Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: Yvrzt6Bby7SGmoz/87dOgSzo7f27iCRqxL9z+AzwjDo=
Subject key identifier: FC:0A:18:EC:09:6C:EE:32:63:21:A5:EC:EE:96:04:0E:D3:7C:73:9A
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019D2704AA4E47EA027251C05E160B43342C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 1123
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: dvZgzM6MUpWcQnRV43FX6xQEy4miG8zIIYGa56NXM7E=)
2: zFPDIQ6oyxHzuUI5QPn3o0ndWIE.roa (hash: kZJWLecWvxb0aVQv+4P+LbA10Ay5ixM4OkGwIDMl4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:aa:4e:47:ea:02:72:51:c0:5e:16:0b:43:34:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=fc0a18ec096cee326321a5ecee96040ed37c739a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:37:71:09:a9:90:45:e4:e6:2d:fc:28:8f:
52:69:73:c5:ab:db:76:10:54:0e:9b:fd:a5:9e:57:
2f:7a:02:ee:05:fd:7e:ac:83:fa:16:44:80:2a:01:
de:97:e9:00:16:a2:11:f7:0e:c0:d7:70:e3:9b:06:
aa:25:6e:51:c9:01:7f:f2:1e:5d:24:cb:88:38:d8:
8f:c0:68:91:ba:bd:0e:30:ab:03:82:7c:8a:44:c6:
2f:de:8d:ad:65:59:21:66:12:12:2c:a4:36:f3:1b:
35:08:bb:49:07:38:a8:1b:c4:96:3c:22:cf:e2:88:
fd:67:c4:5a:4b:9e:ba:8e:80:47:f9:c2:7d:2d:ad:
8b:1f:18:b9:64:bd:7d:9a:20:f4:eb:2d:8d:2c:b2:
30:e3:4f:89:b7:3b:6d:1a:6a:2d:9a:20:78:04:f5:
47:9e:6f:29:c6:1f:d5:f1:cd:c3:39:c9:e3:36:2d:
19:87:54:6d:7b:29:04:93:ca:f3:b7:0b:4e:fb:74:
69:0e:a7:c4:8d:10:02:26:6d:27:30:1b:72:aa:61:
e8:f6:97:0d:ba:eb:e4:cf:be:62:8d:fc:41:3a:19:
32:29:cf:6a:b9:cc:4f:2e:fa:4a:f3:fc:19:0e:05:
86:94:4d:82:f1:7d:d3:57:b1:f2:93:c9:b2:4a:4c:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:18:EC:09:6C:EE:32:63:21:A5:EC:EE:96:04:0E:D3:7C:73:9A
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6d:a1:c2:2e:03:72:b1:92:96:45:a8:b7:bd:f3:ac:8a:05:
fe:69:f0:92:44:8f:11:7d:ab:b0:13:73:db:0c:2a:8d:4d:b6:
8b:03:18:7f:1f:18:ca:53:31:2a:1a:24:ec:8b:a3:de:f7:87:
69:b0:08:d4:36:23:fe:4d:4c:87:41:da:0c:6d:4b:a7:a0:3e:
96:63:c2:07:50:e3:26:f3:63:68:95:2c:07:3e:36:b9:c6:de:
b2:ee:19:b3:98:fc:b4:42:9e:37:fd:a7:a0:62:2f:a0:bc:7f:
a7:b0:95:c3:7a:be:d0:7a:44:78:ed:9e:b3:ab:b4:2c:8d:4c:
41:63:e1:aa:e9:19:bd:80:5a:fe:65:2e:6d:c6:34:0c:72:99:
82:d2:70:fb:d6:11:a0:dd:16:66:25:c8:86:e5:a3:4f:86:5b:
4b:5f:6e:47:6d:7b:d5:04:a7:f1:a5:56:e6:63:68:f6:f4:fd:
65:18:2d:42:04:f6:20:9f:e9:2e:42:a6:29:bc:6d:49:71:c5:
86:e1:57:22:44:51:8b:39:1e:d2:b5:a5:f2:76:5a:34:41:9b:
75:d8:6b:34:8a:34:46:46:57:3d:c9:db:00:86:57:e8:e4:e9:
61:b7:d4:e9:04:d0:bf:f9:98:77:d3:1e:6c:97:c1:8a:da:44:
5f:24:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:57 2026 by rpki-client