Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: wYCQ2GQ9I481Qqm4nRXWBx82gM34OAxVXERKAf8IkrU=
Subject key identifier: CE:3E:7C:19:DB:55:4F:4D:3C:36:E6:0F:3E:2E:42:E2:AD:69:06:3D
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 019D26CD582DB31083AB8BCE55F4E4E26E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0F67
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: 6/4v3T/2t61CLncT4MFoiTsLvbBirPBLLimxOmHupZ0=)
2: YMTUEYkJa3jKyeDu_i_6QStTA5g.roa (hash: g07b6yHn7k+FhYN9YzkYgz6rNbHWKmMeHrpfp3BJpAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:58:2d:b3:10:83:ab:8b:ce:55:f4:e4:e2:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=ce3e7c19db554f4d3c36e60f3e2e42e2ad69063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:8d:b8:bc:32:c7:8c:db:3b:1a:7a:fa:c8:
70:2e:c1:24:37:0e:3f:51:b2:64:2a:1d:9d:0c:84:
71:0c:ba:9c:f1:21:6c:b6:3f:e7:ba:01:e7:53:44:
ce:09:5d:1a:c0:fa:2c:08:93:40:5c:bf:7b:3d:b0:
0d:81:f5:a9:62:49:83:41:2e:f7:57:38:ed:1a:56:
e3:6d:1d:4e:bf:a4:49:05:55:d5:28:da:bb:26:fd:
72:5d:4f:51:67:6e:82:a2:03:f1:6a:6c:10:f1:34:
6a:c8:1e:a2:82:46:10:6a:79:30:71:5e:8b:d1:8d:
a6:fd:80:08:03:ad:bc:b9:72:ac:35:07:d9:06:01:
50:2c:32:3e:41:86:24:dd:0a:96:08:e2:94:e0:ad:
c8:b1:9e:be:37:2b:7f:b4:95:dd:62:67:a7:2f:d7:
c1:1e:47:68:08:65:12:ca:a1:63:70:3a:01:68:d6:
08:38:8f:10:16:60:8b:82:70:4d:10:f8:95:ce:4a:
fb:82:4e:b4:a8:2d:60:ad:af:c8:20:f5:70:e6:99:
e7:3e:49:ef:28:d8:6a:9b:fe:16:13:4a:14:10:bb:
6d:f6:4a:d8:1f:8d:27:1a:bc:4c:a2:85:a8:d8:7a:
a9:a9:69:bc:f4:33:cc:fe:11:c0:fc:9f:0f:de:e8:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:7C:19:DB:55:4F:4D:3C:36:E6:0F:3E:2E:42:E2:AD:69:06:3D
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:21:c7:00:5d:18:cb:cc:2a:11:5c:f6:2b:b4:9a:6c:fc:27:
6c:46:f9:50:fb:e5:a4:b0:b4:62:04:32:81:24:b9:ad:c9:af:
09:2e:71:31:f6:62:11:c7:a1:5d:1b:d6:09:0e:89:e7:15:e5:
d6:68:fe:1e:c5:08:76:a5:2e:30:0d:13:b6:f7:41:32:e4:2b:
12:a9:33:df:9a:73:b1:c6:f1:39:8c:71:c7:ea:f9:c5:20:a7:
70:90:c4:11:ae:d8:ac:b0:cf:e0:b2:4e:64:22:dc:16:ed:21:
6e:cd:76:fb:f1:c0:f8:a1:9b:fb:85:2e:11:3f:1e:c2:30:4c:
3a:af:28:65:3e:ca:4d:f2:8b:03:63:c2:5b:5d:07:53:03:cd:
ec:51:3e:29:e2:2b:5c:3b:42:d0:b3:ea:d0:8f:e7:2f:e9:f1:
f5:ed:8c:81:ca:78:d7:ab:a1:a6:19:15:22:2c:c1:66:f2:a7:
64:ae:28:0b:37:69:22:72:6f:69:e0:f6:94:70:18:e5:29:60:
92:2b:15:65:72:c3:d4:18:fc:7b:ba:f4:37:7e:02:07:4e:32:
8c:69:d2:17:dd:4a:39:bd:92:2a:89:e5:dc:df:81:7a:bc:3f:
9f:41:06:3e:c9:53:31:27:27:85:44:9b:f4:6a:82:48:e5:0c:
86:75:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:39 2026 by rpki-client