:37:81:
6d:8e:be:53:45:23:d9:c7:ec:91:fd:d8:de:c0:e8:56:42:b0:
ba:f4:a0:b4:7a:af:61:6a:4a:59:d4:aa:1c:54:8f:4b:34:d0:
e1:d0:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:52 2026 by rpki-client