Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: RzWUehJ0L5tIHZj71OiwhxW9ichN/jgpGo9rgvNeF4g=
Subject key identifier: A3:CD:FC:59:B3:04:0D:B6:6F:F7:6E:27:B9:79:E1:F1:6E:40:C8:2E
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 019D27E07DB0022D3E1C26383189F6F7B5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: 8lBfUHplqmMEHNrp/YeEOR4JlkNGCMZ/tMDlijWuh4c=)
2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7d:b0:02:2d:3e:1c:26:38:31:89:f6:f7:b5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=a3cdfc59b3040db66ff76e27b979e1f16e40c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:1f:31:14:7a:d8:74:75:2d:1a:b2:f0:09:
2d:a9:ec:1d:1b:10:a4:29:d3:7c:43:62:71:8e:96:
6b:ef:f6:e7:69:70:b4:02:8f:ae:85:c9:29:60:c9:
0a:12:b7:2d:4d:10:04:88:44:6c:4b:c2:f3:05:4c:
66:f3:b8:a1:7a:ae:22:83:7d:d5:14:f7:c7:fe:71:
ce:21:2f:97:31:92:fd:8d:09:01:6e:0d:2f:bf:9e:
f3:9b:1e:03:94:82:d0:e8:fa:6a:b8:b8:10:0a:38:
70:ef:40:e0:5a:c2:10:ec:47:52:e5:8f:71:37:af:
60:fc:92:79:ff:1e:c1:f4:44:4e:bf:9e:e0:5a:ba:
9a:18:ec:a5:00:2f:ee:bc:24:da:eb:5e:db:ad:ee:
96:7c:b2:dd:d6:27:11:f4:b2:31:ac:56:49:3c:b0:
44:71:32:c4:68:4b:71:57:ca:eb:6d:6a:52:4c:02:
00:f4:ec:0a:23:99:b6:88:9f:04:86:a3:57:99:8a:
e5:61:51:77:37:a0:60:1e:dd:ca:01:db:9e:26:d6:
95:08:1b:70:dd:24:48:b9:f9:aa:cd:ce:6a:b1:67:
6d:3c:c8:a9:20:d3:fb:9f:f1:b7:22:7d:46:d8:da:
16:4b:9e:c1:90:47:2a:96:47:bc:ed:d9:9f:16:52:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:FC:59:B3:04:0D:B6:6F:F7:6E:27:B9:79:E1:F1:6E:40:C8:2E
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:63:c0:ad:28:52:45:fc:59:d2:e6:56:9c:10:46:4f:26:27:
14:e4:2e:1c:2b:85:fa:4d:14:23:29:30:e6:b9:cc:5a:96:3c:
9a:2c:31:94:23:b5:e4:32:6e:cc:3a:6f:1f:99:9b:d0:34:28:
a8:62:75:12:0a:50:46:02:65:9a:59:96:66:9a:5c:31:52:9a:
e1:8f:8e:0c:4a:02:39:1b:73:de:96:67:91:5c:08:fd:c2:ab:
2f:1d:ae:ae:ed:37:ab:96:cb:2a:4c:b8:86:54:65:1c:23:0f:
7b:06:12:d6:8b:a2:1c:ff:fc:00:b6:e3:18:86:48:4a:f5:90:
3f:72:8b:38:25:11:b7:f8:2b:0d:6f:a8:78:61:7c:1d:68:9c:
ae:2d:34:36:d3:a5:7b:d6:95:9f:61:2e:9f:f6:b7:8c:98:1c:
b6:37:7e:6e:14:ba:59:fe:bd:ed:36:b0:25:84:a0:da:53:2d:
11:83:0e:2b:88:51:c2:bb:ad:a2:d5:71:0e:2b:aa:27:6c:61:
80:fc:dd:ca:85:4d:24:e0:20:7b:32:08:48:c3:9e:6b:05:87:
be:cd:f3:83:e6:1a:8c:47:d0:38:2e:e6:41:92:21:aa:71:28:
d2:d6:08:34:50:c7:89:66:92:bd:54:8c:c6:91:71:64:4e:ec:
61:39:ff:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4H2wAi0+HCY4MYn297XSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz
MWViMGUwHhcNMjYwMzI2MDIwMTU2WhcNMjYwMzI3MDIwMTU2WjAzMTEwLwYDVQQD
EyhhM2NkZmM1OWIzMDQwZGI2NmZmNzZlMjdiOTc5ZTFmMTZlNDBjODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjMfMRR62HR1LRqy8AktqewdGxCk
KdN8Q2JxjpZr7/bnaXC0Ao+uhckpYMkKErctTRAEiERsS8LzBUxm87iheq4ig33V
FPfH/nHOIS+XMZL9jQkBbg0vv57zmx4DlILQ6PpquLgQCjhw70DgWsIQ7EdS5Y9x
N69g/JJ5/x7B9EROv57gWrqaGOylAC/uvCTa617bre6WfLLd1icR9LIxrFZJPLBE
cTLEaEtxV8rrbWpSTAIA9OwKI5m2iJ8EhqNXmYrlYVF3N6BgHt3KAdueJtaVCBtw
3SRIufmqzc5qsWdtPMipINP7n/G3In1G2NoWS57BkEcqlke87dmfFlK3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPN/FmzBA22b/duJ7l54fFuQMguMB8GA1UdIwQY
MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt
ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0
LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWPArShS
RfxZ0uZWnBBGTyYnFOQuHCuF+k0UIykw5rnMWpY8miwxlCO15DJuzDpvH5mb0DQo
qGJ1EgpQRgJlmlmWZppcMVKa4Y+ODEoCORtz3pZnkVwI/cKrLx2uru03q5bLKky4
hlRlHCMPewYS1ouiHP/8ALbjGIZISvWQP3KLOCURt/grDW+oeGF8HWicri00NtOl
e9aVn2Eun/a3jJgctjd+bhS6Wf697TawJYSg2lMtEYMOK4hRwrutotVxDiuqJ2xh
gPzdyoVNJOAgezIISMOeawWHvs3zg+YajEfQOC7mQZIhqnEo0tYINFDHiWaSvVSM
xpFxZE7sYTn/Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:57 2026 by rpki-client