Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: NyYG32C3whmSXT6ern4nyaHUlrjIQ0jnXLQJbHBRAqQ=
Subject key identifier: CD:6B:34:1D:F6:A9:D9:C6:3C:F9:02:D2:5C:35:64:B0:EF:D6:C6:4C
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019D26CCC0931DA2A9CC9B3A287CEDCCED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: eE1tTEaLbWvzpfSanWYxFbl8Cpd6wemARU2riu/iMLg=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c0:93:1d:a2:a9:cc:9b:3a:28:7c:ed:cc:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=cd6b341df6a9d9c63cf902d25c3564b0efd6c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:d4:91:45:40:63:78:51:5d:96:ff:ea:73:
3a:16:26:9b:8c:40:6b:91:83:69:44:ab:69:34:48:
5d:b3:77:62:13:4b:b7:a4:cc:33:f2:ae:0f:7a:dc:
d9:ae:47:6d:af:92:1f:ed:d8:00:a9:89:37:0a:0e:
b6:78:03:eb:9d:55:a3:83:97:11:5f:e5:55:c4:87:
af:99:da:d5:53:e2:70:e4:67:77:cc:2a:2f:4d:58:
2e:84:b8:44:c8:b0:75:a6:4f:8a:3c:20:fd:2d:c9:
4f:5d:86:ee:a8:0f:9b:5c:15:d7:12:6f:d6:3b:e0:
6c:be:0c:ef:a9:07:fa:59:c2:98:ac:81:23:72:47:
0b:c7:06:f6:9e:d7:49:8a:83:5a:ee:ba:0e:3e:8d:
8b:5d:16:df:86:15:34:bd:46:2d:d5:49:bf:76:ea:
d4:53:f9:1b:75:f6:09:47:83:7e:5d:49:ad:af:26:
57:e9:cf:9b:7a:a6:91:05:55:6f:c9:6a:b0:4c:05:
9c:f5:ed:f4:11:54:59:df:70:e3:c5:fd:ed:dd:3e:
25:47:a9:80:88:90:45:ed:c8:a7:f2:4e:01:b8:6c:
00:db:7a:38:cd:57:d5:03:20:07:2c:3c:fe:b0:3b:
ed:74:bf:33:06:24:2e:0f:4e:3f:59:cb:b0:b3:bb:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:34:1D:F6:A9:D9:C6:3C:F9:02:D2:5C:35:64:B0:EF:D6:C6:4C
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:ed:80:8d:cc:29:83:bf:40:bf:cf:29:1a:99:83:e5:d3:
0a:b8:a0:1d:00:5b:5a:ac:db:58:40:cb:49:94:3d:6d:1c:d6:
7a:d2:b0:fc:45:9f:b8:f2:bd:a2:6a:45:d7:cc:95:cb:a4:5f:
70:14:31:0a:91:4d:9c:23:e4:b7:5c:dc:fe:12:81:b6:43:87:
76:ba:53:77:c8:0b:9b:dd:76:01:72:d5:c9:43:fd:b5:26:6f:
5f:12:88:dd:5e:1f:cc:67:4a:cb:99:36:45:ba:ad:81:5b:df:
d6:56:5c:5c:f8:14:80:20:ff:11:db:07:68:ed:ec:e6:c9:02:
ed:ad:ef:c2:f3:09:71:c9:0d:fb:21:a9:a4:85:21:75:da:1a:
d9:07:f7:88:a3:87:6f:54:ff:d9:16:82:30:3c:c1:f2:51:0f:
9b:48:a2:17:7d:68:6a:17:88:e3:a6:ce:f4:ca:51:84:93:50:
1e:fb:4c:94:04:50:c1:ff:74:c1:ec:20:ab:42:18:fe:ec:9c:
ea:c4:70:7b:da:f1:cc:6b:a0:5e:d8:42:64:bf:7b:18:0b:bc:
73:15:36:04:d6:d7:f4:ea:c6:8c:f2:08:bc:e0:63:d3:fb:fd:
0e:aa:bd:21:c1:e7:7c:d4:ea:d5:9e:49:19:22:be:51:6e:18:
ff:0e:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:33 2026 by rpki-client