Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: qz1aAvyf9gIuTuY+jiK1kY/7Eo07xx5+3JsSxv7Bmw8=
Subject key identifier: DD:10:E0:66:E2:95:54:3F:FD:C9:26:9F:94:AD:EA:D5:F1:F8:6E:42
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 019D29294792C312D5136843184EE62E5CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 0377
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: igP_j0gqdj6VYQfMBatyuvEtzjE.roa (hash: Cvo1yExlPO8Dsib93UiD0RmAn7lporXrd5tMSD8Uf7s=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: tezUgHHNLFsXRY/wRBzr9CWoV22fOh96o47+Sv+AuDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:47:92:c3:12:d5:13:68:43:18:4e:e6:2e:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=dd10e066e295543ffdc9269f94adead5f1f86e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:4d:8f:c2:28:53:af:ef:7d:2c:64:c4:1c:
91:27:00:74:b3:d3:ee:96:1c:54:c2:00:51:56:f8:
03:a2:9a:4f:15:90:8e:e5:5a:87:dc:9c:39:09:f6:
c0:77:0c:d6:a9:c8:ac:f5:65:4e:70:f7:6a:0c:9e:
f2:01:80:4b:53:56:37:34:8d:cb:8e:74:66:ac:42:
d6:40:18:ce:9f:61:65:78:bf:03:12:18:81:bd:f5:
8b:74:62:e7:97:27:65:de:d6:3c:0d:06:14:18:03:
51:16:81:54:ea:d7:eb:4c:d9:6b:57:f4:07:6b:84:
af:d7:1c:5c:32:6d:f0:28:1f:a3:fe:b8:a5:4c:56:
99:b6:c1:c9:5b:33:f9:a3:4c:c4:31:55:f5:17:4e:
e8:59:6e:44:32:41:8c:6d:b8:db:9b:e3:d4:2c:63:
48:57:68:1d:8f:e0:be:70:00:a0:89:a9:e0:6d:81:
0d:0b:f3:b4:a8:f8:11:14:f1:70:03:41:95:76:24:
4a:8b:e3:82:c7:37:35:d2:d9:ec:0c:df:02:8e:c6:
66:d3:52:5c:a0:74:b9:13:09:46:d4:41:7d:cc:d7:
9a:86:13:62:bf:46:f0:b8:d9:57:98:94:0f:2e:0b:
85:8c:61:bf:27:ee:6d:93:22:45:cf:47:da:aa:81:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:E0:66:E2:95:54:3F:FD:C9:26:9F:94:AD:EA:D5:F1:F8:6E:42
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:30:ff:2a:9e:73:48:79:58:bf:47:ac:54:1d:3b:68:4f:
c2:7d:21:d6:6a:55:d3:97:5b:9a:c5:68:dd:d7:0b:39:36:f2:
b2:38:8b:4a:8a:b4:f5:34:77:5c:b8:d2:4c:af:cc:50:d7:56:
11:b6:71:61:81:08:89:38:99:7a:8c:58:b9:4f:36:81:f1:4d:
65:23:2b:90:8a:df:50:73:1f:cb:68:1b:5f:0e:24:92:27:c4:
79:fd:5c:82:e6:7c:8a:3e:b3:d0:62:cc:33:72:f7:10:5d:5e:
bc:13:0f:9e:b0:41:37:ae:5f:58:ac:59:fe:5d:4f:4f:14:7a:
08:7f:29:6c:38:2f:8a:fb:ee:db:1c:b4:86:f2:c3:5c:bd:36:
53:9a:1d:66:8a:38:48:c3:43:28:97:c5:00:d2:df:c3:d7:15:
c0:11:42:6c:16:d3:44:c9:bf:81:aa:44:e5:2a:00:99:96:cd:
cd:7c:63:57:f8:b9:23:59:d0:9b:01:b9:28:32:32:a8:c6:0c:
d0:6b:43:78:f6:b9:b0:3e:e0:cb:b6:fa:a1:58:0f:42:da:f5:
a2:a7:c0:66:a2:10:bc:54:cc:27:20:d6:4e:9c:32:7c:6e:b3:
1e:8e:f6:11:7a:4a:58:32:1b:3e:f2:e2:b6:fc:1b:b7:60:23:
08:18:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:12:01 2026 by rpki-client