Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: IeLmnkx6ITOu4SJTcX0NsL+lFs6hbFUAMivHKItI8JM=
Subject key identifier: 07:53:8D:A4:B7:73:F9:38:4B:F4:3A:AF:9D:56:D1:C9:EF:B6:AD:12
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 019D29297DBC866445726A831E77B6C5FC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 104E
Signing time: Thu 26 Mar 2026 08:01:18 +0000
Manifest this update: Thu 26 Mar 2026 08:01:18 +0000
Manifest next update: Fri 27 Mar 2026 08:01:18 +0000
Files and hashes: 1: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: jFgLr72utVY7qSBKjJgV7hRxoY0aE/5ZlDhecvvhhZs=)
2: _RQ9AgpzbtjvCvSTOEXzCFEJtR8.roa (hash: aJfuUxa/NB5W0qWEQXL6FUBdUFdykGIx4w5mKdTX4Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7d:bc:86:64:45:72:6a:83:1e:77:b6:c5:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Mar 26 08:01:18 2026 GMT
Not After : Mar 27 08:01:18 2026 GMT
Subject: CN=07538da4b773f9384bf43aaf9d56d1c9efb6ad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:b4:18:a9:31:56:13:66:26:d5:10:c0:6b:
4a:b0:c6:a9:86:4d:2d:62:94:fe:8a:42:40:85:b2:
72:9f:de:75:ea:6b:b3:d2:89:60:21:1b:6c:3b:4a:
0e:62:32:72:ef:90:4b:90:f1:88:25:bb:f6:24:95:
6a:14:91:76:9f:29:a7:dd:98:b8:37:13:2d:05:28:
71:10:ab:66:c0:0f:f5:71:d6:2b:65:28:59:f9:5c:
a6:9e:72:d7:9a:2d:31:8c:4e:7b:9b:f6:63:27:5c:
1c:74:23:26:8d:ba:45:00:f9:83:6d:1f:bf:a3:af:
26:14:fe:b6:69:b9:59:8f:3d:cb:80:6e:dd:24:f4:
0e:b3:58:5a:26:56:90:ce:5a:27:bf:e8:0b:4c:77:
a8:c1:98:8c:84:14:0f:af:d1:bd:21:7f:e9:e8:47:
9d:53:ed:a0:be:10:e4:7b:cb:24:b9:f1:54:82:f8:
ea:4e:bf:f1:4e:d5:b7:6b:19:a6:ea:bb:4e:60:e0:
7d:a1:1b:cb:e3:73:ea:1d:e0:4f:8b:8c:ee:69:90:
5c:65:95:2e:cf:61:fe:0f:3a:c0:36:02:22:93:ad:
a2:89:f8:65:4c:8a:4d:46:94:10:7a:01:02:3f:2a:
7b:37:55:48:c5:26:21:61:20:9a:10:d1:2f:0c:1e:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:8D:A4:B7:73:F9:38:4B:F4:3A:AF:9D:56:D1:C9:EF:B6:AD:12
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0c:0d:9c:b5:51:49:d0:74:4a:7b:10:6a:2a:62:02:58:dc:
08:ba:5d:c5:ed:5b:b2:f0:18:34:86:59:ed:eb:a3:3f:86:32:
5b:17:17:48:75:87:97:41:ee:f5:38:6c:f0:c2:77:69:3e:c3:
c8:07:44:2e:69:eb:22:65:a1:0c:eb:7a:53:9c:69:7e:20:ab:
04:78:d9:d1:28:c2:3a:c9:84:17:50:a3:af:4e:06:88:c6:6b:
bc:31:03:f0:37:44:0a:5f:63:14:85:39:79:fe:30:23:64:08:
4c:7a:c4:7b:fd:4c:ca:29:a0:4b:c0:ed:0b:fd:41:a6:29:18:
0b:46:d8:de:e4:89:34:7c:07:52:1b:3b:d1:9d:78:08:3a:36:
ab:d1:2d:b1:06:8e:7b:ec:d5:71:df:c0:4d:ce:e3:d6:28:dc:
82:ff:4b:12:80:4f:9f:74:f7:a7:d1:bf:6e:a0:42:ca:9a:e3:
f9:97:a5:bb:74:fa:c7:ab:14:33:7c:4f:6f:89:48:9f:3b:c2:
9d:dc:63:78:17:ba:73:a5:b8:51:38:79:b8:bf:9e:c7:52:82:
76:f0:29:1d:10:fe:48:07:e8:9b:5c:dd:0c:5f:f6:8c:f9:5e:
0b:be:a0:fd:3e:db:a4:38:fc:41:db:07:52:61:08:b6:c5:4e:
89:3d:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:47 2026 by rpki-client