Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: AnViEf2XlxVO5CDWjDIdv6Z+zDmZR4gKd6DwwJjyjI8=
Subject key identifier: BD:32:C6:F0:CA:12:F8:2B:AA:89:B1:02:BF:09:05:D4:2A:FD:0B:A0
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 019D273AF93233C5594BE1D5682AFC8D97A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 1032
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: qPgZ4Rx/S5vmuw4Bg37VYVp3p1nbMg3Uob/9spUQZXw=)
2: NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa (hash: C+90WWb/JQ7zrn55n+w4S16JKtkV7Mdgc4eSRqUFD2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f9:32:33:c5:59:4b:e1:d5:68:2a:fc:8d:97:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=bd32c6f0ca12f82baa89b102bf0905d42afd0ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:cb:fd:06:88:a2:2a:7a:fa:c2:56:27:68:
3e:b9:7b:7b:1e:ee:ea:fc:f2:84:e7:10:ca:63:bf:
cd:ed:6b:b6:12:fa:b5:9b:29:94:c1:2f:d7:f1:83:
6d:bd:19:2f:da:97:b9:43:79:f9:96:ce:79:48:ed:
00:97:c8:e8:be:bd:a4:c6:f7:24:af:ba:16:b1:14:
a8:b0:bc:3b:ea:46:ed:96:e4:00:3b:68:6b:df:48:
6b:b2:ca:2e:b0:67:a3:05:b3:e9:c9:a1:8e:b8:09:
49:8e:d2:2b:f0:62:2e:2f:85:3f:86:62:a6:df:70:
81:c7:a7:28:ba:81:83:29:3f:88:76:8c:2c:c2:a2:
78:16:26:9b:58:26:ad:58:56:14:06:bd:6e:d1:20:
17:95:69:59:5f:81:45:32:a4:17:f6:55:07:b1:10:
0f:14:2a:21:4b:60:37:c3:9c:ff:65:69:e2:df:06:
f6:8c:fb:66:46:08:de:a4:ee:50:80:07:0e:8c:e5:
a7:15:57:84:5c:67:aa:96:a8:1a:e9:27:12:15:82:
60:c7:77:0b:29:f4:e0:e2:2b:c8:c9:61:ab:f4:d5:
c7:16:15:37:90:72:e3:bb:84:1a:4a:c9:da:5f:a0:
e2:91:9e:68:8d:c2:35:ba:4b:b8:3f:ca:d2:a9:84:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:C6:F0:CA:12:F8:2B:AA:89:B1:02:BF:09:05:D4:2A:FD:0B:A0
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:e9:c5:bf:f0:4d:73:7f:1e:a2:09:a5:3a:3b:e1:4a:71:
40:7a:e8:1f:db:b9:e7:27:06:08:a1:25:04:1a:02:8c:82:fb:
b8:61:e9:79:c0:cb:52:3f:96:ef:52:48:7d:01:10:ac:9d:04:
c8:b8:71:fc:f4:bd:f3:1a:37:d4:58:54:41:74:3a:f7:2d:7f:
ba:17:a4:2f:18:ce:7d:8b:7b:29:0a:bf:da:c1:45:a1:d2:6b:
0c:02:c2:0d:c4:85:11:95:f9:9e:a1:c4:6d:11:3b:c1:cd:28:
1b:98:17:1e:f6:28:15:2f:8a:88:e4:f6:f5:be:2f:2f:03:d2:
0a:69:eb:3a:3b:92:7e:88:d0:a7:47:63:a2:4d:f8:63:48:94:
ca:b6:d7:5a:cf:38:cc:b2:c4:91:33:9d:a6:c1:d0:a2:f5:db:
fd:7b:ee:03:75:40:eb:40:23:86:29:28:71:e4:02:03:97:70:
fe:b5:db:c6:a1:64:64:6d:8e:1e:97:04:26:bb:ca:3d:92:db:
8e:c8:8d:55:d0:f0:fe:fe:ac:27:64:1a:b7:a1:7c:99:a3:0d:
1c:fe:9f:b0:6e:38:9f:99:66:64:dc:69:fc:57:fb:9a:6e:dc:
13:0f:23:34:0f:a3:ae:c5:8b:cf:6c:d4:94:33:9a:db:a4:88:
88:7d:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:32 2026 by rpki-client