Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: zi1NQvlF5S27YaFXkEdXTHW1+YrxvVmfTsxXjXXo9OY=
Subject key identifier: 49:32:56:AC:F5:7E:0F:63:F5:C4:EB:CF:BA:54:69:CC:19:FA:F8:06
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 019D2772CD3408A02F3374FFB9940DDC8D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 1788
Signing time: Thu 26 Mar 2026 00:02:08 +0000
Manifest this update: Thu 26 Mar 2026 00:02:08 +0000
Manifest next update: Fri 27 Mar 2026 00:02:08 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: uiPJF0kOMj385MOoNbwavERauIXQjjFrK+h7Z7b06gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cd:34:08:a0:2f:33:74:ff:b9:94:0d:dc:8d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Mar 26 00:02:08 2026 GMT
Not After : Mar 27 00:02:08 2026 GMT
Subject: CN=493256acf57e0f63f5c4ebcfba5469cc19faf806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:29:22:2c:87:e6:b9:94:51:ff:c2:d5:2e:
7e:c2:8f:74:47:64:8e:5d:64:9d:50:e4:a7:63:45:
32:c8:f1:46:79:a5:c9:ae:07:a9:48:51:20:45:39:
c7:89:f7:a6:5b:16:b5:3f:cd:fd:0f:f5:ba:81:80:
ea:a5:bb:9e:6a:26:c0:c2:a6:7b:08:95:49:2d:06:
3b:72:b7:ff:1d:96:61:17:cf:c6:1f:18:53:c3:88:
4e:b6:08:db:cd:27:1f:81:3e:d6:63:3a:43:62:ae:
1d:ec:56:07:bb:33:53:37:46:e5:fa:66:2d:3b:97:
2d:49:94:ef:21:d7:b9:6c:b1:d7:e2:1e:30:b9:8a:
5d:79:28:6b:14:22:1b:82:1d:98:39:d2:12:72:b3:
c0:10:f3:63:38:ed:ca:75:98:77:fc:28:67:3f:d5:
b0:76:10:27:d3:39:89:36:68:41:b6:59:f7:bd:49:
6f:a2:a8:66:21:7f:f5:1a:8d:68:0f:6f:19:34:09:
22:4a:ec:3c:76:c8:f9:09:77:42:71:d4:1d:5f:f4:
45:4e:41:e3:88:8e:3a:0f:dc:fc:26:05:da:b0:49:
1b:bc:77:b0:03:36:54:b1:8e:02:09:76:2b:c2:1c:
2a:ac:61:99:0a:9b:2b:42:74:67:fd:33:e7:9b:79:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:56:AC:F5:7E:0F:63:F5:C4:EB:CF:BA:54:69:CC:19:FA:F8:06
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:8d:5f:1d:7d:d2:b0:89:d4:6d:10:46:4d:f9:60:98:70:
bf:75:f9:47:1c:d5:ab:88:c9:1d:a6:e9:9e:17:d9:07:81:3a:
1d:ff:8a:27:04:34:22:56:a7:5e:df:ec:86:b3:b9:33:08:4c:
50:cc:50:f2:de:7e:5c:3f:5d:0d:79:1d:2e:05:3a:80:45:54:
f2:b3:21:4b:cc:20:0e:99:00:8b:4f:9d:6a:dd:e9:a5:3a:e9:
6d:85:24:e0:56:4b:6b:2b:cc:07:39:0e:36:8f:6b:ad:48:28:
87:4a:2b:94:db:cb:7a:0b:e4:5d:ad:60:3b:52:c6:cc:68:4c:
3e:a7:31:91:41:6e:91:7a:25:3c:b7:a8:67:96:19:ee:9d:ce:
6d:c2:74:05:a2:7e:fa:ad:67:2f:b8:81:33:e1:d3:45:3b:73:
37:f5:1f:2f:fa:b7:79:00:01:c6:00:de:f0:ab:3a:ad:15:21:
49:6f:d3:a4:91:28:9e:9e:ea:5f:4e:af:76:b6:d6:83:ad:77:
72:a8:d7:d9:d5:84:97:9c:ca:27:11:79:69:e7:ae:cb:06:a8:
10:b6:41:d3:1e:1c:56:36:a3:fc:9f:af:d7:8c:37:83:9c:8f:
83:3f:48:f9:85:d4:5e:ca:35:67:30:a3:fe:69:0e:b1:81:e0:
04:1d:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:43 2026 by rpki-client