Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: ZrZMUoEzsKst6+/td7PtNi4p6Q55cPUej3nIhIRA6/M=
Subject key identifier: 2A:CC:D2:11:AD:BE:08:8A:9F:4D:A4:6F:75:F2:3B:DF:45:F9:21:96
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 019D27720211ACB84EECD82442AA8828AE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 1280
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: abSWYRkkBn+AzbdUtORLHwjRziARytg955oHx6Xu1w0=)
2: Xp-6MgKL7FDxA8beZ_B2_voMBOA.roa (hash: RTnZFx7lRZDDt83YmwGHtedrtI7DlR7GynWDCNcROwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:02:11:ac:b8:4e:ec:d8:24:42:aa:88:28:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=2accd211adbe088a9f4da46f75f23bdf45f92196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:f8:61:92:e7:d7:ce:15:7e:8b:fc:4b:3e:
2e:ba:e5:fd:d1:e3:ce:2e:d3:ed:d5:4a:19:db:66:
b3:8e:7c:15:99:f9:25:50:6f:76:65:89:8f:fe:5f:
75:f0:82:74:85:73:bb:2a:ac:4c:34:b8:de:1b:a3:
1d:c8:99:e8:6e:af:b6:08:41:ec:ad:3b:ff:cc:de:
2e:f3:46:c3:4c:d9:a0:93:38:95:ec:ee:0d:ab:c7:
4d:1d:21:ac:76:3c:62:1c:19:a8:99:8d:97:35:76:
cd:4b:45:e9:72:49:dc:3a:e8:16:02:8a:dd:b3:f6:
61:78:89:ab:37:06:3a:fe:1b:30:1d:ff:0c:45:03:
4a:df:d1:56:91:62:5d:4c:8d:a4:03:43:39:88:60:
fc:55:67:40:ea:8a:5c:ac:b9:9b:73:22:9c:ea:df:
99:a0:80:5f:b8:e1:a3:49:b5:b1:15:b4:80:3f:73:
80:17:36:a2:2c:df:30:ce:0c:4e:ff:89:06:fd:18:
de:12:f3:7a:7d:f5:b3:83:58:04:fe:b3:56:53:db:
2a:91:57:93:e3:08:42:3f:6f:11:22:23:f1:fb:7b:
1e:41:b5:82:74:ce:f5:71:80:75:4a:f0:71:e3:63:
43:df:6a:ba:7d:ee:6a:bc:02:08:8e:c4:2d:e4:76:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:D2:11:AD:BE:08:8A:9F:4D:A4:6F:75:F2:3B:DF:45:F9:21:96
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:53:f8:d8:54:1f:12:cc:7b:fb:7e:6c:6a:49:50:fd:5c:
32:c3:d0:0c:80:45:36:f5:39:9a:09:73:d4:c4:08:09:78:52:
e0:15:29:1f:4f:37:c6:07:bb:32:7f:39:50:46:2d:7d:63:71:
aa:1a:a4:f1:72:6e:00:c5:7f:59:a9:b9:65:78:10:f5:b9:89:
3f:1e:ae:04:14:7f:ff:27:44:ed:21:ff:4c:5b:97:73:ce:87:
f1:34:1d:b9:06:a0:ac:e8:96:af:e4:5d:f5:22:0e:b4:9a:27:
f5:e1:ec:d9:4d:ff:84:73:25:81:b1:19:aa:08:e5:5e:e2:94:
4e:e0:99:e2:50:81:55:77:a0:18:68:ca:34:83:7f:e1:9f:16:
76:b4:78:c8:a9:4a:8c:af:5d:67:21:69:7d:94:ad:a4:bd:ee:
e9:32:94:37:fe:f0:f9:75:f6:1c:65:97:8e:64:c0:5c:39:fa:
22:42:88:7e:ff:3c:15:5b:5d:1f:19:68:89:dc:12:e6:2c:38:
dd:e4:2d:b9:8e:52:db:f2:e8:19:81:51:45:f9:7e:a1:d9:42:
c8:d6:79:87:71:18:25:06:e8:72:46:74:1c:6c:a3:ac:a9:46:
1e:1d:1d:d6:99:e2:3f:dd:48:73:7a:3e:39:52:7c:22:15:ec:
e0:11:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:07 2026 by rpki-client