Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: zSzY5RK0Sk9kA66/VOKt6C7iccncyPpIEm4wMr5Q7yY=
Subject key identifier: 2C:0B:E1:B7:E7:24:C0:77:52:A6:39:ED:CE:A6:9D:8D:88:6D:FB:39
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019D26CD1508E2C0A2A0DD75CAFBA8A08F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: QSudhhPzL/KjLp3ZK7O+cO/dHOvYY29tXk6shWDjBn8=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:15:08:e2:c0:a2:a0:dd:75:ca:fb:a8:a0:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=2c0be1b7e724c07752a639edcea69d8d886dfb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:e9:31:f8:8b:6f:af:02:69:e0:45:cf:44:
ee:ad:89:4b:70:bd:22:92:b8:52:85:58:89:30:96:
84:22:85:b0:21:49:13:df:03:89:39:52:93:04:0a:
03:3d:b0:ab:53:1a:b1:23:4a:3f:6e:c4:85:b1:f6:
47:32:7a:a4:61:10:15:00:0f:0a:21:43:e9:ad:05:
4a:18:90:19:07:c6:f8:30:78:d7:6b:e6:38:16:1d:
dd:53:78:0b:db:49:0b:01:d4:de:9f:78:65:06:d3:
2e:5d:92:81:88:ff:20:b2:3a:f0:12:c4:2d:3f:26:
a8:74:03:b3:a9:66:bd:67:12:aa:8a:e8:ea:f0:c7:
9b:f8:30:73:cd:e0:9e:68:49:52:01:22:6a:03:27:
45:24:77:41:45:2c:62:47:ea:55:24:db:67:62:bf:
04:1b:12:a3:b2:58:b9:6d:3d:86:63:96:ef:39:a2:
2f:92:ff:fb:c5:f0:f6:90:99:cc:98:73:9a:33:60:
b0:cc:b4:db:8e:00:04:ed:d3:a7:91:53:74:7e:ca:
ea:e3:c9:49:f7:7d:28:53:6a:f3:33:9d:7a:24:b2:
df:b7:ed:de:88:69:df:b3:d0:88:f1:39:51:6a:aa:
d7:c3:5c:71:24:66:2d:5e:f9:92:81:43:1c:29:40:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:E1:B7:E7:24:C0:77:52:A6:39:ED:CE:A6:9D:8D:88:6D:FB:39
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:6e:84:76:c3:03:7d:1a:0e:3e:aa:e7:89:db:ba:d3:65:
8e:da:db:a4:4f:9f:48:fe:a5:12:64:68:c4:25:26:0f:14:28:
4f:a6:d4:61:76:b3:ad:4d:f9:ab:e3:f5:d3:c4:c6:41:07:f9:
bf:69:7a:e5:ca:0c:df:d9:68:e9:e3:91:84:5a:0f:f6:c1:31:
b5:94:56:20:f1:01:21:87:b0:89:70:7b:63:ef:df:1a:ff:a8:
a5:b6:c2:51:ec:15:82:ae:6d:27:7d:d2:0f:b2:b7:c7:fd:a4:
94:a6:ff:b1:bf:0f:45:fd:fc:46:77:0a:c6:aa:c0:34:76:71:
d4:32:98:62:40:7d:13:d8:8c:59:8c:18:d1:9a:b4:99:3c:cf:
26:6f:c2:d9:07:bf:25:73:93:40:5b:1e:d5:e0:0a:74:bd:10:
5a:9c:ef:5c:29:55:c5:64:41:17:95:f8:2e:c5:74:ae:b1:57:
ac:83:1a:5b:7a:49:5f:ce:e8:8d:4e:4a:df:08:bc:2f:b2:d0:
12:6c:cb:9e:83:13:5c:76:fb:f8:ef:e0:14:0b:ca:3f:f0:33:
50:d5:8d:dc:6c:ff:c7:b6:e1:47:84:5b:e6:7f:cd:57:e0:c2:
42:c9:f9:fd:c6:88:a6:52:d4:c3:7d:ff:54:20:6b:3a:fc:8f:
b0:f0:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:51 2026 by rpki-client