Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: hsKxWG5diPZDc64bDt3lwbPkA9c0S0PhEj1z95KY0xo=
Subject key identifier: 41:E3:9A:12:DA:3B:11:76:D4:DF:DA:A2:29:B8:16:00:BD:9F:48:38
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 019E20C8271DEAE08DCABD41B0B04037179F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 10:00:48 +0000
Manifest this update: Wed 13 May 2026 10:00:48 +0000
Manifest next update: Thu 14 May 2026 10:00:48 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: Jzp2ot/lJl0vrDPBg2GghCAN61wBN4DLuRL07c0V/zo=)
2: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (hash: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:27:1d:ea:e0:8d:ca:bd:41:b0:b0:40:37:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: May 13 10:00:48 2026 GMT
Not After : May 14 10:00:48 2026 GMT
Subject: CN=41e39a12da3b1176d4dfdaa229b81600bd9f4838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:56:47:9e:84:eb:37:20:25:4a:e6:50:70:
17:5c:d9:0a:ae:16:d6:8f:92:1b:1e:f9:04:5d:16:
29:26:37:af:cb:83:a1:10:79:43:b4:99:b0:89:71:
a8:6f:26:b9:69:4f:9a:6f:36:4b:77:c0:37:a5:ae:
6b:33:34:ac:26:ef:c4:eb:4d:c0:f3:02:4e:6c:e7:
51:04:47:1e:92:82:3c:6b:45:01:f0:d6:ed:af:96:
35:23:ac:6b:36:92:36:3d:03:48:65:c7:73:2f:2f:
01:74:c6:b2:8f:39:9a:8b:b4:00:b8:46:16:52:ef:
84:0f:07:f9:8d:4b:23:b2:7d:98:63:3b:56:14:27:
df:9d:29:f0:e0:96:3e:cc:8f:62:97:ff:69:a9:1f:
c3:a0:a0:3c:62:04:0a:29:94:df:1c:9d:1d:d7:49:
d7:7e:bb:55:2f:75:08:37:8f:0b:23:ad:b5:70:a8:
67:36:4f:2a:81:76:87:fe:c1:f8:91:27:94:5e:8f:
a6:7f:c2:84:39:3e:83:d1:89:6e:6a:ef:ef:04:27:
18:8f:6a:35:cb:3f:25:08:b9:01:f3:58:5d:b5:63:
71:b4:6d:56:0f:8e:84:08:41:39:6e:32:c3:3b:3a:
9e:be:0a:12:14:51:54:14:c1:2a:db:87:ba:fa:e3:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:9A:12:DA:3B:11:76:D4:DF:DA:A2:29:B8:16:00:BD:9F:48:38
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:f6:28:4c:7a:25:6e:fb:4f:a9:a3:6a:d7:30:38:70:00:
df:46:a9:df:6d:10:ad:ac:6e:8b:09:00:1c:39:cf:24:d7:ec:
06:11:a6:a9:57:1b:41:5d:0d:65:66:1c:00:4c:dd:3f:3a:55:
75:c5:d3:50:98:1e:43:c6:11:2d:d9:0e:cc:0c:04:16:39:d1:
3f:cc:94:fc:51:43:13:3c:da:42:f4:9b:27:b2:bc:c1:c0:ba:
7d:7f:78:b6:6b:ca:e1:8c:86:fa:55:b2:cc:2e:62:d7:25:ed:
de:f7:98:89:bf:d3:69:76:22:98:e9:1e:d9:d9:29:aa:7c:31:
ba:70:4b:e0:db:d5:c2:da:11:1d:3b:5e:94:71:a1:db:cf:76:
61:7d:42:7c:b1:2e:7e:9b:47:f2:46:31:34:45:d6:56:a3:72:
3b:b8:ca:28:ed:07:c2:bd:62:3f:20:2e:45:ac:9e:51:ae:ca:
62:28:e9:f0:cf:26:c1:f6:fb:fe:a1:2c:60:46:f8:48:d1:d6:
bd:ab:e7:12:d4:7e:8f:eb:bd:ac:11:40:a4:06:2a:8b:b4:51:
70:82:9a:9e:f9:28:b5:ca:c7:ca:de:ba:73:37:80:c7:6a:c0:
6a:4b:38:01:f3:c5:ae:a8:60:a0:f4:35:c0:01:63:ce:e7:21:
92:ea:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:15 2026 by rpki-client