Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: HN3DJdnMSYQKIKQvy7xAjujUycDJJRqNi8zcEn+sBcA=
Subject key identifier: AD:98:03:1D:48:61:8E:06:D9:0A:CB:30:90:EC:B6:47:2D:F6:1F:74
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019D265F66B33A5C507F6A6298FDC720D2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1591
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: E5pify1OXDiAsSHZ575A3rO94ME.roa (hash: j8qs/DidOZTlSj0X8OZwnqxIOGwaKtwZi2fTCHavq7Y=)
2: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: Hasf10vaYYmF/xiJ3o7BGdxAuXphnAldKwf4LJDydyc=)
3: K_L02ygxWP1iEq4feCmKwUc-f_I.roa (hash: 7BqwctA7sfIPSXcYea3BP+4rzmnGuO4NUJM5EyZPoUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:66:b3:3a:5c:50:7f:6a:62:98:fd:c7:20:d2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=ad98031d48618e06d90acb3090ecb6472df61f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:4d:3f:51:6f:91:46:70:83:db:c3:42:1d:
01:33:b1:be:41:81:6f:79:75:88:5a:e8:23:df:df:
42:12:fd:17:2b:29:73:c5:67:f6:45:5b:2f:27:04:
e7:4d:4c:60:a3:21:29:0c:12:d1:19:ee:9e:d5:a8:
7e:c7:00:ec:5d:67:ab:81:ce:a8:d6:bc:14:29:9e:
38:47:0a:93:a1:a7:65:03:e6:df:5e:a1:37:ef:e4:
b4:3b:95:2c:da:a2:19:c8:78:5d:cc:8e:4b:7c:10:
82:6c:90:d9:18:2a:3f:4b:23:53:38:78:fe:99:9b:
78:7d:a6:66:5f:64:97:bd:ee:44:1a:c0:e5:4e:25:
ec:6a:ea:11:cd:af:bd:15:cb:59:2d:84:0d:e4:0c:
9c:a2:17:ab:d1:0c:03:0e:7d:77:75:10:de:b0:89:
fc:6a:2a:60:e4:46:75:bf:fb:3d:c2:53:f7:ac:ea:
b7:84:6f:3b:fc:1e:31:12:af:b0:95:4f:66:74:ab:
19:4c:57:66:33:fa:07:4e:31:48:df:aa:c6:5e:5b:
ca:f7:05:19:2a:91:3d:04:ae:d2:aa:9e:90:6d:fa:
05:fa:38:12:21:eb:89:cf:ba:2c:6f:ff:7b:a6:19:
19:81:d4:d8:7a:b4:d8:f1:81:6d:97:93:05:27:d7:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:98:03:1D:48:61:8E:06:D9:0A:CB:30:90:EC:B6:47:2D:F6:1F:74
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e1:ff:2c:a5:29:96:d1:b5:33:1b:38:6f:e9:6b:58:d5:05:
1d:0e:d4:f4:f4:10:07:1e:ef:8c:fd:1e:3e:22:c7:77:9a:53:
b6:b3:8c:d1:2c:86:47:f3:88:9b:df:c5:3a:41:ba:71:84:85:
88:d6:46:5e:03:50:88:53:5c:b4:50:ab:67:9e:78:30:82:7b:
e0:45:5b:ac:65:f8:4a:e0:d8:6e:18:09:64:05:13:9a:bf:4f:
1c:62:c2:57:35:d6:85:6c:1e:00:42:7f:0c:85:40:ae:7f:9c:
ab:f6:7a:8a:6d:54:ef:ee:6a:9b:d4:52:57:9b:fd:ed:cb:44:
63:19:4c:03:81:ce:e0:35:8b:ba:43:2b:87:01:c8:ab:11:c2:
97:33:6c:26:0d:46:5a:12:19:d8:f9:2d:fa:b4:6f:32:81:4e:
06:09:2e:eb:19:16:88:19:c4:5a:8d:c8:72:aa:d7:21:fa:c4:
58:26:e7:ee:6a:19:08:fa:84:d1:6c:28:f5:4b:e1:f6:5e:9e:
61:ca:16:cb:64:83:11:62:7b:56:73:c8:fc:45:1f:47:ef:b5:
48:f6:49:90:cf:f6:80:ff:e4:75:99:86:04:82:2c:33:61:ef:
8e:bd:f0:f9:31:af:30:cf:c6:24:94:37:5f:62:69:ba:69:03:
bc:9f:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:00 2026 by rpki-client