Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
File: KvD7S5rcsuyisQbeCok5YVlszRg.mft (raw, json)
Hash identifier: ZP45v3dhfhWCEp/6T+wDp/vL8dp0XMP0uIVnufW3HkM=
Subject key identifier: 6B:1D:84:D0:E4:C4:02:EA:6F:71:C4:AC:59:5A:94:9C:F9:4C:18:25
Authority key identifier: 2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
Certificate issuer: /CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Certificate serial: 019D26CD2D46D59BDD3FC5950C6E8C3D53C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
Manifest number: 0F08
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: KvD7S5rcsuyisQbeCok5YVlszRg.crl (hash: 4j6Vkf1IXAwI28u/Q7sklT40X8r3pv4tSGZbSHTTVG4=)
2: aPwk9hg5767XU6t2ajLvzq4Ge5E.roa (hash: 4tuyOkWQ909LeFJPbpP41bXTWHmFhx85uNRIvKK/2Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2d:46:d5:9b:dd:3f:c5:95:0c:6e:8c:3d:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af0fb4b9adcb2eca2b106de0a893961596ccd18
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=6b1d84d0e4c402ea6f71c4ac595a949cf94c1825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:c5:f6:d9:e2:2c:ff:42:25:6a:28:74:bd:
2d:bb:05:f6:cf:b1:4f:02:9d:73:41:99:a5:2e:3b:
2f:28:96:3a:ed:a6:de:41:d3:6b:b2:a8:5c:af:e4:
e8:56:17:9f:bf:fb:c1:dc:bc:2a:46:44:f9:f1:37:
82:da:f8:99:77:d3:ca:8b:71:4b:f8:0b:0a:d6:44:
4f:2a:7f:c8:4b:24:c3:e7:f5:0b:55:c4:cd:b2:2c:
95:e4:31:4b:f4:ee:7e:41:a1:9f:41:29:bf:1d:7e:
3a:d3:29:00:4e:1b:b0:87:86:f7:7a:eb:80:f3:71:
ff:b2:67:1c:d4:55:5f:43:af:71:3b:5b:21:22:42:
93:ad:fd:a4:da:13:45:12:86:eb:ef:57:6c:49:69:
9f:04:be:c4:fc:ff:ca:62:8e:78:73:c2:f7:13:e4:
24:93:ba:ca:48:f6:af:a7:2e:f5:e6:a6:14:96:89:
01:e8:ee:2b:ee:7a:b7:85:c7:d2:7f:e3:a9:1f:40:
bd:75:ae:80:f8:47:76:4f:de:ec:4e:c9:06:b6:06:
45:45:c0:9d:82:22:57:46:d7:ed:95:6c:26:fc:77:
a4:d7:71:59:88:84:43:49:68:26:32:5c:1d:7b:f1:
d7:ce:8f:69:aa:26:2f:a0:85:9d:bf:af:42:13:61:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:84:D0:E4:C4:02:EA:6F:71:C4:AC:59:5A:94:9C:F9:4C:18:25
X509v3 Authority Key Identifier:
keyid:2A:F0:FB:4B:9A:DC:B2:EC:A2:B1:06:DE:0A:89:39:61:59:6C:CD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvD7S5rcsuyisQbeCok5YVlszRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2edf41-48e0-40ad-8e7c-5e954af1d80e/1/KvD7S5rcsuyisQbeCok5YVlszRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:21:5f:94:de:83:ee:74:ae:51:12:e4:97:cc:a6:ae:d5:8e:
ac:5c:81:a4:8d:4f:cb:ad:cd:f9:9e:77:17:40:d3:df:f9:c7:
62:9c:64:68:cc:a1:57:78:eb:65:ed:a7:07:96:0e:d5:34:dd:
a3:65:f1:8b:16:f7:d4:12:b4:c7:be:38:ba:78:42:12:3d:51:
ad:ee:3e:eb:71:eb:f3:95:8d:d7:3a:64:65:04:81:fb:29:1c:
7d:6f:b1:7b:18:86:45:ef:1f:f0:a6:09:5f:fd:55:c0:5c:24:
77:7e:8a:eb:d2:89:60:6b:f4:2f:f0:61:3e:20:27:ac:76:e7:
4f:b5:e6:0a:f0:9b:57:79:fb:a0:70:bd:ee:09:37:c7:e1:bf:
cd:af:71:c0:47:e7:6a:c5:9a:5d:77:a4:6e:15:df:5d:d4:93:
36:59:82:a2:b2:e1:8c:83:7c:80:f2:96:12:f3:c6:63:9a:44:
6d:3b:36:6c:0e:3c:56:9b:4b:a8:de:e5:d2:1e:62:a9:46:58:
8d:10:3f:f4:e7:bf:54:37:1f:cc:4f:43:b5:ae:d9:5f:bb:1b:
c9:f3:40:87:1b:81:af:c9:e0:39:f3:18:ce:7c:e8:59:c3:d7:
90:02:2e:f7:60:3a:4e:ff:6f:44:99:a5:67:95:ff:3b:31:f6:
19:c1:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:39 2026 by rpki-client