Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: R0Wm+Gc7r0nemEFgJ8Uo+B07Kq0r9hzNeGHIXkQPWr4=
Subject key identifier: CD:8D:C4:E6:0A:7D:F5:5E:50:3D:64:D4:7B:AA:EA:F2:DD:9B:AE:9E
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 019D265F7AD4440FBB8FC03541CD55378E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 109D
Signing time: Wed 25 Mar 2026 19:01:24 +0000
Manifest this update: Wed 25 Mar 2026 19:01:24 +0000
Manifest next update: Thu 26 Mar 2026 19:01:24 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: UPxfEeO99lVikGbHE3UHDVARtm/Z5lb1w73z5i765j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7a:d4:44:0f:bb:8f:c0:35:41:cd:55:37:8e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Mar 25 19:01:24 2026 GMT
Not After : Mar 26 19:01:24 2026 GMT
Subject: CN=cd8dc4e60a7df55e503d64d47baaeaf2dd9bae9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:73:f8:d4:33:bb:ed:4b:26:28:6b:a8:48:
9f:6c:d1:55:e6:b8:ac:91:08:dc:fe:a1:8b:50:b4:
18:6e:c1:3a:03:1c:89:6e:79:c5:31:d8:b6:04:f7:
93:3c:a2:87:16:67:bb:36:5d:a2:97:da:81:cf:e6:
56:57:6f:50:f5:fc:03:0a:2a:31:63:ef:41:c0:a7:
51:c9:8a:e0:c2:74:95:43:eb:d6:13:35:9b:fe:24:
a5:e2:3d:33:92:d3:ed:ef:df:6e:a7:9b:fb:a6:79:
ce:ab:96:93:6f:68:0e:88:5b:e4:2f:b3:c6:29:78:
bd:84:02:f4:d0:2a:f3:8d:5b:00:8e:df:d6:54:3f:
8f:f4:b5:96:7b:c0:5c:95:3f:b8:10:9b:67:74:28:
09:bf:1c:2a:01:e1:31:bc:dc:85:fe:52:51:e5:50:
fa:34:8d:29:90:81:c0:b2:a3:c2:7c:b0:35:4e:d4:
d7:ea:f7:a5:04:34:5b:d8:85:1d:b9:b2:05:ac:cd:
e2:d8:bf:1a:59:a3:4f:68:b5:e8:9b:83:79:a6:70:
ff:e5:35:c9:88:be:ed:32:95:3d:89:49:9f:45:4f:
cd:c7:ed:ed:bf:e2:3e:75:02:d7:aa:90:8f:0f:cd:
63:6d:e4:8d:05:f0:8d:97:03:09:98:0c:cc:97:31:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:C4:E6:0A:7D:F5:5E:50:3D:64:D4:7B:AA:EA:F2:DD:9B:AE:9E
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:ad:17:05:11:db:d1:37:f5:cd:00:72:a6:2d:d6:61:42:
e9:92:4d:83:28:dc:9a:66:56:15:c9:57:1a:0a:52:4a:90:69:
5f:ee:74:41:b7:8a:bb:88:ac:03:67:7d:98:01:64:e1:e4:aa:
78:ad:de:9b:55:0b:81:49:36:e2:37:36:41:29:42:a1:42:c5:
01:7c:c3:e1:35:f3:2a:9e:b3:9a:78:fc:c4:89:d4:b4:54:55:
7c:94:02:d5:ca:f4:af:ea:7b:2a:fd:d2:33:71:d5:2d:0b:dd:
4f:c4:26:e9:65:8d:57:80:76:81:8e:56:05:33:dd:17:0d:33:
31:e5:cb:3a:36:f4:49:09:be:9b:62:45:a1:9d:f5:3d:65:73:
85:cd:0c:5f:b0:75:50:37:5b:96:22:c7:0c:5a:9a:ee:73:31:
cd:53:04:84:31:36:e8:ea:ed:86:12:14:43:31:9f:b1:af:30:
b9:fd:78:ce:00:5e:14:db:9f:2f:fa:a4:04:c0:f6:ec:c6:75:
b2:57:4c:24:03:42:51:c6:64:98:65:69:54:04:92:94:d9:d7:
6e:b4:61:3d:88:15:60:4d:82:f8:01:a4:04:60:a3:44:4d:b8:
5e:bd:c7:65:4b:77:a3:c1:b0:da:ce:14:a0:99:2d:ca:cd:bd:
e8:57:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:37 2026 by rpki-client