Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
File: Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft (raw, json)
Hash identifier: FkUon99A8m2wzTKRuQ5WsebDMqFDFMfuFc/JHiL3A3k=
Subject key identifier: B5:D3:15:12:FC:1D:D4:19:21:CE:E7:FE:D9:CA:08:FE:C5:3D:72:DD
Authority key identifier: 29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3
Certificate issuer: /CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3
Certificate serial: 019D28BB4F603839DEF96A6940F5ED58B97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
Manifest number: 016A
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: H6XYccC7fpMMsVAvJhpTJJjKAts.roa (hash: VBnY93gu3N5mykvYUP5adQhIP1FUaypyR6LQP53Vd6A=)
2: Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl (hash: hLOi8Yg3wwcmvYYO9hTaL5xoqGpr5rpsaWyJh/dy9Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4f:60:38:39:de:f9:6a:69:40:f5:ed:58:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=b5d31512fc1dd41921cee7fed9ca08fec53d72dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:41:b3:d8:e7:d5:33:43:66:7f:9a:4d:87:
4a:6d:ac:83:69:cd:73:d0:34:e7:9c:6b:5f:4d:95:
d8:df:80:a1:39:7e:e8:5b:0f:12:4a:3f:84:38:81:
1e:93:05:9f:14:f5:1f:e1:10:2e:98:9e:85:73:3f:
61:c0:2a:60:73:91:ed:36:aa:48:20:ce:6b:1d:fd:
8a:e4:3d:4d:dc:38:b9:27:07:f4:2a:11:bb:4e:6a:
7d:88:25:24:8a:1d:33:b4:9b:94:a2:9a:c5:93:0c:
04:a9:f7:15:86:fd:e6:5b:d9:f1:5c:97:14:90:97:
18:10:fa:6d:92:99:2a:27:ee:77:fc:19:30:dd:0f:
02:af:54:76:ff:52:c8:1b:90:0a:ab:3e:83:ed:8e:
fd:f7:fc:16:0d:97:de:85:c1:3a:01:eb:25:dc:79:
35:ed:39:03:f1:d1:5d:0b:b8:e0:d7:40:98:8e:62:
89:2f:15:7d:37:4f:8d:a3:00:5b:74:71:9a:0c:98:
08:76:d7:82:c4:ab:21:6c:17:32:4d:bb:f0:5e:28:
2d:33:3e:bf:6a:70:b1:80:9d:dd:1b:f6:4c:b3:bd:
1e:50:a1:5c:7c:6e:bb:0c:5e:37:06:da:7e:e6:8a:
e8:42:e5:8c:ac:97:5f:e9:bf:1b:8f:9e:e9:71:29:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:15:12:FC:1D:D4:19:21:CE:E7:FE:D9:CA:08:FE:C5:3D:72:DD
X509v3 Authority Key Identifier:
keyid:29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:a7:dd:06:12:10:0a:93:7a:96:0e:23:b2:26:7c:59:f0:
ba:64:67:6f:56:e9:70:27:88:b0:d6:64:6e:13:7c:57:3e:de:
91:1e:7e:a5:de:09:f1:20:7e:69:d0:fb:48:bb:ad:66:4f:41:
76:4f:56:aa:e4:ab:bd:73:02:41:7a:ea:8a:da:2d:49:8f:ed:
54:33:fe:1f:78:e5:66:47:80:e1:10:91:67:ba:8f:20:ef:48:
3d:b0:b9:5b:f5:9c:b7:6b:99:02:cd:8b:e1:ef:a6:25:3f:87:
07:d2:81:28:93:03:bb:8c:db:00:67:df:b4:55:35:a0:c8:fa:
2c:62:92:d9:0c:b2:2e:61:68:e8:6b:3f:f8:97:a1:4d:2e:dd:
9b:ab:5f:68:83:03:42:29:65:9c:7e:08:a5:87:fc:22:9b:43:
a3:04:e0:67:2a:c8:cb:20:13:e6:86:43:a2:45:1c:28:43:a6:
0b:db:09:a8:03:a1:7e:1b:f8:d3:1e:b0:de:b4:eb:b0:ac:e0:
fc:fa:7d:20:47:6b:6d:ed:4a:ff:d8:c4:0f:8c:75:6c:58:70:
80:15:0f:10:24:54:9c:12:92:e6:a1:fb:8f:e1:5d:96:32:e2:
46:44:8d:e2:8e:25:28:f3:77:b5:06:b3:3c:bb:47:b2:a7:1e:
cd:a1:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:03 2026 by rpki-client