Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: Y6PSJv29ZkVOdG0U7CV/WKjkowutMvUa6Ckf8iVBUF8=
Subject key identifier: 4D:3B:80:F0:C6:4C:CB:94:11:E6:4B:D8:93:BE:A0:D5:B1:77:2C:E8
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 019D3451CCE8BBF32E2172A9F2C6566BFD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 0826
Signing time: Sat 28 Mar 2026 12:01:08 +0000
Manifest this update: Sat 28 Mar 2026 12:01:08 +0000
Manifest next update: Sun 29 Mar 2026 12:01:08 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: 3IkVS3+3Njt8yJJD4dHx/McpcnpzVLKIKU4dj1mHL+Y=)
2: RVZM-kFR80ko6aXVrtr5bZIVB6E.roa (hash: U18fR6M6ECujVh8EJIN+7p0bRY+B368ox20l60Irpyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:cc:e8:bb:f3:2e:21:72:a9:f2:c6:56:6b:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Mar 28 12:01:08 2026 GMT
Not After : Mar 29 12:01:08 2026 GMT
Subject: CN=4d3b80f0c64ccb9411e64bd893bea0d5b1772ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:94:4a:99:7d:03:ed:48:6d:24:cc:5a:f7:
84:b4:55:fb:7c:d2:a1:aa:8f:c8:63:6b:c9:5c:2d:
ab:7b:72:ca:55:cc:65:e4:4b:52:7e:3c:38:77:8b:
16:29:0e:25:9b:a4:41:c3:22:ab:9c:05:16:08:83:
cf:27:46:23:46:a5:43:a8:93:9d:d9:e8:4d:c5:9a:
cf:2a:69:3d:25:c1:09:a3:73:93:9d:5d:41:7c:49:
60:9b:1c:f1:81:eb:ae:47:44:ce:1d:21:b7:6d:43:
de:0e:57:d2:45:05:e9:7a:6c:0f:06:a4:6c:e8:1a:
12:70:b5:e7:10:19:5c:ad:5b:c3:af:4b:76:d3:6e:
61:6e:2f:26:95:ec:8e:87:e0:4d:8a:7f:64:b0:8b:
6a:21:5e:7f:79:6d:45:ae:e4:b2:97:5c:a8:14:62:
c1:a9:13:ee:5d:07:2c:2c:6a:79:26:57:e8:cc:cc:
0f:e4:eb:cc:25:0c:19:56:70:ae:5d:ef:e1:8b:2d:
4b:a0:8e:6c:c7:6c:13:13:c0:5a:d7:a1:88:30:08:
8f:ed:88:be:27:7a:03:67:e5:f1:43:a1:a7:92:55:
13:97:2e:a4:7f:f4:cd:b5:61:7f:da:01:29:52:bb:
bc:c7:40:04:93:39:fd:28:fb:bd:e1:2c:f1:98:0b:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:80:F0:C6:4C:CB:94:11:E6:4B:D8:93:BE:A0:D5:B1:77:2C:E8
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:57:cb:2a:50:82:8d:b1:d0:63:b4:58:f6:f3:31:89:20:da:
a5:ad:63:65:2e:0d:c3:d6:0c:98:0b:81:2b:dd:6b:c7:6b:57:
a5:e6:b0:1c:d8:3b:dc:49:ae:3b:ba:6d:55:97:f7:6b:3d:bd:
af:a5:6d:7d:f8:54:d5:47:3a:bc:15:0b:25:4c:f3:50:7c:45:
de:1f:28:b1:36:9e:e2:53:ab:52:cb:94:c9:ac:21:d5:42:fe:
35:63:c4:c4:ae:64:60:6f:c7:ab:d4:0a:66:89:39:10:6d:d8:
7b:9e:49:58:44:da:43:e4:d8:79:14:2e:87:51:c6:04:20:d8:
d1:b0:8e:3a:bc:c2:e3:9f:ae:a7:7d:16:f8:37:7f:ef:2e:8f:
3d:b8:2a:d3:ce:88:b0:b7:1d:f0:de:32:90:fe:24:ef:c2:d1:
47:9f:86:84:c8:12:30:32:f0:9a:7b:4a:05:71:38:80:25:b9:
da:4e:1f:18:de:a2:21:6d:1d:0c:e1:fe:fd:01:0a:ce:7b:4f:
71:3a:f2:07:53:4a:8f:c9:13:fa:4c:78:a9:ab:53:b2:26:31:
7e:13:41:10:78:79:35:44:2f:08:e8:00:3b:82:bb:21:66:82:
88:6e:5e:66:b1:f4:af:45:68:fa:32:e0:c3:e3:a4:61:3d:45:
50:2a:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:08 2026 by rpki-client