Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier: k3HP/B+CAweDT2C84orWsWHWLdK5TOYKQfpBRxMnOZg=
Subject key identifier: 1A:6A:A8:DE:C7:81:F8:18:29:CD:03:9E:2F:F8:49:79:7B:2B:F5:C5
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 019D27E0714F2764D112E73AE994640A586B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number: 0E23
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: M9VnT8gMiCOn/k0oBo0jp7EvrcEwB18wjev2z8l1/ho=)
2: oFrdrnyW8tV0-krY3waUROhvwWw.roa (hash: QeN2HanlQ0AK3izov4uywvu+l/5m1PgafcG6RGWrge0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:71:4f:27:64:d1:12:e7:3a:e9:94:64:0a:58:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=1a6aa8dec781f81829cd039e2ff849797b2bf5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:c5:b6:21:a7:b8:f9:93:24:54:0a:0b:1b:
5e:7c:9d:87:2a:49:83:9f:36:f0:b9:77:d3:b0:7d:
ee:7b:8e:ad:52:e5:59:8b:ad:a4:13:a0:04:82:e2:
bd:e9:96:57:65:4f:f0:75:7d:79:fc:48:54:2f:fe:
5d:fa:5a:4f:66:92:8d:76:9c:8d:8c:be:14:c8:e1:
6c:b4:cf:f6:bb:3b:bd:65:b1:7a:99:4a:cc:57:6c:
fa:4e:2e:bd:08:3c:fa:ed:8b:b3:ed:81:3d:43:1c:
4a:d4:5a:16:95:d3:71:85:51:36:64:1a:c0:fd:7b:
a8:04:e2:9f:0e:4b:46:6a:53:fe:e0:9e:6d:fa:e8:
29:f3:b1:3b:34:95:92:55:50:2b:ee:34:bb:d4:c2:
ea:64:0c:02:9b:e3:77:73:dc:d7:10:8a:10:ed:22:
05:51:9d:71:cd:78:24:15:60:9b:d3:34:86:33:25:
1d:f4:15:c5:1b:e2:e9:58:3e:65:d5:f1:b8:61:0d:
43:41:28:4f:a7:e9:c7:98:f3:5a:dd:ca:06:b1:e5:
c0:a5:31:1e:c2:55:49:c0:75:0b:9c:26:01:1e:87:
03:69:ae:c0:2b:e3:07:b6:03:8f:fb:b8:f3:4b:a2:
73:fd:90:09:83:07:47:d3:1f:83:26:95:04:b2:bf:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:A8:DE:C7:81:F8:18:29:CD:03:9E:2F:F8:49:79:7B:2B:F5:C5
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d8:57:40:12:d3:dd:bf:67:64:74:ab:d5:78:61:f8:25:87:
e0:a9:e2:b6:81:fe:ee:43:c3:22:6a:80:4e:d0:fe:96:0e:e0:
09:58:06:af:38:7a:26:8c:74:22:74:66:dd:c6:0b:b5:d2:34:
cf:6e:2c:58:9c:c4:67:cc:e9:63:ad:be:40:03:50:f4:cf:c4:
d5:e0:33:b9:6b:dd:98:ed:fe:f2:c0:a2:40:1f:cf:50:5f:51:
6e:41:99:f6:e2:9f:8d:df:11:c5:d3:27:6d:5f:67:41:42:4d:
2a:74:31:51:43:86:9b:16:3a:fd:c1:40:dc:ad:75:a1:f3:23:
06:bb:56:39:b9:6b:68:27:71:43:85:ab:05:4b:8b:b5:95:4e:
ae:05:e6:32:16:72:86:88:56:b8:be:1b:e9:d4:f5:92:78:34:
30:38:46:87:19:4f:63:59:93:69:9d:0f:b5:d0:53:3a:12:5e:
7f:26:b8:50:64:20:f9:e1:a5:83:08:5a:3a:f4:ff:62:1c:10:
4b:9b:00:69:d2:a8:92:57:ea:ed:52:c6:3e:38:73:15:8d:e0:
d4:ff:1c:87:d0:df:b5:f1:30:c8:7e:72:91:98:09:f9:37:f1:
9a:42:06:8f:cf:12:20:2a:de:2a:3f:2a:0e:c3:70:bb:00:68:
4d:e8:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:03 2026 by rpki-client