Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: Z/Ls304aS1dZY/519BJQgtxPkcwwy5BqJqXvt7IO7Xk=
Subject key identifier: 5D:FE:DE:A3:86:88:93:83:9F:8A:76:3A:6E:A1:15:06:D6:19:1A:B7
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019D27DFD1817B3F11171377A20E450BC14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: FmLwyqe+RPTp/3OFUQXsyR4Qjrpx7BIOQ6ZQ6E3R/Ms=)
2: mc9vgt48FDSSjfdsSGOMMwU_Xnc.roa (hash: 7YStYGH0X3lXXsv/wC32bvyXMwAf6g2zLLXt60k5Dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d1:81:7b:3f:11:17:13:77:a2:0e:45:0b:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=5dfedea3868893839f8a763a6ea11506d6191ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7b:1a:5d:45:29:66:74:5a:c9:f6:68:7e:74:
14:27:e6:85:8d:d1:55:98:56:07:bd:42:1f:be:b4:
cf:71:0c:62:73:78:dd:a9:71:ae:51:b3:38:6b:50:
02:9e:64:f1:4d:18:29:7d:1b:a4:f8:a5:92:c2:1f:
9e:41:25:22:98:83:f4:3c:be:88:7b:fe:25:6f:54:
e9:ef:4a:82:36:62:3d:d3:5a:d8:c4:34:15:12:00:
8d:13:a1:5c:58:bf:93:7b:1e:c3:89:52:71:8a:b7:
11:bf:64:ce:e1:67:ff:b7:b8:60:bf:c7:7c:6f:73:
54:e2:bd:b1:db:bb:72:5a:77:10:f6:2f:f9:8c:62:
05:f9:09:ec:9f:eb:77:e3:16:fd:b3:92:69:ca:28:
5f:89:86:6c:3a:0a:a4:7e:4c:c4:b9:01:5a:21:fe:
73:4f:5e:59:46:2c:69:63:56:4c:6d:1e:00:fd:77:
31:6b:93:df:b9:5e:92:4e:4f:07:4e:66:73:18:3d:
46:34:12:aa:00:cc:81:0c:b0:09:e9:cb:38:55:d2:
a2:51:f6:74:ef:c3:c0:a4:8b:ff:1e:b7:e0:37:d2:
99:65:b1:cb:c1:0a:d2:71:db:f6:1d:33:c5:4f:d1:
f4:6a:68:5e:53:76:cf:ad:4a:79:45:41:e9:c1:53:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:DE:A3:86:88:93:83:9F:8A:76:3A:6E:A1:15:06:D6:19:1A:B7
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:9a:27:20:b8:03:72:37:12:6f:4d:dc:d0:f3:5d:b6:5d:
a2:eb:32:f9:8d:1f:63:19:8a:cd:bc:6d:6b:40:b0:0f:50:2a:
23:52:5f:36:0d:22:26:50:6b:a6:bc:da:4f:3a:92:35:05:08:
45:13:6a:ef:aa:67:30:c7:69:9d:6a:0b:9d:08:99:17:7a:9a:
7a:15:8c:d1:95:87:54:e5:e7:65:f6:39:64:54:ef:47:7d:be:
06:8d:75:d7:31:d7:00:42:fe:99:12:38:f2:92:51:26:64:6b:
c2:d6:76:b9:6a:b5:37:2c:22:7d:96:e7:c4:b7:9f:50:2d:21:
bf:f9:b7:1d:d9:72:26:7f:b5:ce:3d:66:67:8b:91:dd:3a:6f:
f4:e0:71:0e:68:1e:c4:4b:f7:0f:6f:90:25:bb:09:db:d0:5d:
9d:92:b8:e8:69:ec:20:03:1b:08:12:cf:79:b3:59:b2:fb:d9:
79:71:44:b1:52:36:3e:18:ab:08:98:fa:67:52:d5:4d:f0:c4:
ba:39:46:ee:34:ee:1f:97:1c:13:39:6e:06:08:30:4f:49:d1:
fe:5a:3b:3a:4a:43:bf:25:c0:6a:17:e9:ea:eb:63:63:f4:42:
3b:51:a3:9f:95:3e:0d:d7:27:85:02:84:34:80:3d:b3:7a:67:
75:d2:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:27 2026 by rpki-client