Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: kfB8bgx8VDenE/qI3R6l19J8BJO2+Xk1KFQJOJW/maA=
Subject key identifier: 09:D6:09:3F:83:7A:89:2F:22:DB:EC:F7:DA:A5:10:44:35:CF:6D:71
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 019D28BBA060C64F15AF754D81DD912D4CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: wW5h6h55qTMfBPKfbKxil605l2WBB18Zn3z9DDp5k/s=)
2: eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa (hash: AcOLiKex+34XfbpE/I3e+xkSlJ3+mpg+qWqvKQ2QsM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a0:60:c6:4f:15:af:75:4d:81:dd:91:2d:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=09d6093f837a892f22dbecf7daa5104435cf6d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:3b:43:4a:84:25:45:1a:73:07:07:68:57:
fe:a9:8a:e4:50:cf:4c:d2:fc:af:58:0c:7b:22:dd:
42:0a:0c:8f:80:ad:89:9a:a5:05:b6:8e:63:7d:d6:
ad:30:c2:59:36:31:93:cc:d0:c6:62:f6:22:3c:9d:
14:18:0c:d5:0f:93:44:a7:58:20:c1:6b:79:18:70:
3f:bc:d1:b0:6d:7a:70:73:04:88:1d:f4:f3:6d:cc:
eb:a6:59:f9:15:a2:8c:33:ef:47:c1:f6:b3:a9:c8:
fb:f1:59:3f:c4:48:e9:ab:e1:f7:52:c8:1e:29:ef:
95:2b:fa:e7:eb:9d:95:ff:2c:79:d8:22:58:5f:32:
31:4b:58:ae:02:16:df:35:74:c7:e4:75:27:1e:96:
49:0b:2e:94:cb:0c:bf:b5:e0:c4:d4:82:82:fe:3c:
32:0c:f0:f0:b6:1b:29:e7:7a:23:96:1b:5a:68:e6:
63:cd:ff:41:78:8d:05:a0:77:18:7d:12:c3:dd:22:
3e:4b:21:d3:31:cb:bf:2c:3d:5b:4e:65:0e:8a:68:
55:16:27:ba:1d:fb:07:7d:e6:8e:c6:3a:3d:29:24:
81:c5:f1:46:f8:1b:93:eb:3f:dc:33:d2:73:d6:43:
39:ca:37:02:b4:74:8f:4a:82:eb:0a:32:2a:ba:61:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D6:09:3F:83:7A:89:2F:22:DB:EC:F7:DA:A5:10:44:35:CF:6D:71
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:a7:95:c7:11:8c:74:68:78:9f:47:6a:6c:2e:b4:47:a6:
ef:63:88:b0:81:56:39:32:a1:a6:63:ac:b2:c1:5f:e9:5a:1d:
b2:b5:75:d0:8d:22:dd:08:a7:81:c7:72:4a:7c:64:31:c7:a7:
c3:26:66:7a:f1:04:fe:1a:5b:2a:d4:f9:e6:44:24:7d:7e:02:
c0:7a:ce:71:01:f2:af:9a:57:3d:fc:bd:a6:05:a5:e3:1c:97:
20:ad:dd:bb:67:c0:eb:53:dd:11:0c:4d:d4:af:0d:f3:07:31:
2f:d5:8a:49:67:81:89:d6:5b:9b:a7:4a:41:b9:52:4e:ac:77:
c1:0a:b1:12:4e:ca:4b:36:f6:56:99:de:32:2c:61:3d:12:49:
96:95:ea:3d:65:42:6b:c9:97:74:11:2f:75:aa:a6:ee:8a:a6:
0b:a3:f3:46:ee:e9:77:01:cd:6e:48:37:16:d8:c3:ca:aa:64:
0e:8c:bf:9b:ad:43:16:57:5d:0a:f1:01:63:dd:99:62:eb:d6:
c1:cd:0a:f5:6f:b1:4c:23:95:d9:aa:44:d1:39:01:08:46:ad:
5b:a0:75:d9:97:ff:db:81:75:2a:20:16:7f:98:27:72:0c:4b:
b5:ba:6d:a1:7c:85:5e:ca:2a:a9:65:74:d2:8a:40:4f:63:66:
31:bb:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:08 2026 by rpki-client