Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
File: RKMb41sydPLLhX5a81aLaFqJEn0.mft (raw, json)
Hash identifier: Dy4uJHs8yfyoRIJ+IT2wNl76PgjmjsUOE9GZ/xgaGIE=
Subject key identifier: AB:4D:23:EA:8B:00:7F:03:CD:40:9F:1F:84:15:6B:EC:6B:C9:E9:C3
Authority key identifier: 44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
Certificate issuer: /CN=44a31be35b3274f2cb857e5af3568b685a89127d
Certificate serial: 019D29CE5B63E18ED5BDAD6A7FD01011EDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 11:01:22 +0000
Manifest this update: Thu 26 Mar 2026 11:01:22 +0000
Manifest next update: Fri 27 Mar 2026 11:01:22 +0000
Files and hashes: 1: RKMb41sydPLLhX5a81aLaFqJEn0.crl (hash: 3uai3tWoUVca5QkVFhbKJB+e1peoguIRkapjrBtd8V8=)
2: oBnAGTOyECz3qOvMpZNgO6Ho4ao.roa (hash: I5TS3LqyPe4PYtzp6IqjKbzYqpbpCZWL4keNAsLcZ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:5b:63:e1:8e:d5:bd:ad:6a:7f:d0:10:11:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a31be35b3274f2cb857e5af3568b685a89127d
Validity
Not Before: Mar 26 11:01:22 2026 GMT
Not After : Mar 27 11:01:22 2026 GMT
Subject: CN=ab4d23ea8b007f03cd409f1f84156bec6bc9e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:cc:00:5b:ac:46:a8:f5:bb:02:a7:de:94:
00:98:17:82:2a:87:f5:0e:4f:24:61:22:ef:72:da:
bc:79:e5:ac:33:b9:9a:17:23:85:71:29:0b:6d:c5:
66:ac:9a:7f:64:61:89:7e:8c:b4:8c:36:4e:9a:a4:
ee:c6:d3:46:2f:c8:f3:86:17:6d:9c:d2:e0:39:93:
df:fc:bc:8c:d5:91:24:34:0e:bc:c1:f9:9a:6a:87:
dd:82:48:a6:d3:1f:1f:95:0e:67:8d:d0:f5:e0:f5:
a6:11:c5:33:39:f8:4a:50:39:96:4b:44:cc:9b:05:
3a:39:b4:1b:c0:13:24:81:8d:9d:50:43:e3:c6:06:
21:78:77:b6:de:8a:d8:e5:1c:c3:ef:d3:8b:0c:a0:
af:4f:32:f2:c8:f0:df:c7:2c:48:43:49:86:ac:f6:
15:9a:aa:a8:6b:40:b6:0e:cb:2d:73:df:12:b0:a9:
d2:4c:c5:4e:ac:02:f0:09:25:63:ba:10:9c:36:61:
f8:b8:4c:0e:d0:1f:d3:63:91:91:e0:f3:7d:32:3d:
a8:a7:06:64:7c:f6:5b:00:0a:4f:07:f2:2f:e4:e2:
74:aa:78:f2:48:70:43:4d:03:e7:89:f7:25:20:35:
1d:da:79:1f:58:b4:5f:1c:5a:12:30:61:d7:23:22:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:23:EA:8B:00:7F:03:CD:40:9F:1F:84:15:6B:EC:6B:C9:E9:C3
X509v3 Authority Key Identifier:
keyid:44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:65:39:ed:fe:91:d2:13:6b:9b:90:2f:d8:49:de:0d:99:c8:
bf:c7:b5:4d:8d:52:ed:70:e2:24:e3:5a:2a:e4:79:42:56:21:
33:bb:9a:f6:a0:ef:48:b2:35:24:77:5d:fd:1a:dd:bc:cd:58:
1a:52:e5:b9:f0:7b:ff:84:8c:40:b3:5e:96:2c:ef:6b:e9:1e:
6e:69:62:c5:7c:b9:1e:cc:09:cb:31:f8:20:43:53:f7:d7:5c:
06:13:fb:59:a0:fc:70:ed:a3:a9:b0:be:e9:58:aa:76:e7:b8:
33:4f:96:a1:fb:03:67:58:c0:d3:ca:5f:62:28:99:43:2b:82:
d2:8b:9d:8c:b0:33:e5:30:99:e1:e6:bf:f7:69:d6:15:f9:43:
83:9b:b4:d3:b8:51:14:93:92:67:93:75:39:ad:ae:fa:91:8f:
70:4f:3a:66:9f:f1:88:95:6d:95:72:6e:90:68:ba:ee:9c:6c:
5a:97:3b:b5:50:8e:ff:3d:c6:f2:79:c0:c1:75:cc:0a:2b:d4:
93:c1:8b:36:fe:2c:a0:e6:93:eb:11:09:60:72:8d:40:db:5d:
44:33:ee:ae:24:30:7d:01:b9:f4:39:68:dd:b1:88:0b:6a:19:
4c:eb:d5:37:8b:8a:fb:39:22:98:c7:0f:b7:5d:79:af:b4:cc:
bc:fa:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:03 2026 by rpki-client