Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: +dcFVzp7zoQTBOJWK8YKocoAulxRgcABejjOuxmML6A=
Subject key identifier: DF:F5:C3:0B:C0:EC:BB:CE:04:86:CE:8A:0F:C3:97:A6:5F:FE:62:2B
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 019D29293FAA9556CEADBBC937A9D68C74EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 0C25
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: 96d6ctMX_g4ONOX-V119IuFLbcQ.roa (hash: p56ITbnJXhBydcF7z+SEtTfhLoTMh1wjVprKGq7AA5g=)
2: IQ8FAOOJByrHSMChSBlZ88iHvt0.roa (hash: lJpaXIYxGHP0owQ3ZjIzWZPx1+jN3QXVVl27UeQeST0=)
3: kELVwZs5SaLQrab9sap9Xcmgflk.roa (hash: gOv2sEEdNVSjrYd0iMOFCkOEFxapFPoF2zX1OSgF1Vc=)
4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: 2cINRKfeLgfhtnvs0mHhDfMzo8YzDhKPXa2xCWEinUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3f:aa:95:56:ce:ad:bb:c9:37:a9:d6:8c:74:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=dff5c30bc0ecbbce0486ce8a0fc397a65ffe622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:1f:81:2d:f0:b7:8c:7d:44:ea:94:41:d9:
3c:1a:a4:de:08:c8:6c:c1:5c:ef:62:35:67:55:c3:
9c:ce:f3:91:88:eb:0c:30:6e:c5:4a:b3:e8:b8:57:
9f:3e:9d:79:b6:04:36:f4:f9:95:4f:d7:87:5f:b4:
ef:85:b4:9a:95:ea:38:b2:69:d5:88:f4:33:e3:12:
10:8c:f8:2c:ec:52:1e:f3:90:04:5f:1f:14:9f:4d:
d0:db:8a:db:ba:9a:85:fd:b0:c3:35:95:de:cb:be:
85:6c:ee:94:86:bb:8c:ce:63:66:93:ba:54:a5:a7:
f7:9a:cd:24:59:5c:ef:04:0e:33:9e:fb:aa:34:a2:
b2:ee:fc:f1:46:67:a1:a6:03:82:33:1b:0c:37:a8:
20:75:9e:f0:17:ba:0a:9d:ec:c2:a3:b4:6c:c9:46:
70:0a:8c:2d:0c:db:d0:96:5c:4a:67:89:8e:e9:c3:
45:01:41:e0:b3:2a:1e:2a:2c:fd:85:fc:22:e1:73:
07:f3:33:f6:6e:fa:79:c1:df:0a:1b:10:59:b6:51:
47:7d:22:7c:f3:a4:3b:c3:a0:10:bb:48:0d:d4:45:
6d:c6:f9:98:d5:31:65:08:b6:28:11:9b:80:b9:0e:
3b:6b:7c:ad:0a:b2:a3:7a:30:02:f4:04:7e:03:fd:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:C3:0B:C0:EC:BB:CE:04:86:CE:8A:0F:C3:97:A6:5F:FE:62:2B
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ec:64:68:f8:74:90:94:6f:79:de:7d:d5:8d:89:ce:d1:09:
16:00:4b:a1:10:c4:8b:17:98:85:9c:88:40:84:4a:50:58:4f:
ad:88:e6:fb:32:12:fc:c8:2f:87:60:0b:f6:04:40:2b:be:40:
71:20:9c:42:97:84:cf:c9:b1:f3:90:68:85:46:1b:3e:2d:76:
0b:73:e4:6e:9e:c8:c8:76:e1:a5:95:2b:b6:92:d2:c2:84:5c:
83:4b:50:da:d7:3a:1c:10:0f:f4:e8:b2:a0:16:76:fe:a5:fe:
2c:28:fc:d2:31:7c:4b:08:58:d0:8b:1d:f9:ba:3e:c2:c3:55:
e6:c4:4e:e1:fe:b9:46:7c:44:c6:41:79:e4:32:60:bc:c1:87:
a3:b9:20:97:92:0d:ee:1a:4c:0d:1e:48:e0:c1:b5:cc:3d:f2:
18:7a:78:35:6f:af:7e:b0:40:25:a4:af:9f:ac:aa:ca:5a:fa:
9c:3a:01:19:df:28:bd:73:0a:e1:ea:2d:d3:f4:72:45:4e:3c:
fe:fe:0b:41:2a:24:54:f2:bb:f7:35:6f:d7:2c:ab:26:dc:97:
a5:cf:5f:f1:d8:f7:c4:22:01:e2:f7:fc:ce:8e:f5:a7:66:93:
28:ad:b7:86:0d:6b:df:52:ad:65:41:8f:d1:b8:10:b9:49:8e:
fc:14:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:51 2026 by rpki-client