Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: ++1L6ZMSRQfro4E84uRs0aglzIpPIT5yclSuj8hiuf0=
Subject key identifier: D4:FD:1D:52:8B:02:7C:A6:28:C2:C7:ED:C9:E0:5D:B0:74:EF:DA:86
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019D28BBB165A4AD0643D230EA3717FDF300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1313
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: CuAWHCUu9U1UQpRuMTvClpCRGZQoP+liQCH2XfVfXCQ=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b1:65:a4:ad:06:43:d2:30:ea:37:17:fd:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=d4fd1d528b027ca628c2c7edc9e05db074efda86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:f3:fa:d0:ff:00:fe:c0:37:f4:80:c5:b3:
d2:98:c8:a2:28:98:37:5f:5a:80:db:f2:c5:0d:6c:
66:f0:3f:bf:0d:d8:2b:b8:f4:ae:61:a9:2d:f0:e3:
7c:c1:5d:da:54:e3:99:0c:5d:b4:6f:c7:a5:0a:74:
54:b6:e2:fd:40:4c:74:a1:4e:3c:76:81:1a:17:52:
d7:2b:f9:62:07:81:29:19:8a:e1:84:a2:3a:be:ae:
cf:36:39:06:8c:65:cb:d3:95:08:48:1b:d2:09:90:
ed:83:e7:b9:43:3d:32:27:41:7b:e6:11:17:cb:96:
2c:74:61:64:0d:b5:b7:b4:45:14:e2:07:33:a4:dc:
b0:05:08:0f:95:94:13:54:1c:0e:b8:4f:12:b4:b9:
de:9e:dc:e9:72:0c:6a:de:e5:b1:fa:fd:1f:0a:2d:
bf:c0:5a:28:54:d5:34:b3:7f:2d:50:c4:6a:3f:e3:
1a:bb:e6:5f:50:86:72:f1:c1:d7:b2:cf:88:4a:c7:
3d:ad:b7:68:5f:5d:de:e6:27:23:ef:e6:09:12:73:
48:ae:68:e6:d8:80:52:6c:51:aa:61:d8:76:51:c9:
a9:fb:09:d0:4e:1f:85:6f:94:ef:46:1a:de:ce:ef:
eb:1b:29:ba:d4:48:57:cd:d7:8e:2c:c2:aa:1b:3e:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FD:1D:52:8B:02:7C:A6:28:C2:C7:ED:C9:E0:5D:B0:74:EF:DA:86
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:08:ea:10:cd:34:2e:d3:71:d3:61:73:c3:ad:67:73:dd:04:
85:a4:a2:d2:3c:1d:a7:da:87:75:29:0b:a5:e8:d5:db:35:23:
6e:47:f6:fd:7e:5a:56:9b:db:de:c0:19:d1:94:08:f2:27:2e:
dd:c5:49:4e:e5:30:bd:b7:3f:fc:36:fe:ae:78:0a:c9:a8:38:
e4:5b:8f:79:e2:db:e0:fb:d7:9e:01:6b:77:eb:d8:ef:2e:80:
18:fa:84:64:c0:45:76:80:35:26:32:fb:cb:89:f2:7d:e1:53:
3a:cf:b4:6a:25:bc:e9:43:dc:30:bc:88:91:e9:a6:3c:ea:3c:
93:66:a7:4f:9a:ac:8b:f3:bb:be:0c:20:8f:c9:6a:81:ce:5b:
c3:92:59:69:74:0e:40:3f:5b:d0:da:88:a4:87:bc:5f:27:da:
97:52:8b:5b:59:2a:c7:51:87:27:d6:9b:c5:91:5c:e4:c7:09:
9d:70:09:de:31:df:27:cc:ae:60:43:7f:35:28:ac:ea:52:cc:
f6:1f:36:3b:df:14:91:8d:41:24:15:ba:3a:59:80:5b:5c:95:
75:79:ed:31:13:ca:5f:37:a6:fb:45:b5:48:dc:dd:c1:c4:1f:
42:33:60:4b:aa:03:b8:79:04:d5:dd:ef:44:34:b8:0c:4f:aa:
04:00:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:36 2026 by rpki-client