Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: VuUuw0FQIahmGmnvFbMNLLM1uHzbHptr7Vqwe1aBmkw=
Subject key identifier: 7C:4E:60:03:51:B6:CE:A4:99:CC:E8:B3:12:2F:34:F3:14:C7:48:75
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019D284DF78A5C1B3DC19A6A05E28C3A3F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 147D
Signing time: Thu 26 Mar 2026 04:01:31 +0000
Manifest this update: Thu 26 Mar 2026 04:01:31 +0000
Manifest next update: Fri 27 Mar 2026 04:01:31 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: UR1yl+S8yOlfPwh9OwbFu70uw41aB3rgP4vEOBboZ3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f7:8a:5c:1b:3d:c1:9a:6a:05:e2:8c:3a:3f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Mar 26 04:01:31 2026 GMT
Not After : Mar 27 04:01:31 2026 GMT
Subject: CN=7c4e600351b6cea499cce8b3122f34f314c74875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:96:26:a2:99:a6:aa:aa:49:83:1f:a3:cc:
19:ed:07:bb:5b:c5:12:b4:cf:9b:76:df:43:8b:94:
b2:ad:29:66:b4:57:42:53:ba:64:b0:a4:28:bc:59:
ca:62:45:8e:5c:e7:ae:40:67:ba:8b:d0:6f:d4:8d:
5d:1c:f4:b7:0b:3d:26:87:4b:b3:b4:7d:a2:fc:9b:
68:13:87:d2:df:b5:a2:ea:6d:c8:ed:7a:32:65:23:
a1:50:d3:f9:3c:3e:9c:05:2f:27:64:3a:86:4c:8f:
dc:ee:aa:2c:4b:f3:03:11:3c:cb:15:53:16:b9:b3:
27:b4:f9:91:26:01:5c:7d:ee:4d:e6:9a:54:14:ac:
db:c4:d4:57:d0:69:73:5d:42:33:3a:aa:bd:14:48:
1a:8e:e4:83:9a:a0:f6:ee:4f:4f:0e:a9:c8:62:e1:
7d:ce:d9:82:ee:c5:ce:50:76:fd:6e:eb:6e:9e:46:
b7:0d:77:b8:43:06:95:36:71:5d:31:b2:6b:6c:36:
ec:74:35:10:7e:ed:9f:73:32:a4:45:15:60:f0:47:
66:a0:1c:36:d6:3c:d1:19:ed:a3:9e:c0:15:14:41:
28:18:c5:2c:06:9a:16:0c:51:5c:f2:a2:fa:e2:a5:
f8:04:ff:a4:7c:ae:12:99:d1:0f:76:5d:66:31:0f:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:60:03:51:B6:CE:A4:99:CC:E8:B3:12:2F:34:F3:14:C7:48:75
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:04:81:10:e8:d3:c2:a1:55:d8:1a:a4:ff:e0:63:98:f3:
5e:ec:ad:b7:a3:ad:e1:92:c9:23:da:f5:84:ec:83:f4:1f:e5:
f3:20:b1:7b:e9:62:e4:89:52:03:68:91:ba:9c:12:c2:16:52:
8e:4e:c8:9a:cc:43:b6:30:7e:93:e9:f0:7d:15:91:2f:9d:5d:
ed:30:c0:b0:75:88:97:ce:cb:41:89:93:0f:00:e6:e9:31:4a:
8c:b0:df:59:28:c3:fc:2d:4c:2b:cf:35:82:1f:01:3b:af:65:
ac:55:b4:96:43:e2:1d:a8:7f:0c:d2:e7:fb:39:4d:77:da:ae:
b5:91:19:d2:5d:bb:5d:a0:f6:4a:fb:19:ae:b3:c7:99:d0:a3:
f8:27:ce:3a:bf:b6:d7:d0:b9:09:20:21:6d:8a:9c:fa:34:97:
7a:b3:f3:ad:13:89:17:52:91:e0:20:a3:e3:39:ae:24:1c:69:
de:01:59:2f:4c:b5:11:0c:69:fc:9d:2c:95:4b:f8:b4:32:27:
98:e3:ed:5e:e4:67:70:a6:8b:57:b6:a6:b7:f6:fd:cc:0a:b1:
4f:e4:57:53:9c:76:8a:5a:dd:46:71:46:44:f5:f5:1c:0f:9c:
70:d6:ea:e5:c3:ee:90:83:9a:7c:c2:36:5f:27:2e:38:73:5e:
c3:05:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:58:38 2026 by rpki-client