Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: iQy2TB4jvbn/TvFR/J+bWK6LbwWxh6jopme5RPhIl54=
Subject key identifier: 7A:F1:A3:D0:9A:EC:B3:C1:B7:5F:03:17:8D:3E:40:C2:AE:56:91:7E
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 019D29977321B6BB3B0EF3DE8125D13E7BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: Kig3pOlK+pXZRooX3RHEY+9XLTo8HB1ms/1Bhg7Sroc=)
2: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (hash: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:73:21:b6:bb:3b:0e:f3:de:81:25:d1:3e:7b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=7af1a3d09aecb3c1b75f03178d3e40c2ae56917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:3a:e9:b4:fe:af:2c:38:6b:76:80:2e:36:
bf:2a:3d:a9:43:8f:ba:0b:83:c3:e9:80:f4:dc:7f:
fa:64:74:90:62:f4:df:20:be:25:10:04:ee:c7:a7:
25:46:41:c9:4c:c9:33:16:0d:74:a3:a1:78:38:1f:
33:12:1f:4f:93:0b:6b:5e:a5:c2:be:8b:41:93:a7:
63:08:85:4a:84:7e:15:92:53:0e:c6:84:f0:79:1b:
d7:c1:32:96:b5:61:2f:c8:90:1c:2b:77:c5:58:59:
08:f4:0a:84:47:6f:47:07:03:40:0b:8f:bd:8a:8d:
e6:d0:6c:ed:3a:52:38:03:44:e7:88:07:59:b8:f3:
8d:72:f2:0a:18:50:8e:81:9d:de:71:45:4f:f5:26:
db:dc:c1:4f:bc:7c:dc:dd:4a:15:1b:05:1d:33:fb:
d1:10:60:48:bd:d5:64:9b:31:0b:c6:4b:d1:0f:89:
29:26:76:af:35:a6:89:24:03:e8:fd:fc:de:23:43:
55:8a:5b:60:5b:81:79:94:6b:07:1d:18:8e:45:af:
f3:7a:47:b4:47:94:f9:65:05:38:1e:83:17:2d:9b:
22:71:01:3e:09:90:aa:c3:0f:76:ff:34:0a:8b:ce:
e9:90:c6:b8:68:57:0c:05:4b:6d:54:9c:f9:de:4e:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:A3:D0:9A:EC:B3:C1:B7:5F:03:17:8D:3E:40:C2:AE:56:91:7E
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:4f:6e:48:86:3d:29:c5:d6:16:c8:d5:20:d7:d3:8b:2f:
0a:ef:ef:58:cc:49:6f:b9:22:65:cb:62:8a:13:56:f9:14:2d:
aa:40:e3:f1:19:81:d1:41:6f:7b:a7:cf:28:a9:17:e2:5b:43:
ad:93:ff:fa:b7:22:1b:5b:82:15:83:7d:e4:0a:8d:50:54:43:
90:cf:04:eb:f5:7d:17:0f:af:da:3c:97:1c:33:f6:a9:03:a2:
d0:40:40:a0:a6:56:36:c4:1a:ee:6e:8c:26:d1:22:ca:03:68:
d8:69:1e:bf:07:d7:8e:ed:09:3f:14:45:05:76:cd:e7:b3:89:
ab:92:e6:8e:8d:e5:e8:4b:83:fe:9f:b4:b0:55:3a:01:ef:fe:
c5:b9:9b:ce:17:90:7e:2c:6c:51:39:af:3c:26:5c:7e:dc:de:
48:6b:1e:00:11:fc:03:0d:e0:84:dc:88:d9:09:7a:ed:09:de:
6b:2b:71:e5:2f:eb:0d:28:b2:3f:c2:6b:62:8b:a4:d3:82:01:
56:4d:c6:48:a6:23:16:d9:9f:aa:ab:f0:14:4c:ee:fd:7e:5e:
88:a2:53:f6:4e:b7:72:0a:b2:8f:57:7c:c1:53:3f:ad:60:ee:
3f:52:a3:df:c9:06:45:09:d8:42:b2:d1:88:9a:92:53:49:8b:
51:c7:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:30 2026 by rpki-client