Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
File: KfUkAji4KPFuYCKeJjNQPwSEZZk.mft (raw, json)
Hash identifier: OQwW3vFQpnpw4s7P0zAoBMvAcDrKTNBcqPwgTKXz7AE=
Subject key identifier: 03:EB:1C:9D:10:00:B3:3D:2C:A9:1D:FB:A7:B1:7D:E2:21:0D:CD:1F
Authority key identifier: 29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
Certificate issuer: /CN=29f5240238b828f16e60229e2633503f04846599
Certificate serial: 019D28170903BA431C40CFED8FAB71387FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
Manifest number: 0578
Signing time: Thu 26 Mar 2026 03:01:31 +0000
Manifest this update: Thu 26 Mar 2026 03:01:31 +0000
Manifest next update: Fri 27 Mar 2026 03:01:31 +0000
Files and hashes: 1: 5HzcZ6a4XAtwOavRhWgPVbFXunY.roa (hash: WuFbSIBYf/9ZwaN+lOrty44DR9s11eIeBklLm/eyCus=)
2: KfUkAji4KPFuYCKeJjNQPwSEZZk.crl (hash: Okg7jZBnrJK/ruTb+M/0UA0w9P0dcFow71w2Nuo5adc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:09:03:ba:43:1c:40:cf:ed:8f:ab:71:38:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5240238b828f16e60229e2633503f04846599
Validity
Not Before: Mar 26 03:01:31 2026 GMT
Not After : Mar 27 03:01:31 2026 GMT
Subject: CN=03eb1c9d1000b33d2ca91dfba7b17de2210dcd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:f8:fb:98:c3:c4:6c:92:95:87:61:81:9f:
aa:f5:91:89:e0:3e:dd:d9:2e:ae:71:ae:c3:e5:6c:
46:66:8a:11:03:46:1e:16:9f:ad:99:1f:3c:4c:62:
f1:a2:13:9a:25:9a:06:88:0a:ce:5c:ef:11:b0:9c:
67:1d:ce:7d:71:05:b1:68:7f:f8:43:a7:e1:73:0e:
90:f7:3e:c7:e7:05:85:2e:04:a2:11:73:c0:8a:db:
2e:c7:a5:6b:8a:67:1e:ba:8b:46:27:91:b1:08:65:
76:8b:ca:69:f4:60:7e:ae:ac:9f:10:89:1b:9f:0b:
32:a3:7f:45:e8:9e:6b:2d:df:5b:05:05:f5:67:ee:
7f:a4:a4:80:46:de:e5:0d:2f:50:4c:8e:97:c1:a2:
bf:bd:dd:ad:bc:6a:9f:d8:49:2b:36:7a:b0:a1:35:
98:a2:af:32:40:c7:5f:b8:18:5c:c9:21:31:40:d0:
47:c4:72:a2:7a:1f:62:d7:0f:00:54:cd:6e:15:2b:
78:a4:9c:dc:09:32:27:48:76:86:7c:19:d8:14:7a:
f8:5b:1f:fd:07:d3:e3:8b:c8:92:c1:c0:90:f5:cd:
4f:02:99:8f:e1:cc:e9:3d:ca:34:2b:68:b3:61:aa:
50:88:00:0f:80:43:2a:ed:ed:3d:e7:a0:3f:97:5a:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EB:1C:9D:10:00:B3:3D:2C:A9:1D:FB:A7:B1:7D:E2:21:0D:CD:1F
X509v3 Authority Key Identifier:
keyid:29:F5:24:02:38:B8:28:F1:6E:60:22:9E:26:33:50:3F:04:84:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfUkAji4KPFuYCKeJjNQPwSEZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0614a6-d01c-4ff2-a993-7246457fd2b3/1/KfUkAji4KPFuYCKeJjNQPwSEZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:31:cf:fc:4a:21:12:16:6e:9f:a8:f2:ba:58:48:12:da:47:
68:5e:37:54:4d:70:4d:17:ae:25:00:11:c5:0e:cd:34:c6:23:
87:07:0d:4d:35:8b:c5:8a:1a:61:6c:52:64:14:59:c7:e8:90:
d3:43:01:1c:e5:14:bc:f1:a5:b6:aa:6d:19:7f:3f:37:bc:cb:
54:99:9d:60:93:4a:73:7b:65:b3:58:80:57:34:80:ba:ce:67:
9d:60:f3:13:4e:4d:a7:be:c2:bb:53:c1:9d:3f:1c:18:dc:a5:
bd:0f:a9:8f:55:67:ba:c0:38:0e:38:18:61:25:07:9d:61:ea:
88:5e:c8:57:2d:4d:10:dc:be:8d:98:55:61:7d:ec:35:2d:58:
48:0e:9c:f7:39:4d:10:9e:d7:56:70:f8:e5:3c:46:70:8d:f1:
82:0f:4d:f7:ad:87:c2:cc:f5:c4:53:2b:ac:3e:e8:dd:58:cb:
97:60:d3:e3:84:ca:75:4a:52:44:b1:4e:83:7c:da:54:f6:79:
91:5e:b9:6d:73:56:35:7d:5b:a8:02:19:f7:de:e4:11:6e:b3:
39:a3:59:53:b1:6f:0c:33:3d:cf:b3:5d:88:7d:15:17:3d:89:
ae:e0:0b:80:d8:b5:9a:22:47:97:16:eb:83:b1:95:d8:a8:aa:
45:a2:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:13 2026 by rpki-client