Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: cs0/KF16NA4Ly20F2smaOBDkMeXv4on5dzw8NKu6Xp8=
Subject key identifier: 07:22:E6:52:D2:45:3F:B7:FF:89:10:13:0F:35:AA:A8:97:25:4E:E4
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 019D26CDB16597C2BA779CB90385C4C3D886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:47 +0000
Manifest this update: Wed 25 Mar 2026 21:01:47 +0000
Manifest next update: Thu 26 Mar 2026 21:01:47 +0000
Files and hashes: 1: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: ixQH4lwLfyWldfhQzr/LE4vwRG8eZVDGUtGP/st4TNQ=)
2: REbjg5M_8wpI3i_HlGLahpeL73s.roa (hash: Wg9GMppGq5pv2FgNgfdIsx4UTmxfeIHOeiAi7ZSNSIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:b1:65:97:c2:ba:77:9c:b9:03:85:c4:c3:d8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: Mar 25 21:01:47 2026 GMT
Not After : Mar 26 21:01:47 2026 GMT
Subject: CN=0722e652d2453fb7ff8910130f35aaa897254ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:c5:43:52:36:54:02:f9:12:a9:5b:59:df:
92:71:c9:7d:50:97:69:3b:45:34:d1:a2:6a:d3:08:
db:d6:af:68:23:df:f0:3d:25:a3:1c:f3:df:74:38:
72:aa:89:f3:7e:74:49:e7:25:c3:ec:b4:1c:0c:cd:
5f:c6:b3:de:d3:4a:2c:28:80:80:09:dd:c9:94:90:
07:17:36:27:b4:84:40:7f:fe:6a:73:c7:44:6b:82:
1e:98:48:07:c0:bd:46:fb:2e:b7:20:8b:2b:9d:26:
ba:3c:77:d6:a0:cc:b9:16:25:ef:52:f2:e7:1c:c1:
7c:ee:02:ec:47:9b:00:02:ae:8f:64:57:2a:4e:c5:
79:03:a8:df:a7:84:b0:8f:17:fb:68:90:6f:4c:3d:
ca:5d:d7:68:ec:40:fc:81:33:65:97:e8:f2:5d:ff:
0c:51:76:1c:f4:78:89:bb:87:22:7b:23:80:9d:6d:
13:3c:18:d3:34:b7:d8:f7:21:87:a1:06:40:00:f8:
1a:c5:57:ba:9a:87:55:54:bd:24:f2:91:84:f8:04:
7d:2f:f5:ca:7d:db:61:41:a2:5a:b4:ad:c5:b0:80:
d5:c3:d2:3a:5d:d7:39:db:cf:83:58:86:95:93:b5:
86:85:67:1b:3a:55:c1:a1:ef:ef:24:a8:76:6c:a2:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:E6:52:D2:45:3F:B7:FF:89:10:13:0F:35:AA:A8:97:25:4E:E4
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:12:8f:58:b9:21:2f:eb:74:8e:c5:df:ec:7f:03:67:3c:43:
d0:e0:cb:01:5f:3a:f8:84:84:52:bd:1e:9d:c7:12:84:ec:8a:
be:25:52:96:b2:0b:7e:5c:12:d0:87:71:84:83:b9:85:e6:bb:
fe:85:fc:19:da:f1:ba:a6:34:c1:49:14:b0:85:f1:7a:66:a7:
de:35:f5:0b:f5:6f:37:1f:38:3d:aa:41:3f:db:15:93:89:95:
15:d1:80:0f:7b:86:1a:6b:4f:2f:6a:4d:42:90:9e:0f:b9:1b:
09:89:b7:8c:01:64:7f:a5:63:52:5c:3f:02:b7:25:48:18:1c:
35:3b:e0:3d:02:b2:e6:04:b7:e2:5e:f4:43:b4:7b:2e:91:19:
4b:3b:3f:62:fd:a5:3c:c3:b3:53:fd:e7:c5:df:50:62:d7:69:
7d:c1:70:3d:a6:15:e5:cc:72:e5:ed:26:68:31:3f:33:8f:d1:
17:0b:47:80:45:c0:39:67:0a:3f:9f:ea:7c:3f:34:d6:ca:3d:
c3:d8:0f:cc:ab:c7:85:69:bb:7c:44:48:0d:4a:98:08:5a:f5:
f1:df:74:ee:7a:dc:03:09:de:9d:d6:5b:7a:61:2a:3b:b9:e8:
2e:44:c8:e0:3e:3a:4d:43:0a:07:32:df:c5:2f:f7:91:c3:19:
d7:8b:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:47 2026 by rpki-client