Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
File: KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json)
Hash identifier: sWJyZzg0TpeKBnufubGfWMLqpxiYa5YvOOugH9wll+0=
Subject key identifier: DF:10:50:92:4F:48:3E:E9:4C:CE:EB:09:55:A8:7D:74:DD:72:6E:C8
Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
Certificate issuer: /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Certificate serial: 019D27A8B71AE2590045C07E4F5144F4315E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
Manifest number: 0B15
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: eSxyJyl/ayyzU5oV3CIY4GNfIOwXFt88wK8j1lz8OY4=)
2: xzFbm4sk1g_z1hTqJzkSoYGfwII.roa (hash: vGpqbjJ2sbADDdZ1dTIQ9ghtcR849/Jhk0Pb4QG33k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b7:1a:e2:59:00:45:c0:7e:4f:51:44:f4:31:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=df1050924f483ee94cceeb0955a87d74dd726ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:ef:ee:fe:39:74:90:63:a2:8e:41:9c:56:
cf:7a:ac:38:c1:84:47:ba:d8:0a:20:8f:94:a9:6d:
8d:85:69:7f:98:68:e3:8d:41:af:64:dc:fd:f7:33:
56:03:9d:ab:17:86:bb:6b:5a:a5:3c:4f:e2:8d:a1:
83:9f:f1:5d:45:53:ff:02:30:e2:f3:75:ce:bc:68:
fb:f2:bf:6c:9a:82:a6:21:c4:ae:be:eb:43:13:6a:
57:db:b3:69:97:02:7b:bc:b1:49:d7:b3:6e:c8:c1:
e8:07:a1:da:82:fe:2c:d6:dd:27:a0:b0:fa:ab:c9:
f9:aa:a4:98:4b:69:60:f2:8e:4d:81:07:a6:5c:f4:
9b:c0:c6:04:b7:f2:c2:ad:d4:b8:fe:a8:c8:c9:da:
18:2f:80:1c:2e:68:64:74:b2:c6:36:51:00:50:50:
35:5b:fa:c4:ba:88:97:cc:54:b7:e2:e6:4c:a4:bf:
da:de:86:08:1a:85:93:ce:f1:f2:ec:ea:fd:5b:ec:
be:e9:9e:8a:8a:87:19:f9:f3:9b:28:97:22:11:f8:
2b:a5:e2:c5:0f:e0:26:71:b2:36:d1:7c:a0:49:ca:
0c:ee:28:78:2e:67:29:a7:48:83:9b:e1:bb:3a:61:
25:3c:ca:d5:5f:60:13:ed:46:3d:82:0d:d2:d8:45:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:50:92:4F:48:3E:E9:4C:CE:EB:09:55:A8:7D:74:DD:72:6E:C8
X509v3 Authority Key Identifier:
keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:08:48:f3:4f:8f:27:cf:36:05:79:c5:86:f8:b5:20:d5:cd:
8c:4c:91:0c:53:28:15:65:21:56:4c:a5:4c:e0:4c:15:01:d8:
f7:8c:8b:72:34:5e:7d:76:a1:53:92:24:91:2f:6c:96:c5:57:
34:1a:41:6e:35:7a:66:bf:a3:36:f6:4d:49:e2:6c:df:7e:04:
c5:ed:56:29:01:de:09:62:ed:e2:e1:34:9f:9e:02:35:65:fc:
92:1c:bf:a0:05:f1:d2:f5:13:07:b2:00:39:2e:53:17:c4:ac:
1e:37:05:9f:5f:0e:18:04:06:a7:6d:7c:83:83:bb:55:01:a5:
3c:e1:e5:7a:4b:f9:09:1a:e1:ad:a3:52:68:db:44:40:18:eb:
45:96:03:b5:2b:e5:60:41:e0:a4:c7:d7:92:07:63:73:50:f5:
62:8a:f9:37:ce:bd:50:42:b7:30:92:61:78:58:91:21:ee:9f:
2b:bb:54:34:a3:de:5b:5c:98:e1:a5:1f:45:af:fc:e8:72:16:
4d:66:bf:60:fb:75:18:40:ef:c0:5c:2c:0c:b4:53:6b:42:3b:
0c:08:a0:01:ec:43:1c:5b:b7:d8:a2:ea:f6:e2:f6:9f:2f:e4:
75:1f:db:a3:30:47:58:62:33:5e:ae:f1:66:8c:cc:bf:ec:a9:
f2:20:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:16 2026 by rpki-client