Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: AzkJ2c2vkdqNUyIN/cwoLx2cAV1W4XB2OtaMIsDfojA=
Subject key identifier: 83:9A:EE:32:63:8B:71:3B:F2:84:A8:46:33:52:41:D3:EE:EF:06:B2
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 019D2703A72275D9230ECE388310336929AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 1182
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: vZrfssEBg6uhQx2yCU6BJkprOXmAV8Obr20N0PKCSh8=)
2: T3EGh-bdCIIZhG5HJojpnlqKL2c.roa (hash: bufDKb7bJ5Yg3D29mO4Y90yES19oPGAgCv9pA/tjktA=)
3: iUyBvay1HB04jjUCqmLzofikeiI.roa (hash: YQOqKVVvW96raR8LDZq/96IB++aevKxnzXinzAloqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a7:22:75:d9:23:0e:ce:38:83:10:33:69:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=839aee32638b713bf284a846335241d3eeef06b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:b3:e9:56:91:c8:1d:e6:23:b3:e0:46:81:
d5:89:0a:61:34:55:c4:88:34:52:ff:cf:8e:2b:68:
80:ae:84:ab:7d:b7:54:ec:5e:b8:14:87:13:e1:f0:
c8:ef:98:40:5e:6c:dd:c2:89:b7:fc:c6:0d:6d:ef:
7e:4a:19:3f:4b:06:bb:42:44:e4:a7:7b:54:1f:2b:
e8:c6:e0:80:c6:a1:3b:0b:74:21:0e:f9:bc:dd:1b:
32:26:b1:a9:46:ea:af:6a:46:14:df:ce:aa:1f:fa:
2a:0d:cc:3f:6b:c6:55:d7:ea:50:20:82:f3:89:ad:
97:a8:2b:1a:ab:f0:5d:79:55:05:ab:64:7f:54:6e:
9d:34:89:c4:02:0b:00:4c:04:03:c9:b9:1c:69:8b:
29:df:12:6f:fb:d6:42:f1:67:cb:c9:7d:9c:63:46:
c8:59:a2:26:a5:e5:3f:6d:3a:10:ed:66:8f:bf:e6:
bc:4e:86:8a:87:7b:6a:0c:5f:d5:7e:79:ca:11:d5:
56:07:90:62:9c:ef:db:47:0d:8f:8f:00:b8:9d:41:
7c:87:ec:e6:ee:20:34:a4:d8:5c:e8:6c:3f:83:88:
52:59:86:56:45:de:56:d3:d0:89:19:a3:9f:21:f3:
bd:c7:04:d4:35:dd:b3:c2:96:ae:a5:69:03:a0:d3:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:EE:32:63:8B:71:3B:F2:84:A8:46:33:52:41:D3:EE:EF:06:B2
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5b:4c:42:f9:67:3a:6f:d8:d4:91:d3:7f:56:64:3e:80:60:
50:cb:45:26:50:17:7e:39:a5:1c:fd:50:8f:17:ab:87:a2:2d:
5a:0d:3b:eb:f0:65:68:00:4e:40:dc:f7:0d:78:6a:57:53:ef:
72:a0:e2:58:88:ba:58:39:f5:8a:db:75:67:1a:00:5b:a1:6c:
de:b1:ae:2e:42:8d:9e:bb:8f:0d:fa:ae:ba:ca:93:19:22:b7:
df:c2:b2:9a:8a:fd:3f:7b:1f:aa:de:5a:1b:a4:43:1e:10:b7:
a7:64:62:7c:f0:e5:c9:09:ab:25:90:2f:87:1a:af:a1:90:49:
e7:b2:c5:71:21:80:10:c5:4b:ff:c1:c0:4d:b5:c1:45:a7:83:
a6:0d:09:14:e3:73:4f:41:d5:ff:43:5e:4d:de:76:cf:49:09:
5c:11:c1:f8:c7:28:af:4e:0d:c8:ba:9e:fe:f6:e2:07:c3:46:
3c:c2:3c:c2:ae:e8:53:91:bd:5b:ac:23:ae:ce:5b:3c:93:e0:
6a:13:3c:d1:d4:5f:16:2b:9f:bb:60:7c:b1:4e:cb:e2:2d:28:
00:03:ba:1c:29:2f:1a:40:90:aa:60:bf:f9:80:f2:e7:57:76:
b3:a0:00:0b:7a:c0:2a:ad:99:7d:d5:30:6d:91:4f:79:3b:83:
b6:38:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:13 2026 by rpki-client