Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
File: KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json)
Hash identifier: eu52YknbXZIBSJ+0bR3scV9mYspqG/m5mNUAPBDPWeg=
Subject key identifier: 68:97:D7:66:18:E8:75:73:E2:79:C4:61:33:0E:D9:FC:D2:E5:4E:ED
Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Certificate serial: 019D265EEDCCA6FDBD32C1C94EA5857366FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:00:48 +0000
Manifest this update: Wed 25 Mar 2026 19:00:48 +0000
Manifest next update: Thu 26 Mar 2026 19:00:48 +0000
Files and hashes: 1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: gDFDEJYJXyKaEih/OChVKOL6nZ2U+CLun6mUUo8bI8w=)
2: bXOv_CUuxonwS19Bf5bYfNwVcEw.roa (hash: pgxwkEVra6Le7zeKVNiooLUsbulw8SiiT7aDE/ZBWEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ed:cc:a6:fd:bd:32:c1:c9:4e:a5:85:73:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Validity
Not Before: Mar 25 19:00:48 2026 GMT
Not After : Mar 26 19:00:48 2026 GMT
Subject: CN=6897d76618e87573e279c461330ed9fcd2e54eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:65:1c:5a:7f:44:fd:77:b7:0d:a9:0b:f2:
b9:5e:08:04:ee:4d:f7:94:e6:d0:c1:79:65:e9:6a:
cf:d1:51:e0:c2:04:d0:4f:13:81:be:ff:84:37:77:
dd:f3:12:5a:ab:fc:e4:29:04:ed:93:db:fb:fb:02:
21:a6:1f:02:82:eb:39:fc:d7:d1:39:4b:cd:27:07:
d0:2d:83:4e:77:d5:77:8e:ed:1c:a1:58:7e:78:33:
82:3c:53:07:7d:b8:0d:60:1a:0a:2e:37:c2:81:5e:
33:85:38:e8:0b:21:21:d2:fa:d7:03:27:49:93:50:
00:83:1a:65:b5:86:ae:52:93:25:d6:a2:28:07:ae:
5d:b2:0b:28:04:4d:5e:4a:e6:28:04:af:05:a6:90:
df:8a:02:80:cd:4a:20:b4:44:6f:58:40:6f:ea:4b:
67:05:18:0c:d9:d7:c1:92:08:04:65:b5:ff:26:8a:
4b:74:40:1b:74:02:b5:f5:65:60:19:a9:16:f1:e8:
d4:d2:60:b8:bc:19:e9:26:30:a4:b3:aa:38:c3:b4:
a2:dd:e4:46:5e:60:3c:bd:aa:3a:e5:2d:b4:47:8c:
59:b5:cc:8b:f3:df:b8:af:bb:10:92:fa:15:0b:37:
d5:69:90:93:56:ab:28:a4:2c:db:8c:08:72:d8:23:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:D7:66:18:E8:75:73:E2:79:C4:61:33:0E:D9:FC:D2:E5:4E:ED
X509v3 Authority Key Identifier:
keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:f5:89:49:fd:5c:e0:d9:90:7b:a3:14:ff:f8:ea:95:93:
e2:89:f1:9a:53:aa:50:34:6e:10:2f:8d:bf:45:e5:2a:29:01:
fe:e9:0f:74:f9:d4:9d:8e:41:d1:0f:78:28:b2:4a:1d:1b:69:
16:7d:be:19:76:bd:83:54:e8:9b:5b:dd:57:9a:e9:85:83:73:
4b:92:02:04:ed:76:23:0a:cb:0d:6c:2a:57:2a:8b:02:ea:d9:
e7:53:fe:ac:ac:8e:b3:9f:b8:3a:a2:5c:ee:88:d8:3e:e8:ae:
21:db:8f:bb:a9:8b:63:1d:d6:40:3e:81:a8:9d:f0:27:82:08:
93:70:5a:78:5d:96:70:5d:25:bb:50:9d:94:54:70:3b:1a:8c:
0a:98:57:d6:2f:01:15:8a:89:ad:58:d8:0d:8f:71:f2:f6:ae:
24:57:88:32:e1:bb:49:49:2d:9a:53:15:48:8e:4d:67:b2:95:
bd:80:61:71:b7:7b:78:89:ff:1f:d2:21:93:9a:e2:c4:6a:cc:
10:97:2b:96:03:32:44:95:e9:de:6d:d5:44:b1:f4:22:2a:ae:
f3:df:32:d2:90:1a:76:7b:19:53:e6:bb:a2:79:29:00:d0:eb:
4e:8a:55:1b:a4:7d:ca:f7:aa:b0:0a:8a:f1:79:ce:13:87:9e:
40:9d:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:56 2026 by rpki-client