Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: waIwesUqBtOVdeQBFcwqSmgdzv9RQIKuVhaWWL39Pf4=
Subject key identifier: FE:77:A7:5D:E9:CA:4E:DA:A7:3A:7C:5D:3A:04:8B:FB:7E:F6:0D:57
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 019D288475CC5543B150F528122FE0D1DCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 1785
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: EjENBQktu1cGW4IMHzqMgcUUzQWQjYQNpLRZtmZtQ8I=)
2: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (hash: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:75:cc:55:43:b1:50:f5:28:12:2f:e0:d1:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=fe77a75de9ca4edaa73a7c5d3a048bfb7ef60d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:5e:c4:df:35:f1:aa:f3:33:b1:93:98:09:
0c:30:81:86:cf:4e:7e:89:44:47:3e:b6:2a:86:18:
b9:f0:69:8c:7b:11:9c:a9:9e:ea:dd:fc:8b:12:dc:
d0:a1:44:71:38:49:43:e0:91:28:3b:17:65:de:ec:
fa:71:ae:46:aa:9e:f9:13:ef:87:a6:fa:97:a6:a7:
81:cb:a8:ab:ed:23:db:b2:1f:93:55:d5:49:a5:91:
9e:04:4e:b9:53:76:9e:91:a0:35:f2:46:21:42:1b:
8c:46:cd:2e:34:50:18:e0:ac:61:f4:3d:5c:88:40:
80:8c:45:62:a9:6c:35:37:07:6e:40:da:ec:08:b2:
61:56:00:d2:f4:ee:4d:88:0b:52:4c:98:5c:c5:80:
20:fe:8d:f4:2a:b9:58:d0:98:0b:1a:aa:1e:a6:8f:
76:e7:6f:a8:67:4b:29:44:da:1d:f4:b3:76:39:61:
f4:89:2c:02:c3:cd:69:d5:3d:f0:f3:7d:26:78:08:
85:28:53:8c:bb:55:df:4c:b5:86:3f:01:c9:33:74:
3e:a3:6d:ce:6f:58:21:6a:cf:6f:dc:3a:94:b9:25:
33:e1:22:8b:4e:35:06:de:f7:63:d0:4b:a2:5f:8a:
9a:ab:9f:0c:88:a7:da:c0:c0:27:2b:1a:a1:5f:d8:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:A7:5D:E9:CA:4E:DA:A7:3A:7C:5D:3A:04:8B:FB:7E:F6:0D:57
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:02:5f:dd:49:a6:f1:46:4b:22:5b:e4:bc:0a:df:30:f4:ab:
bb:81:1e:68:4c:16:99:62:53:8b:78:de:ad:46:2d:01:26:3a:
c4:45:b8:4b:52:af:40:76:37:35:c7:d1:5b:82:9f:cf:a9:8c:
13:95:c2:d8:09:ef:d5:bd:94:7a:2f:09:8a:9f:d7:c7:3c:b4:
38:9d:0f:13:ba:3a:9e:f9:f5:8c:8f:66:16:78:0a:04:bb:eb:
03:8d:9d:a1:6d:8d:0e:33:11:b9:0c:03:7d:7e:ad:b3:fc:29:
f9:2c:75:34:ff:41:75:5c:58:72:b2:49:2d:b9:28:2d:01:43:
63:31:c5:e9:fd:65:26:1d:36:00:60:fa:9a:07:38:c6:8b:18:
cf:dc:a6:1f:70:6e:c9:b9:cc:97:d3:ae:a2:5b:58:94:bc:2f:
a6:d2:b6:7a:8e:30:ba:4c:ee:09:6a:6a:ca:55:bd:a7:0e:bc:
83:e8:73:58:de:b7:8e:ef:b3:f1:9c:b5:c0:18:c6:ac:2d:a5:
ae:4c:46:a8:39:62:1c:61:bc:09:50:5f:ce:51:8e:49:a1:1c:
d0:5a:8b:23:cb:78:fe:e9:4d:98:35:36:3d:65:12:7f:1d:6c:
0d:15:c8:4b:f2:13:98:54:92:99:73:cc:29:88:ae:50:7d:04:
64:fd:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:54 2026 by rpki-client