Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: nKwDUup4zpgklmLzmisRZbKYMNFLTioQq/GOrhvIyfc=
Subject key identifier: 84:F9:12:C0:DD:B4:22:35:4A:E2:84:67:F3:CB:74:25:C1:D6:24:FA
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019D2996EC87136F26932D51F3AB56886E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: 3_teHZlqiyJL6OCe3l3tQgUazuw.roa (hash: LTM6e0OE0QUFBKrZfsSmWI5JalOFaXi6PGkxoB/+ybc=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: dyqUEFa4RZ5XBQE42uODeUSnvGyDXFHxK8ZV5+TPbfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ec:87:13:6f:26:93:2d:51:f3:ab:56:88:6e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=84f912c0ddb422354ae28467f3cb7425c1d624fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:e2:49:bd:bc:51:13:15:4f:01:b0:85:27:
81:79:9c:48:ef:af:da:63:c1:97:cf:f9:9b:da:34:
73:cc:51:b4:32:4e:39:db:eb:39:68:ef:28:0f:f1:
7f:4f:a4:f0:2b:cf:e6:2c:d8:0a:b9:ff:dd:27:a5:
12:2e:35:a4:2e:31:71:ce:40:37:b7:8a:41:35:17:
63:6e:73:9f:a8:ec:61:01:9e:04:23:02:b7:d4:d9:
c4:d4:5a:13:df:38:64:61:b5:36:77:e9:97:b4:ad:
92:ca:cb:52:06:64:23:6c:8c:1e:38:61:42:47:c0:
a9:2d:69:59:b4:b7:bd:50:39:0f:a6:88:0e:a6:b5:
68:63:59:13:47:81:35:8c:df:e6:2f:02:4b:06:1a:
25:0b:4a:59:62:0a:9c:40:9b:fa:82:7d:e3:75:a1:
48:f6:7d:1d:65:70:d8:65:db:2d:ca:51:ee:19:62:
17:18:d8:6b:6b:61:b3:ac:bc:94:a2:7e:25:0b:a0:
9a:9b:17:5b:9d:1f:20:2e:73:91:35:cd:ad:53:ad:
f5:9f:ec:1f:65:4c:d4:b6:7c:ff:cd:ce:6b:02:76:
96:6e:fd:9a:4f:47:68:90:31:1a:e6:aa:3c:f4:63:
84:a4:54:45:2f:3d:e0:f5:95:a2:10:cc:3c:d0:05:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F9:12:C0:DD:B4:22:35:4A:E2:84:67:F3:CB:74:25:C1:D6:24:FA
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a2:e8:92:32:73:75:d8:f0:51:95:a9:49:c5:ec:84:38:2b:
e0:22:60:90:96:8d:2b:f4:e2:07:37:ec:34:ad:70:c6:64:7d:
3c:79:73:ba:59:47:6d:c9:c1:4e:ac:71:82:65:0e:66:b0:43:
d9:a9:96:ba:63:7e:00:2c:29:68:c5:66:8c:47:14:02:f1:9b:
ab:38:0f:13:8f:5d:44:68:db:93:90:70:30:62:c0:2f:41:fb:
f6:3a:fc:9a:87:53:80:07:ba:0a:3a:70:99:e7:b5:86:02:a5:
48:f3:38:e1:32:86:a6:d5:00:02:8f:bf:c4:23:53:f0:61:d7:
8d:58:30:01:bd:c0:41:b8:cf:9b:7b:fa:c2:9f:c2:17:73:00:
31:43:b9:f8:fb:d3:7a:1f:71:c7:4c:31:83:5a:9b:0f:32:c0:
d0:b0:77:cb:7c:cf:a8:fe:25:c9:e4:cf:0e:8d:fa:2c:fb:e2:
0a:54:9d:3a:a4:a9:40:f7:cf:de:d1:cf:1d:0f:09:6b:27:c1:
08:48:e8:68:b4:6c:b9:9d:9a:5b:5a:b6:ed:82:bb:06:9e:2d:
7f:70:67:65:9e:ab:81:23:e5:ce:00:ca:74:e8:4b:31:4d:09:
a7:76:60:9b:cc:9f:1a:f4:a6:6d:d1:3e:49:5c:20:fd:f7:2a:
80:91:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:52 2026 by rpki-client