Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: F4XcVOksWYEQb7YDP/TLLv5cSbMykRkm69sFWuKAcEs=
Subject key identifier: 12:29:55:DC:2A:90:9E:39:A8:5D:DA:25:51:81:72:7E:14:3E:60:F8
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 019D28F23C57531AE29104FDF50E83A930EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 0933
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: FL+JOLM68Yucv5z39IPCwBjQgSFY3HqiMb2zbJfBcaw=)
2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3c:57:53:1a:e2:91:04:fd:f5:0e:83:a9:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=122955dc2a909e39a85dda255181727e143e60f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:75:40:a1:d0:df:2a:65:9c:f0:5c:18:9e:
ac:05:36:52:74:83:4a:bf:31:45:bc:48:69:48:4d:
91:80:05:c2:e0:1b:02:28:50:01:1c:12:c2:c5:86:
16:d2:cd:8a:60:c9:cf:28:d7:23:64:19:e8:e8:d0:
6b:56:9a:26:2b:58:7b:88:69:57:c1:a8:b4:40:9d:
8e:66:5b:30:43:dc:4c:b7:d3:d6:0e:c2:78:d5:e6:
ff:be:51:67:1f:b2:f4:12:a8:ba:74:82:16:f4:8f:
5d:22:03:8d:dd:f3:cf:c1:c7:cd:a1:61:df:fb:b4:
02:c5:73:5a:e4:3d:2d:c6:20:74:dd:0b:7e:4c:fe:
88:48:b9:40:54:72:2c:db:a5:1f:9a:2a:b6:1e:c2:
8d:5f:b6:28:ff:64:82:0d:f8:e4:8b:77:3a:0f:69:
a5:ea:a4:d9:45:da:05:9c:81:df:7f:0f:4e:6b:6d:
c0:53:6e:c0:d8:cd:12:4e:e2:54:97:81:6a:20:19:
a3:bc:87:ef:b7:a0:de:b6:d2:96:5e:bc:67:ba:11:
72:5c:1b:e0:8b:b2:da:cc:53:d9:f5:0e:49:10:c4:
a8:99:8b:fe:39:fa:9e:cd:2b:c3:ab:71:b1:cb:22:
6d:cf:25:d9:b5:00:6a:68:de:41:04:6f:db:e2:fd:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:55:DC:2A:90:9E:39:A8:5D:DA:25:51:81:72:7E:14:3E:60:F8
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7d:ca:a4:a2:f5:72:ba:31:2a:24:6d:b1:f6:8a:d7:04:a9:
68:35:33:ae:61:01:cd:a3:12:24:3a:a5:d1:50:54:13:1e:e0:
9f:a8:3a:b7:4b:0a:0d:aa:af:05:89:e8:98:55:32:22:44:f3:
5c:db:c7:b9:cf:ae:05:e2:c2:11:44:6e:45:de:5b:d9:a7:43:
f7:7e:31:9f:67:02:b7:e2:d7:88:20:cc:58:85:fc:54:14:fe:
fd:e0:18:27:04:5e:de:da:7a:40:0a:08:91:b4:09:66:d6:59:
04:5b:17:06:0e:7a:36:3a:aa:65:04:6f:76:f5:4c:1b:58:9a:
8d:06:32:a3:a9:bd:26:31:52:5c:db:00:bd:f3:f1:2b:fa:5f:
2c:6e:b0:08:89:e3:cf:9d:b5:98:ef:14:ba:c3:2a:d8:91:42:
6b:42:a5:4f:bd:02:02:00:8c:ee:d8:3e:78:ea:e8:f0:9e:41:
04:b4:52:4c:a9:c5:ac:85:ec:af:18:86:09:ed:1a:ab:89:a0:
84:83:06:83:05:6f:f2:af:78:ed:c0:5b:5a:b8:20:a1:aa:41:
e4:69:19:72:5c:26:16:11:25:6d:3c:f5:ab:bb:a0:33:49:42:
c5:8e:27:e7:00:2c:0e:da:1d:e0:14:1b:22:ef:eb:0e:22:32:
49:13:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:04 2026 by rpki-client