Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: p9+Kru2qc7i4H09FYfQ1WyR1hyFiR5naQymjCkeSS1Y=
Subject key identifier: 39:46:5E:AF:35:B4:2A:67:B8:12:6F:A8:DC:69:A5:FA:D8:AB:C6:BF
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 019D27727C2152EFE6767C77AA955B6E9255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: ta3AlbjfeAd+Mc1HtlanFmxGGA6ExWamHrmjhXeBmco=)
2: mlmeKHgzR0zXxFAiFzl73dHZ8ZU.roa (hash: nKwteWJRWAw3fLsVxJDKYd9pER+Zuv6YOSfrbq4WvTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7c:21:52:ef:e6:76:7c:77:aa:95:5b:6e:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=39465eaf35b42a67b8126fa8dc69a5fad8abc6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:a9:0e:93:8e:88:c0:cc:8b:ad:0c:3d:6f:
99:62:3a:7e:bf:70:62:1b:3b:53:3f:ed:ed:e1:95:
56:6c:98:9e:68:d4:a8:b9:76:c5:f1:f0:cc:68:63:
47:f8:52:04:01:7c:21:c5:43:67:ed:de:e7:66:e8:
7e:b7:10:cb:9c:f5:8b:eb:48:65:a1:85:f9:69:a5:
5d:45:6e:3c:83:18:20:45:06:4d:4d:0d:3c:18:f0:
1e:5d:f9:f5:9e:ad:79:a9:b5:03:b3:9c:a2:d5:7e:
d5:21:9e:44:bd:c3:52:a6:2d:84:33:f1:d2:d9:24:
eb:7d:4a:ed:e5:16:00:f1:11:98:22:1e:d9:2a:f5:
7c:58:9c:4d:20:e8:9a:7a:a0:3b:30:0c:b8:dc:ed:
0f:35:ee:86:a2:5f:14:14:bb:58:23:e0:0a:1d:34:
4a:8b:33:44:3f:71:66:86:17:2b:d7:03:7f:4c:66:
65:c2:12:18:46:ac:91:73:cd:ce:92:b6:5c:b8:a2:
e8:7c:58:83:24:2b:eb:15:a8:e9:72:19:ec:a5:56:
65:20:4d:66:ec:30:e7:5f:2a:0b:f2:18:d2:fb:b7:
76:f2:15:7f:de:ea:9c:a2:b1:9d:6b:78:50:bd:82:
f4:f6:be:de:7d:bf:95:a8:39:82:a1:f8:97:c2:41:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:5E:AF:35:B4:2A:67:B8:12:6F:A8:DC:69:A5:FA:D8:AB:C6:BF
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:cc:7f:1d:02:5c:b1:a9:4d:1a:3f:f2:59:1d:b6:fb:62:
de:61:92:78:53:ec:00:90:0f:92:e5:61:97:a7:ad:76:9b:5c:
c7:d6:2b:ec:80:3f:84:d8:bc:a3:1e:76:8d:12:65:76:b4:11:
f3:7d:b7:09:7e:e9:1a:78:f2:d4:a5:44:85:be:3c:80:d1:4a:
c3:ea:d0:f1:17:2c:cc:d8:fd:2e:dc:48:9e:fd:1f:fc:c2:f7:
43:22:af:d3:c7:a6:2f:29:d3:06:8f:0f:a3:fa:72:48:fc:cc:
d8:8e:cf:e4:81:f6:fa:88:3f:e8:ab:ad:a1:87:0a:25:c6:8a:
bf:db:a4:bd:49:98:fd:99:4d:53:f9:7c:75:23:3f:bf:fd:ba:
00:33:54:c8:55:9b:9c:99:e3:53:64:da:45:dc:25:a8:fd:50:
a7:55:e9:af:a6:74:36:af:06:9a:88:e6:5b:2f:84:eb:f2:11:
74:3d:c9:d1:1a:f4:9d:7c:e4:62:c6:f5:4a:64:c6:66:27:e1:
fd:77:a1:03:40:04:be:14:a0:b5:d6:b2:a4:51:6c:30:d3:1f:
69:7b:29:0a:d6:42:5d:73:b9:89:e1:0b:bd:fc:e9:a4:d2:02:
c5:f0:80:4a:9f:13:fc:b9:fd:1b:dd:62:c0:71:ef:de:40:bb:
f3:3e:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:10 2026 by rpki-client