Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: 3EhPx+TFxDp1OlvUvnLdFSK143WrJy3Sf68gYy+gzSo=
Subject key identifier: 4D:2E:40:26:56:B0:CD:70:73:9D:EC:0E:B4:9B:D7:1F:C6:DD:FA:A7
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 019D277280E09C4E0FBCCB42976E447432B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: yM/3RQW3rxF+Tzp1wkB9XDsEbkH8LnPvzFd4qziSUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:80:e0:9c:4e:0f:bc:cb:42:97:6e:44:74:32:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=4d2e402656b0cd70739dec0eb49bd71fc6ddfaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:51:62:63:c3:6c:8f:3b:b1:35:2d:c7:15:
58:95:50:48:b2:91:20:a4:76:6b:55:4a:ad:91:88:
9e:cb:e4:5d:4e:5d:f7:c8:99:5f:f1:c4:eb:1e:68:
96:ca:65:c7:8f:0c:96:60:49:91:d1:e8:fd:af:48:
98:4e:91:6b:70:71:ff:1c:10:ef:3f:bb:88:4b:5d:
dd:ac:74:50:c2:e0:36:60:b3:d3:2e:8a:87:73:e6:
14:e8:d1:8e:47:a9:2e:c8:45:ea:18:a1:77:c7:01:
ec:b9:0b:40:31:df:3f:99:dd:eb:4a:90:07:da:40:
53:9a:9c:1d:ab:c7:cd:6e:ae:ce:f8:bd:25:43:00:
ee:a7:5c:c2:3a:78:9b:67:4d:2a:28:c1:c0:a0:41:
f0:71:ac:8b:ee:cb:10:70:9e:2a:8f:95:63:35:b7:
40:93:81:26:d3:34:69:90:12:c9:f6:a2:05:8d:a7:
63:02:24:57:fa:39:92:1e:77:49:90:36:12:9c:e5:
a5:37:a3:8b:5e:49:d1:ec:3a:c1:91:94:7d:b2:63:
b7:5d:37:66:01:b9:d2:16:63:81:ed:ff:a9:f3:6f:
22:43:bd:1e:48:ce:37:b4:34:3a:4a:5a:e1:5c:d7:
54:81:5e:87:57:99:80:63:f9:43:23:4f:bb:8f:f5:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:40:26:56:B0:CD:70:73:9D:EC:0E:B4:9B:D7:1F:C6:DD:FA:A7
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ee:f0:6e:04:cd:9f:06:2c:4d:ae:d9:25:43:1f:5d:a9:a3:
e1:22:2a:ff:90:47:7f:0b:61:40:12:73:f3:39:b4:bc:5e:c2:
69:b0:11:1a:82:00:5d:8d:e3:9f:4a:a9:5a:56:1e:9f:06:c0:
38:ec:e5:cd:5e:c8:21:b1:e2:f9:96:bb:13:ed:3c:e4:d3:93:
2f:ec:94:00:57:52:28:4b:e1:28:8e:39:fb:9a:b5:6f:4b:b2:
cc:ab:69:27:a4:43:89:25:33:a3:15:3a:fe:b8:df:b4:56:30:
97:3f:b1:39:52:e3:f0:fd:f3:ea:80:9c:75:35:ed:1c:69:36:
9b:2b:d8:ac:bd:58:a2:b5:41:28:a6:cf:b5:a9:49:41:82:67:
f6:a7:83:56:c9:98:6b:21:8d:da:bf:bd:33:e4:5d:80:05:b7:
0b:8b:c4:86:97:96:a3:09:fa:28:d0:b3:57:b2:2a:c1:2c:9a:
7e:89:95:dc:d6:3d:26:98:15:43:4c:25:c5:98:dd:cb:dc:3a:
01:16:a0:c2:61:45:d8:57:57:a7:9e:3b:04:cd:f3:54:97:98:
d4:9c:0e:fe:a1:4e:6e:61:2d:04:0f:93:60:ce:fb:db:e5:71:
50:6a:2b:6f:cc:96:8f:82:23:b2:db:a8:a8:80:71:0b:81:1e:
a8:15:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:23 2026 by rpki-client