Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json)
Hash identifier: M9mZcXbjtEyaYFKPrEgD5O8IX8sXdkvobL0s2ZeUl6g=
Subject key identifier: 74:45:3E:46:C8:2C:A4:A0:BD:3B:59:2C:67:D4:C3:21:D3:E1:3B:7B
Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Certificate serial: 019D27047EA8AAC33B6D61DC12589BDEF56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
Manifest number: 1404
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: AJKz6tb/faoR0t6CxIo1pYopmIPbGLbWEFCSDjIQ00s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7e:a8:aa:c3:3b:6d:61:dc:12:58:9b:de:f5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=74453e46c82ca4a0bd3b592c67d4c321d3e13b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:65:8c:94:c8:a4:9d:18:d4:06:1d:ad:10:
b5:3e:c1:0e:47:d4:bf:6b:05:49:28:ee:3d:13:d4:
5f:c9:36:6a:e5:b8:07:a7:a6:fa:cb:49:8e:91:10:
cc:a9:c1:53:7d:e4:ef:1b:30:ae:68:e0:62:9d:ae:
b7:45:c0:aa:f6:4d:3b:1e:da:0e:38:8f:c5:d9:3e:
44:99:d9:77:4d:97:61:c6:22:19:4f:05:68:e2:58:
4f:98:35:70:a5:a1:19:c3:b2:14:b8:b5:8e:7a:bd:
bd:5d:19:ed:6e:6d:62:29:e6:dd:ac:4a:5f:cd:6b:
65:7e:fd:7a:7b:ab:0d:19:02:54:bc:1c:9c:1a:09:
eb:fc:c8:a9:a9:90:9c:41:c7:c2:02:2c:14:41:e5:
96:d8:07:b5:be:ba:86:6b:e5:0d:69:dd:bc:92:8f:
44:df:99:45:c8:02:13:b0:6c:63:f8:a6:78:c4:1b:
67:b0:e6:73:0b:40:29:8c:c1:d0:8e:83:c7:12:9f:
61:4a:6e:22:3a:83:a6:96:b6:c2:95:6b:42:8f:48:
20:a2:c9:f0:bf:d9:c2:61:da:00:9e:f9:8a:f9:3c:
ef:0b:01:a1:66:b9:bf:3a:ec:35:14:b6:c2:8c:13:
57:16:a5:fb:a9:8d:3a:3a:46:4d:5e:09:09:94:11:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:3E:46:C8:2C:A4:A0:BD:3B:59:2C:67:D4:C3:21:D3:E1:3B:7B
X509v3 Authority Key Identifier:
keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:26:21:df:fa:3b:ad:d9:77:25:bf:64:4c:d3:c8:6e:51:9f:
73:03:3e:3d:f8:c3:0d:5f:f7:ad:5a:8b:d9:16:18:c3:62:9a:
56:6d:e8:f5:fc:c1:2c:8f:9a:20:34:71:61:73:51:89:b8:99:
a8:74:6d:b6:41:1a:58:ab:f3:30:58:0d:e4:81:03:3d:b7:80:
ec:6b:8e:2d:1d:19:31:a1:9d:55:6d:3a:d0:1f:7f:b2:46:50:
3d:1a:b5:e5:76:07:e6:44:d9:23:96:5b:43:bd:25:8b:3a:08:
e5:af:7a:60:eb:1f:a2:e1:21:dd:e5:e5:a9:67:d4:4d:e8:bd:
35:f8:cd:de:5d:05:35:b6:57:72:53:28:77:4f:b2:8b:93:50:
5b:19:cb:fa:7a:b3:b4:8b:e0:14:97:44:03:d4:c4:e9:fc:75:
9b:48:b8:79:af:08:67:9e:07:57:79:45:9f:60:8d:6f:35:35:
e5:ea:7c:96:0b:b1:6f:fd:d1:5f:6f:38:9e:f2:40:94:70:7e:
bd:31:f9:30:a6:63:58:84:ae:e5:52:70:c3:41:8a:30:2c:84:
75:76:bd:99:f5:7b:f2:b2:c7:16:18:2d:2f:90:00:83:38:2a:
8d:79:89:51:d9:18:17:c3:c5:99:59:00:2b:e7:77:ea:4e:ae:
e4:96:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:25 2026 by rpki-client