Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
File: KpKTnjuv_mq42aeWIFHYXOKjaLo.mft (raw, json)
Hash identifier: gdYgyjZ93vBaus2I+AYlQPo+5PxjrpNQNRfZIes9byc=
Subject key identifier: B1:FA:F1:D8:F2:84:3C:88:FE:A9:4D:74:92:3E:D3:EB:9E:5C:EC:F9
Authority key identifier: 2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA
Certificate issuer: /CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba
Certificate serial: 019D322BF7717EBBD8C79B695A3A7DB1FC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
Manifest number: 9F
Signing time: Sat 28 Mar 2026 02:00:35 +0000
Manifest this update: Sat 28 Mar 2026 02:00:35 +0000
Manifest next update: Sun 29 Mar 2026 02:00:35 +0000
Files and hashes: 1: KpKTnjuv_mq42aeWIFHYXOKjaLo.crl (hash: kQpspA1e/5LCjpgqHBXMyaU81/14sp1a9X9kEVas4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:f7:71:7e:bb:d8:c7:9b:69:5a:3a:7d:b1:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a92939e3baffe6ab8d9a7962051d85ce2a368ba
Validity
Not Before: Mar 28 02:00:35 2026 GMT
Not After : Mar 29 02:00:35 2026 GMT
Subject: CN=b1faf1d8f2843c88fea94d74923ed3eb9e5cecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:71:86:1f:52:fa:52:a8:e4:43:a8:89:80:
ea:51:cd:07:2a:a4:3e:74:61:4d:62:64:8f:d4:16:
bc:9a:51:e6:f3:43:32:68:e9:f4:d4:fe:f3:1a:08:
d1:06:fb:53:c7:dc:05:61:c2:ab:32:29:e9:cf:fa:
be:61:91:d6:dd:a9:5a:7e:af:c6:41:1e:d2:53:64:
a3:66:10:09:07:3f:9c:1f:a7:04:4a:58:79:e0:51:
ca:6e:d7:31:4f:67:42:6b:52:e4:88:0a:2d:6b:b3:
57:76:0d:b5:ea:a2:e3:cc:96:d9:b1:ad:89:3d:64:
40:3a:56:14:2f:d7:a7:85:de:e7:f5:97:70:9d:bd:
94:92:87:24:30:ea:42:bb:b5:c5:fe:48:aa:ea:64:
a5:88:81:02:70:ad:13:fa:f4:46:02:0c:41:9a:04:
38:fb:bf:b0:4e:01:28:13:64:8c:82:c0:9c:4a:5e:
15:59:53:84:cf:52:73:27:05:99:99:9e:92:58:7c:
25:1f:93:5d:82:cf:f3:06:ad:f8:57:7c:b7:85:2f:
f7:d8:03:9d:a6:2b:14:59:8e:7b:f2:7a:32:02:f6:
2a:cd:07:d8:42:b8:7a:b9:3b:e2:63:f1:c0:84:2d:
df:3a:67:1e:d1:45:3c:9e:3f:58:1b:2d:f1:1b:89:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FA:F1:D8:F2:84:3C:88:FE:A9:4D:74:92:3E:D3:EB:9E:5C:EC:F9
X509v3 Authority Key Identifier:
keyid:2A:92:93:9E:3B:AF:FE:6A:B8:D9:A7:96:20:51:D8:5C:E2:A3:68:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpKTnjuv_mq42aeWIFHYXOKjaLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e06dcf-b520-4b65-9cac-bc61cb1f8610/1/KpKTnjuv_mq42aeWIFHYXOKjaLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:81:59:e6:df:56:84:95:e3:d1:7d:a1:36:4a:f8:50:b4:
1e:32:f3:39:13:1c:c5:9f:e1:12:e5:09:4b:c1:c6:5f:3e:0e:
19:3c:4b:c6:71:12:3b:4e:16:71:28:db:99:8c:16:cb:c8:16:
65:45:2b:90:16:a6:e2:83:7e:26:ac:9c:ba:ef:64:8b:5c:86:
f3:96:7b:f0:a5:07:1c:4b:31:c1:87:0d:ea:90:c7:cc:be:c5:
7b:64:c4:53:86:7b:5e:83:86:23:6e:bd:f7:55:25:39:86:a2:
0d:8f:35:e0:cc:e5:d1:0b:9d:06:3a:a3:af:36:7d:ee:55:f0:
06:b2:6f:7d:7f:45:89:7f:db:1c:70:88:38:0d:ad:48:83:93:
6e:95:fb:9b:37:db:32:b1:e2:a5:d8:d5:bc:12:25:99:77:49:
04:7e:07:07:d8:98:c8:c4:c6:22:e8:c6:4b:77:8c:b3:6f:bb:
31:94:c5:08:c1:b7:34:2f:bd:d2:ef:be:cc:3b:95:e2:b8:d5:
9a:82:20:73:ce:66:9f:29:85:97:ad:21:7f:97:df:4b:b2:7b:
6c:d3:98:92:54:d4:cb:d7:9c:94:d6:f0:68:45:bc:c0:95:82:
de:33:78:8a:2f:e3:a7:74:36:86:61:34:17:76:a2:82:8f:d1:
14:4b:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:55:08 2026 by rpki-client