Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: 6PNh+3IzozVjEBvJal50dNcnmiChtR0V537ETMQxNew=
Subject key identifier: F7:6A:0D:8B:68:7F:BA:41:70:32:C3:E9:AD:05:36:08:CF:FA:96:AD
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019D24715FF9661B5A82AB1965F1BD53F3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 08D9
Signing time: Wed 25 Mar 2026 10:01:42 +0000
Manifest this update: Wed 25 Mar 2026 10:01:42 +0000
Manifest next update: Thu 26 Mar 2026 10:01:42 +0000
Files and hashes: 1: 8iSljF9yURlFbqs-gvEXq7OZBjM.roa (hash: ARcwma/vswYt5XBxVOW0CoTAWWMy+ZmtkB5FXlj5D4U=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: rJsh8cgglK6IzU+MwozTFqwusJKSnFlrR+7Lmb6dvis=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:5f:f9:66:1b:5a:82:ab:19:65:f1:bd:53:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Mar 25 10:01:42 2026 GMT
Not After : Mar 26 10:01:42 2026 GMT
Subject: CN=f76a0d8b687fba417032c3e9ad053608cffa96ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:b0:ea:fa:36:6f:8a:28:e1:e0:1e:cc:05:
69:34:07:0d:f5:42:7d:8a:22:2e:5a:77:4f:3f:d4:
18:cc:f5:af:02:e4:f1:2a:5a:4f:68:8a:3b:f5:10:
6c:10:33:47:86:74:cb:81:81:d3:a7:f7:46:66:4a:
62:ce:14:b5:64:86:0d:7a:d4:2a:62:1d:4c:34:51:
88:e4:9c:8a:65:e7:da:d3:9d:70:91:36:de:2f:25:
fb:01:97:86:9c:f3:cd:31:bf:77:b1:20:3a:a1:5b:
b1:5a:1f:c1:f0:22:ac:17:40:38:df:48:93:7c:0f:
d4:3b:9a:a9:79:b6:fa:20:34:34:ad:e5:8d:1a:cc:
dc:36:ad:f7:81:e9:1b:65:17:2c:17:55:fb:6a:97:
1c:c4:28:a2:30:e3:21:da:64:15:8e:d0:ed:25:45:
c3:dc:a2:51:7f:0a:d3:7d:10:cb:7c:38:ac:7d:f9:
90:75:df:ed:a7:17:58:15:21:83:b4:dd:4b:bb:95:
f1:d6:72:92:c5:e6:df:b9:c7:36:59:14:28:c1:7b:
bd:38:11:c3:27:8d:14:fd:76:d5:e9:ad:0a:e3:b7:
d3:8e:3b:27:3d:78:a8:ab:ad:5a:e7:2e:da:9f:44:
9d:43:b4:fa:e6:47:f0:eb:04:f7:db:04:70:52:2e:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:0D:8B:68:7F:BA:41:70:32:C3:E9:AD:05:36:08:CF:FA:96:AD
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:33:35:d1:3a:b0:ea:db:dd:01:28:16:b5:7f:00:07:91:ff:
8b:bb:75:4e:9f:8e:fd:67:38:0f:d5:25:93:bc:dd:0e:98:42:
1e:eb:b9:f8:95:ad:04:eb:de:f5:ff:88:fe:91:ed:96:7d:dd:
01:99:d5:d8:96:2b:4f:b0:77:f0:2e:3d:94:9f:57:cd:05:d2:
2c:f3:98:5f:bd:11:57:92:03:2c:e1:b9:2e:c2:56:ec:55:4e:
f1:16:78:63:9e:f7:47:f5:62:c5:43:d9:77:e6:71:93:68:7d:
4b:36:1f:04:f0:70:94:84:14:51:93:88:fd:c3:17:ae:7f:da:
80:dc:3c:20:bf:31:d1:55:dd:30:ad:c6:53:ea:7d:f0:d7:1b:
9d:51:8f:5a:ed:62:7b:7e:7a:54:f2:44:55:36:46:14:07:7f:
23:83:e7:1d:46:e7:db:77:a5:60:79:01:08:96:45:49:a3:c9:
75:d3:1f:5d:83:a3:6d:c6:dd:88:f7:e3:f8:c5:2e:56:85:f8:
75:d1:70:b0:5b:98:e5:46:8b:90:12:99:b0:2c:46:a1:02:9c:
68:8e:8d:f9:09:3f:09:e3:46:94:18:04:3f:bb:6b:3b:ed:6f:
90:86:00:77:72:13:72:39:e6:71:e6:57:3c:01:4d:ac:78:97:
bd:99:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:38 2026 by rpki-client