Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: mFUmKPIY9UUBd+8mI0kDjtwT+OgUsdqfkmG4Re+UCBA=
Subject key identifier: F0:C9:69:E5:83:9D:C9:D4:ED:DE:F5:7F:5D:C3:CB:7A:27:8C:60:A4
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019D2772A7E1089B17E1CED39662ECDBD1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: U4pBalhrHTWBWe/Y34NNfuVNgBQ7qjcDz6ZlJQ2bv0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a7:e1:08:9b:17:e1:ce:d3:96:62:ec:db:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=f0c969e5839dc9d4eddef57f5dc3cb7a278c60a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:e0:51:44:7d:b1:86:06:1b:56:cd:44:1f:
88:b5:97:a7:dc:08:23:48:41:56:66:23:3c:e6:5a:
f5:82:7d:b6:ef:a9:2f:95:24:70:18:00:3a:48:e6:
94:57:d3:69:a8:19:88:16:cf:cf:96:fd:8b:c7:54:
e7:51:bb:50:87:f0:12:46:39:0c:79:c9:99:11:a5:
f2:9e:47:46:4f:c9:74:61:4f:3a:08:1f:4e:5c:1a:
5e:5a:80:1a:da:85:96:af:08:9e:d0:6b:d7:2a:23:
ab:3e:70:90:26:f3:ae:b0:ee:a7:7c:cc:4a:2c:11:
87:20:72:1c:df:31:83:f3:9d:7a:f5:fd:d4:7f:90:
a6:c6:f2:c9:84:ca:f8:f3:d0:8b:a8:f3:5b:eb:b4:
d5:3f:ce:e3:68:0c:da:f3:11:96:49:a5:69:b2:ce:
c0:a9:fe:ce:0b:85:3a:47:85:fb:bb:c5:58:ec:f8:
50:50:24:56:3f:a8:5d:ea:4e:98:aa:a5:a3:6d:d1:
d9:5d:05:37:66:e4:09:25:04:15:fe:0b:39:f9:5f:
9e:9b:3d:cd:db:27:cc:de:ca:64:92:3b:5b:48:8d:
02:01:56:db:3a:57:11:ab:5d:05:77:c5:eb:89:53:
e4:3b:54:a0:ce:b3:e9:9c:3f:b0:0a:80:17:e6:03:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:69:E5:83:9D:C9:D4:ED:DE:F5:7F:5D:C3:CB:7A:27:8C:60:A4
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:d3:ef:50:ef:30:a8:d5:96:49:66:60:7a:f8:1f:4d:a1:
cc:8a:fc:78:68:ff:ce:ea:7e:1e:c2:9c:e0:b4:67:34:82:0d:
ca:07:d5:22:59:9a:66:3a:5b:f6:6e:21:89:b9:9c:cd:2e:0f:
7e:84:d6:77:0b:fa:b0:42:f4:21:a8:7a:c2:d1:65:75:8c:2b:
39:ef:50:e6:9a:bc:de:83:b2:f0:49:88:0b:25:69:3a:c2:9b:
42:6c:10:f6:44:ce:d0:c4:11:6a:0b:ed:e7:5f:a0:e4:c2:6f:
f4:6d:c0:26:9c:f6:18:91:9b:39:1a:5d:f6:4d:92:9c:19:ae:
d9:5c:eb:e7:0b:a1:ea:46:ce:38:d6:8f:42:14:c6:5a:9f:af:
bc:d1:ab:9e:5d:49:85:d8:45:44:86:24:6f:41:2e:2a:c5:37:
14:e4:29:c7:b9:da:09:2b:92:97:55:67:a5:bc:c8:4c:30:f8:
16:83:4b:8b:db:1a:91:db:05:99:f9:7f:06:aa:2e:b1:15:ad:
62:35:7c:e1:19:45:ea:40:af:9c:c1:1c:09:b3:a0:7c:55:75:
c5:ad:5c:94:b4:72:8e:80:83:8b:31:34:54:1e:5d:a3:ab:9e:
1b:d7:3a:5c:19:fb:78:33:50:71:c4:b8:c1:f3:4f:55:af:f0:
76:82:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:17 2026 by rpki-client