Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File: KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier: SZABsgGI8huLo3KlkI4Auj/3Up0AV7YBhXc19kKsyig=
Subject key identifier: 3F:6B:CE:ED:FF:0F:6F:DC:36:3C:BD:AC:B7:E2:51:F4:B9:28:64:B1
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer: /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial: 019D25F1E58B2A26046D711889A833A40FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: PwzkJRTlQZXZU7iSaod7BAg/4GVlFHTLedmJXO5Rih0=)
2: wkII8mT_euYThV1XwcC1p09SIq8.roa (hash: KTBmbNMYpZwuYjtqFt1PYs9OEJ/5++AGe1s/9JAMhzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e5:8b:2a:26:04:6d:71:18:89:a8:33:a4:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=3f6bceedff0f6fdc363cbdacb7e251f4b92864b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:8d:e3:55:dd:af:d1:9a:a9:47:a6:b0:a2:
2e:5c:fc:43:eb:a4:96:9f:33:37:e8:43:7b:8d:b8:
bb:b7:8e:55:76:fe:5d:5b:e8:4c:df:55:07:d7:30:
f9:25:87:81:62:ca:1b:1e:30:1e:c9:9c:34:da:8b:
a9:96:ce:6b:f0:13:0f:59:da:51:fd:f7:32:aa:5a:
ed:fc:bd:04:13:29:5f:2a:97:90:64:e8:9c:4f:dc:
86:07:41:7c:2c:ac:91:a4:ce:4f:74:7e:f5:49:c1:
c0:54:5c:83:a4:ea:cc:06:37:3f:59:ec:8d:fb:70:
c8:c6:ac:4c:90:77:be:b7:e7:31:f0:0f:ce:d1:17:
43:74:24:94:8e:ff:56:da:b1:c4:94:07:27:e1:57:
e7:e2:6a:c8:d0:cf:05:a9:1e:6d:d4:92:6b:13:1e:
b1:07:2a:1a:68:5c:84:95:92:e7:4d:1d:71:79:da:
9f:04:54:b2:b8:a0:2b:3c:c5:04:33:fd:b8:6d:ef:
41:9f:6f:f7:74:7b:bb:a7:93:f2:81:74:f3:e9:32:
fb:8f:18:c6:0c:b5:60:73:14:26:0f:31:74:11:11:
50:bb:3d:74:e9:2b:5e:03:24:d4:b1:ba:91:78:54:
06:8a:90:a2:5d:87:c0:af:b5:f4:58:c9:ae:0c:88:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:CE:ED:FF:0F:6F:DC:36:3C:BD:AC:B7:E2:51:F4:B9:28:64:B1
X509v3 Authority Key Identifier:
keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:48:e9:a7:0c:77:39:36:bb:b4:2d:b3:a4:cb:ed:06:58:7a:
8d:09:7b:ef:77:64:07:4f:f3:1b:9a:4e:06:ca:4c:2c:6e:b1:
4e:7d:41:1c:63:47:45:8a:53:3f:bf:f2:24:39:83:dd:00:f0:
e2:5b:a2:fb:74:48:3a:34:52:c2:d8:11:a0:5b:9e:7d:a4:94:
69:a6:da:a2:17:79:6a:4b:90:b4:dd:87:b0:e4:83:69:58:f0:
19:7c:92:9f:27:49:64:c6:09:14:be:56:a3:cd:3f:67:c3:4f:
3c:7b:45:1b:65:08:3c:5c:7d:2f:19:dc:ec:4b:68:bf:0c:bd:
dc:70:d6:3e:03:90:ee:ba:3d:19:73:ab:db:31:ad:be:da:5a:
52:c2:d7:7c:03:11:a3:a1:33:5e:e5:d6:27:1c:94:f6:fa:27:
28:fd:4a:7d:7a:6d:23:b9:e8:8a:99:b4:d1:22:d6:e2:7a:dc:
ea:68:d8:7d:e1:40:eb:05:28:be:34:a8:f6:35:e4:bd:c8:e6:
bc:f7:b2:aa:9b:3d:ec:1f:51:b1:aa:f1:13:e8:ea:c6:bb:6f:
27:2c:18:c1:09:90:18:85:dc:ba:ee:ba:d7:86:2c:11:01:bf:
d1:ba:2a:ea:78:f2:b8:23:08:fe:87:90:31:87:16:e8:96:41:
f9:cd:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:25 2026 by rpki-client