Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: hbnc/Ly9px9i4CIjjPwdkhxNdxMY8jbgJubqUuvkztI=
Subject key identifier: 50:BB:0B:0E:D1:54:0D:73:61:8E:4D:65:95:15:29:B4:E1:5F:80:93
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 019D284D30743EC74014B863AF8DD39A5701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: YGDg6mzyUbuECc/1Z77dPB+2WDCjCzJn01Q2Sr7UsHQ=)
2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=)
3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:30:74:3e:c7:40:14:b8:63:af:8d:d3:9a:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=50bb0b0ed1540d73618e4d65951529b4e15f8093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:02:d7:96:fc:c9:b3:25:71:16:e6:2b:8b:
22:17:78:12:f3:32:32:90:0d:f1:d9:2a:f6:a4:a1:
ef:a7:fa:37:94:c4:21:4d:a7:82:d1:2f:29:ea:25:
23:09:12:8d:eb:fb:d9:7d:4b:76:35:a6:0f:f5:9a:
bb:fe:b4:ad:0b:66:9e:84:a5:ca:ba:a0:c4:5a:e2:
6a:86:37:bb:85:33:8e:e2:68:8f:e4:ae:d2:f3:4f:
e5:7a:d3:b9:ac:16:30:7f:96:bc:0f:dc:10:e4:73:
2e:ec:79:09:14:65:ea:5b:45:75:dc:49:4e:cf:cf:
ed:f5:6f:7c:ba:25:92:d2:37:f8:fe:55:a6:05:95:
4e:36:07:5f:95:4e:5b:2d:69:2e:4e:3d:bb:94:61:
6d:7b:b1:40:92:11:51:32:4b:6d:8d:00:0d:13:74:
71:01:43:83:52:4d:46:e4:1d:7c:51:f3:84:fc:68:
9d:54:b8:7b:98:b5:66:ad:82:c6:39:26:ca:50:7f:
eb:c6:88:bd:ac:95:fe:57:92:dd:a6:b9:31:a1:6b:
bb:47:50:5a:c3:a2:40:eb:8a:8b:ef:a6:ce:82:48:
b0:09:4f:53:57:7a:88:03:bc:ee:4d:03:55:ac:d6:
e9:b4:f8:c8:da:2f:4a:5e:51:75:10:6b:a0:9c:ae:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:0B:0E:D1:54:0D:73:61:8E:4D:65:95:15:29:B4:E1:5F:80:93
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:4c:6b:58:56:98:51:bc:2d:b9:22:3a:cc:47:ad:f3:96:
83:51:b7:8f:4e:69:77:9b:2d:be:10:44:4f:10:8d:da:38:e6:
bb:d7:cd:55:c7:7d:27:d3:9f:12:ea:91:4d:1b:64:da:08:4b:
33:5d:b1:b1:bf:51:5d:92:92:51:7d:5f:ec:13:1c:8e:d7:d7:
0c:69:86:75:32:ee:5a:bd:06:70:4e:93:5d:0b:a7:3c:a7:9c:
bb:4b:27:ba:d5:57:22:a0:22:d1:79:bd:ac:10:24:f0:f0:bb:
8c:55:13:c4:be:e0:ed:aa:a0:c9:27:67:9f:28:29:d5:57:c9:
da:9f:58:7d:bb:a3:1f:1e:71:dd:03:12:c5:41:b2:9a:05:3f:
2e:8f:90:ce:12:64:52:a7:d5:db:83:1d:01:ef:af:6b:74:f9:
a1:22:c3:f5:be:72:81:0f:d5:88:ca:07:03:82:7b:ba:ee:48:
ac:e8:b5:8a:63:86:2a:04:3a:42:cc:6e:6e:8b:63:36:b5:78:
9f:6f:8d:1f:b8:fd:dd:0e:9b:41:5c:22:9f:d1:b3:da:86:7f:
cf:ec:6d:d3:4b:a8:a0:2e:b6:c7:0e:2b:83:f2:24:1c:f8:1b:
a5:ff:e8:39:f6:43:5b:2a:a7:cc:4a:b8:f8:91:29:00:e9:32:
c9:ca:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:48 2026 by rpki-client