Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.mft
File: KuHXizgSIs2I12qOk8RLujyACKI.mft (raw, json)
Hash identifier: grSnFeKCfv283giBqXe+cBOyOFF5RDEIG61fzSax4Qs=
Subject key identifier: 47:D5:97:EE:3B:86:A9:98:41:00:C7:4F:71:04:3F:D1:BE:49:02:A4
Authority key identifier: 2A:E1:D7:8B:38:12:22:CD:88:D7:6A:8E:93:C4:4B:BA:3C:80:08:A2
Certificate issuer: /CN=2ae1d78b381222cd88d76a8e93c44bba3c8008a2
Certificate serial: 019D27A91A3FEE63222821F0B58ADCBBF6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuHXizgSIs2I12qOk8RLujyACKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.mft
Manifest number: 0167
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: KuHXizgSIs2I12qOk8RLujyACKI.crl (hash: s0ECI778b0jDbLOl0/1nHdhddMCc5IEWKj0y+BQJkoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuHXizgSIs2I12qOk8RLujyACKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1a:3f:ee:63:22:28:21:f0:b5:8a:dc:bb:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae1d78b381222cd88d76a8e93c44bba3c8008a2
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=47d597ee3b86a9984100c74f71043fd1be4902a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:49:e2:3f:82:35:e2:69:28:66:33:6b:1f:
d3:19:e2:9e:42:75:af:65:ba:52:09:13:49:93:e2:
be:56:17:f4:ad:3b:00:c1:81:77:e4:2c:51:5b:34:
dd:eb:68:e6:df:df:48:fa:a9:6e:7e:c2:3f:3c:c3:
97:78:48:22:fd:d1:bd:e9:02:3c:4a:9d:9c:6d:29:
51:47:bd:81:fc:96:e0:b2:55:a4:e5:cf:72:3d:73:
ba:27:9c:b4:6f:17:3d:b6:75:b6:29:bd:2f:57:df:
d2:1e:9f:01:32:30:91:5e:b5:bb:82:8a:fd:31:59:
9b:1f:e4:4e:f2:f2:6e:ee:3f:ab:7b:4e:36:e7:ed:
3e:f9:81:6e:c7:c9:62:32:d9:f9:3b:76:a2:e9:f0:
68:dc:d2:88:4e:50:32:d6:ae:eb:34:56:14:db:b6:
3b:6d:0c:d5:09:29:b3:38:93:7a:b3:13:dd:80:9d:
d2:00:b9:c7:9e:42:8e:4b:af:33:06:60:e3:74:2f:
6e:4f:c6:13:8e:b2:35:aa:ee:f1:b2:ec:e2:7d:24:
d7:3c:ae:45:67:98:39:af:8f:4f:f5:7f:33:0c:b9:
a3:a3:c6:53:24:df:31:54:ac:24:fa:c8:d3:ec:68:
e9:87:5c:98:a8:11:c1:b5:76:9d:33:0f:0b:07:4f:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:97:EE:3B:86:A9:98:41:00:C7:4F:71:04:3F:D1:BE:49:02:A4
X509v3 Authority Key Identifier:
keyid:2A:E1:D7:8B:38:12:22:CD:88:D7:6A:8E:93:C4:4B:BA:3C:80:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuHXizgSIs2I12qOk8RLujyACKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f4:f6:98:54:0b:34:fd:e4:87:90:a7:20:b7:b6:29:10:08:
5a:60:49:64:6d:fd:7c:52:a0:70:e0:d6:1d:47:fa:59:3e:6e:
3a:c2:7b:64:16:d8:4d:11:76:d2:72:a4:35:fe:22:6e:6d:a3:
bc:7e:a6:6c:0f:bf:45:1f:b6:aa:be:cf:47:f5:f2:94:63:db:
8e:32:94:f7:03:53:80:a7:46:b5:37:3c:df:f6:86:e9:df:7b:
01:58:48:7c:d1:67:d8:25:62:e6:82:d8:fd:30:b0:c0:4d:05:
c2:1b:6e:53:60:87:2a:75:f3:f5:83:69:dc:ec:98:fe:fb:9a:
6f:b0:d1:ce:99:04:92:6b:ee:59:9a:98:8d:8a:19:76:16:ab:
1c:27:e3:03:e6:76:37:a8:8f:16:11:cb:4a:ef:00:d3:dd:d2:
55:70:fa:70:1d:62:b8:be:54:75:de:67:b0:9e:bd:ca:61:0f:
45:12:3b:32:5e:02:99:75:de:b5:3f:99:2e:22:13:37:bf:24:
9f:7f:51:67:bf:f2:70:1c:ed:43:42:67:f1:f1:82:53:4c:13:
a9:9f:d4:54:88:ed:b5:bc:5f:be:20:76:3a:04:95:cc:0e:61:
6b:cf:5b:8a:d5:df:b6:b4:f9:ee:bb:18:83:77:ce:e3:ad:26:
63:68:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:47 2026 by rpki-client