Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
File: kc04OOdPhNIERp3vJ7j-ehQAFLo.mft (raw, json)
Hash identifier: 1dQbEinnY7S2tc1KbDe/iK1oAI2tgNjQ/Tv+svZogJA=
Subject key identifier: D7:7B:91:3E:B3:70:F5:99:74:EE:0A:96:62:25:21:38:8C:85:E1:E6
Authority key identifier: 91:CD:38:38:E7:4F:84:D2:04:46:9D:EF:27:B8:FE:7A:14:00:14:BA
Certificate issuer: /CN=91cd3838e74f84d204469def27b8fe7a140014ba
Certificate serial: 019D284DDB6A556DD91E3AD27C91F782DE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
Manifest number: 0200
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: kc04OOdPhNIERp3vJ7j-ehQAFLo.crl (hash: B4AHvUpm+liAAx0dOGHUbtCKwYIEr7Bkc2nwJAVKIg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:db:6a:55:6d:d9:1e:3a:d2:7c:91:f7:82:de:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd3838e74f84d204469def27b8fe7a140014ba
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=d77b913eb370f59974ee0a96622521388c85e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:a5:0e:ee:8a:91:21:12:27:e3:4c:f0:85:
d8:93:b1:de:00:14:2e:b5:1c:e2:38:de:6e:65:43:
36:b7:5a:3a:0c:47:50:be:0a:5a:47:06:f7:5e:20:
3d:dd:c4:d3:bb:fe:b6:e9:cb:29:6c:89:cd:a1:c9:
c5:4b:a6:fe:38:c2:ec:80:11:1b:b5:f7:4d:a7:8a:
0f:2e:97:26:00:4d:4e:65:c3:44:e2:f4:57:93:d5:
21:3c:27:ef:cc:cf:9a:53:aa:8d:b9:db:c3:bc:dd:
7f:5d:e1:ea:40:fb:2c:60:64:13:ba:9d:f9:1f:ee:
c1:8f:eb:34:d8:9a:84:3c:c3:58:f5:95:ba:d8:d8:
a0:c9:80:8d:a3:68:f9:98:af:a6:d9:cd:2a:c4:e8:
24:29:47:2b:81:5a:94:a1:91:79:a0:e6:7b:7d:92:
74:98:9e:62:75:ae:0b:b9:02:61:ae:63:b7:50:47:
7e:d9:74:b1:d3:ef:57:6d:fe:95:ae:12:77:70:5f:
a0:bf:82:9d:60:72:14:c6:98:7c:02:3b:01:a6:e2:
29:f0:0d:02:dd:27:c0:0a:fd:cb:e4:bf:c4:28:67:
59:25:bb:7a:f4:a4:3e:78:18:1b:55:c0:8f:4a:42:
25:a1:51:c7:87:14:ef:e8:1d:54:86:66:ce:63:c0:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:91:3E:B3:70:F5:99:74:EE:0A:96:62:25:21:38:8C:85:E1:E6
X509v3 Authority Key Identifier:
keyid:91:CD:38:38:E7:4F:84:D2:04:46:9D:EF:27:B8:FE:7A:14:00:14:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:81:eb:01:68:d5:1c:97:e2:56:24:b4:53:bd:c4:11:77:74:
92:b9:36:01:24:cc:c1:a6:92:8b:57:29:3b:cb:ce:31:3a:67:
98:07:01:e3:a6:f5:98:70:21:21:f1:bf:f1:c3:fb:77:7d:ad:
3d:0b:6e:f7:c6:d4:c9:a2:b0:28:8f:08:34:2d:09:c0:99:5a:
c0:15:f5:3b:ab:fe:d7:1b:34:c7:e4:78:ed:6f:49:5b:b7:3e:
4f:f1:dd:5c:15:d8:e8:7d:01:fc:4e:ed:bd:99:a4:c6:cb:76:
c8:0e:d7:1f:52:94:2d:8a:f9:64:f5:4d:84:7b:e0:2a:12:d9:
73:5b:1d:4e:4d:c2:03:be:03:1b:ab:3c:a9:8a:93:f5:20:89:
ba:f7:e9:f5:39:97:aa:47:eb:96:df:75:75:83:db:15:89:69:
4b:6e:98:b8:cb:6e:66:5f:2d:b4:d0:dd:2d:93:a6:84:bd:30:
ba:8e:f8:07:68:b8:67:92:b6:af:7e:15:d1:96:8f:4b:74:5d:
9d:98:89:87:76:a1:ae:13:03:0f:d8:08:fe:f1:1e:6c:b2:27:
fc:00:26:64:e8:24:b2:1d:0b:92:f8:7d:1f:83:c6:17:97:78:
9d:87:1b:cb:49:06:70:47:ac:a8:13:ed:58:1a:c0:12:b2:cd:
40:55:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:23 2026 by rpki-client