Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: Nd+UuiHhhTGOog6brGXRoW38gkcHiRmbKAI2X6Rcuec=
Subject key identifier: 4C:85:90:48:FD:AA:63:2B:66:D9:07:73:67:CE:16:23:F3:9F:B4:CA
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 019D26966B2AD0E2E06CA5F98D09FC28EB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 1809
Signing time: Wed 25 Mar 2026 20:01:25 +0000
Manifest this update: Wed 25 Mar 2026 20:01:25 +0000
Manifest next update: Thu 26 Mar 2026 20:01:25 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: ZEyS5M4p2tFlmW5AQ7LTw6D2jTVV+wpDALAFh9Ujbuk=)
2: v-wCFquCVU3REEeKuxPMifGq75E.roa (hash: VExpozMOuBZjJ6RPCyBqYq82PjuTIznByXSgv//ywPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6b:2a:d0:e2:e0:6c:a5:f9:8d:09:fc:28:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Mar 25 20:01:25 2026 GMT
Not After : Mar 26 20:01:25 2026 GMT
Subject: CN=4c859048fdaa632b66d9077367ce1623f39fb4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:b2:bb:2b:32:17:a9:b0:4c:03:73:e7:ed:
70:f8:f8:76:ab:65:0a:c7:e4:04:12:71:b1:9b:87:
42:0a:11:9f:26:93:f0:7d:37:3d:b4:f6:8b:36:83:
eb:89:b1:9a:35:f0:c6:79:10:65:ca:ca:d5:eb:96:
43:0b:13:10:13:f7:14:9e:ef:90:fd:64:ec:3e:df:
d8:0f:d7:ed:ce:09:c5:74:d2:81:d9:7f:ce:c0:1d:
c6:02:3d:e3:5e:5b:9a:d3:47:e5:fb:20:d7:66:40:
a3:a4:8e:49:12:e9:ab:a5:6a:77:14:89:d0:b5:5d:
5e:5c:fb:5b:38:e9:dc:25:c4:c0:4e:71:57:95:98:
20:fe:c3:1c:cf:ab:ab:57:ba:3c:0c:17:fd:2b:5a:
1f:8a:1f:d8:31:a3:d3:10:9d:93:84:d0:e6:bd:25:
14:8f:b5:9e:de:7b:02:3d:a5:bc:be:ea:d2:64:c4:
58:11:12:3f:58:a8:f1:73:fb:56:a6:98:7c:8b:71:
8d:d8:af:d7:9d:3b:47:cb:f2:14:e6:52:1b:f0:d8:
f9:ff:7d:c3:a7:fb:b5:aa:7c:41:d7:8a:fd:7c:0b:
b5:c7:52:db:5d:04:d7:f4:e1:51:6d:b9:83:0f:e2:
55:de:29:4c:ea:39:6e:c5:98:ff:4d:56:ac:f2:b0:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:90:48:FD:AA:63:2B:66:D9:07:73:67:CE:16:23:F3:9F:B4:CA
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:2a:fc:bc:4d:69:99:2c:c2:a0:0a:9f:cb:fd:11:96:82:
b4:48:78:73:97:9a:96:01:b0:47:d8:db:58:84:89:f6:39:6a:
5f:4e:be:95:3c:65:a6:d2:ca:ed:f0:9b:97:c6:b5:ec:5d:9d:
9a:d3:f7:62:e4:7b:a2:d3:15:c6:cc:7e:d1:59:a4:ea:6a:6d:
b3:14:38:49:f6:c2:8a:cc:4e:fe:80:ea:22:e7:08:7d:fb:10:
ef:5f:ff:34:6e:d0:ea:15:e8:a0:5f:36:95:42:f7:55:33:1b:
48:ce:b8:db:8f:bc:69:83:f7:84:97:45:30:55:8a:d9:f4:6d:
6c:49:ab:7a:a1:90:60:f1:be:74:08:50:ec:4f:18:ea:2d:19:
6a:6e:d3:58:06:99:8c:35:d7:d7:36:aa:c0:aa:8d:e8:08:d4:
c2:e3:17:fd:7e:ab:3d:9e:d9:33:c0:2a:73:e5:7f:cb:0d:43:
2a:a6:7d:b8:4c:13:21:ca:b1:86:29:77:1d:59:4b:57:11:79:
66:4f:7a:b5:50:84:d8:7d:5e:52:f2:44:54:ee:ba:c3:b5:c6:
24:a9:1d:13:41:83:40:1e:ab:3c:76:ea:e7:fb:f3:01:44:ac:
84:c5:ad:b8:61:df:2f:32:73:19:2e:83:d4:63:f0:41:b9:2a:
8c:87:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:14 2026 by rpki-client