Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: fuveTuDUsNhfjabtJVcmr7HcwBskYxJH+Oa36tjMx5A=
Subject key identifier: 08:E3:E6:F0:46:C9:8B:1D:8C:C9:8D:3E:06:9A:4A:36:B8:01:45:83
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 019D2696178B2D2028184ACF14338C3B2970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: d/0u+wjTfPBCYTan4sUsZJEXlwc1b1rkUOTMbkxZDJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:17:8b:2d:20:28:18:4a:cf:14:33:8c:3b:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=08e3e6f046c98b1d8cc98d3e069a4a36b8014583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:12:c7:67:f8:91:57:b0:9f:70:ab:cf:a5:
ba:0e:39:83:33:a7:2b:49:a3:81:7f:43:ea:8c:bc:
33:9e:08:79:11:23:36:93:67:27:ab:27:8f:55:f9:
72:5c:32:3a:e6:33:7f:9e:aa:84:59:b2:1a:0b:81:
00:20:dc:2a:70:71:10:43:0a:24:a2:5f:c6:20:17:
08:50:47:5d:3c:06:d9:bd:d6:0e:51:7a:95:48:32:
22:29:21:c6:3b:29:1f:31:9c:e8:86:d6:af:f7:f2:
1d:12:43:d5:9c:ec:ea:61:cf:21:57:c5:53:3c:df:
6a:ea:b4:2c:d0:2f:fd:2e:0b:c1:5e:02:3a:d9:0f:
dc:da:6c:dd:e7:b5:dd:8f:57:3c:61:9c:8c:77:77:
7e:62:0f:24:fb:27:31:7a:f7:d1:0a:fc:02:85:b1:
bf:7d:ee:63:0a:8d:09:72:14:d4:91:5e:87:bf:75:
75:a3:78:34:6e:cd:99:b6:50:11:90:1f:2b:22:a3:
77:a3:49:2b:5e:d9:ef:61:31:5c:a1:bb:40:25:73:
9b:99:d7:93:10:55:0a:38:25:5e:bd:9e:20:19:a0:
01:1c:99:b5:fb:d8:03:c4:b2:03:c4:57:12:1a:22:
4e:68:cc:c2:ba:5d:96:ac:93:dc:ad:0d:ae:01:f3:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E3:E6:F0:46:C9:8B:1D:8C:C9:8D:3E:06:9A:4A:36:B8:01:45:83
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:93:f7:77:5e:1e:b6:de:5a:56:2e:5f:d2:99:98:10:6c:
3e:6b:54:ab:0d:b9:9e:0e:9f:e9:e1:4d:be:f1:7d:05:18:2f:
3c:55:9b:f0:4f:b1:54:ec:99:d0:3c:57:fb:44:9c:d9:eb:4a:
9e:ec:b8:c5:e4:32:88:35:a6:7f:bc:1e:53:a3:d8:b6:9c:ad:
e9:68:2a:66:d6:85:d5:2b:2e:49:59:2c:a6:c9:fa:d5:73:29:
a6:54:e2:24:38:3d:98:f2:b4:05:7d:14:30:4e:99:6e:6a:cb:
39:b5:1e:77:ba:d7:2e:42:32:15:d2:70:f5:02:43:36:a5:a5:
f5:b3:58:89:c1:1c:8f:07:97:e6:20:26:12:61:b1:d1:03:b4:
04:db:b9:b7:56:09:c7:d2:f5:c7:25:91:cf:84:68:fb:d7:22:
6e:ae:69:60:d4:10:65:9a:43:55:90:2e:e2:ba:a2:5a:99:ee:
fe:f4:cf:40:9b:0d:2f:85:d1:ec:32:44:da:23:2c:07:31:57:
7f:76:d1:1e:f4:ec:43:ae:c6:c6:f9:78:ab:38:22:6b:44:b2:
cb:bd:55:dd:1a:dc:fa:6e:94:32:2f:1b:86:54:f0:c3:5d:5d:
3b:07:8c:03:4d:f1:57:8f:85:08:8e:ba:e3:b9:c6:be:1f:91:
99:36:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:18 2026 by rpki-client