Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File: KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier: o+FKmlGtXX0FROSRYsHIHu9WqLcyiNJs65KEPKMEa9w=
Subject key identifier: BD:BD:08:2E:74:B2:E6:01:12:3F:D5:2D:41:C6:77:29:4B:2E:0A:50
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer: /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial: 019D265F041BD00082A8CDFF3DA8196D986D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:00:54 +0000
Manifest this update: Wed 25 Mar 2026 19:00:54 +0000
Manifest next update: Thu 26 Mar 2026 19:00:54 +0000
Files and hashes: 1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: xOQ7E2WLUV4tOkYPPKBf6PqMLlTEnMLCsZ3kM8/hiOY=)
2: roC7E9RumHxLB3VVJXEkh6LWBXY.roa (hash: ZVaSktEMxUUuiyBU7JPF0ZEtx8YRLICCeEQDBd6wK6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:04:1b:d0:00:82:a8:cd:ff:3d:a8:19:6d:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
Validity
Not Before: Mar 25 19:00:54 2026 GMT
Not After : Mar 26 19:00:54 2026 GMT
Subject: CN=bdbd082e74b2e601123fd52d41c677294b2e0a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:a9:f1:2e:2e:02:f9:ca:4a:3b:66:e8:2c:
99:42:2d:3b:df:c1:6f:17:4d:9b:78:0e:ee:6b:74:
58:c5:7a:a3:41:4e:1d:42:40:4d:4a:57:ad:63:25:
15:98:c9:a2:f7:d3:84:7a:6d:fa:f9:67:81:22:f0:
52:08:3a:e6:94:dc:c0:3a:91:77:44:45:3c:84:c0:
da:2e:a9:7e:6a:f2:6b:3e:cf:69:c4:11:9c:46:11:
6d:6d:24:eb:2b:2f:2e:8d:29:dc:1b:c6:23:bf:8b:
4a:ba:ad:26:95:10:c7:9e:97:5e:a7:97:4a:b5:4b:
4b:6d:1e:b1:2f:10:0b:ff:87:e6:c4:9a:85:7b:e1:
55:2e:33:01:50:c5:b5:5c:98:b1:92:db:c8:4e:63:
c1:78:a3:8d:29:2a:d1:f2:87:46:b8:4e:08:a5:17:
c1:f9:cd:2d:6b:81:e8:83:b6:c8:ae:b0:5c:df:b4:
91:ed:75:8a:d4:ce:68:0b:e6:84:22:42:cf:56:a3:
d0:c2:73:7e:d4:b5:7e:72:f7:95:1e:c1:36:95:6b:
81:6d:d6:3e:54:ca:ae:3d:b6:30:3d:d8:50:1e:d4:
05:66:7d:6a:0e:ae:23:80:61:41:a7:32:6b:98:7b:
27:38:d6:3c:cb:23:ee:3e:41:97:5a:60:71:da:56:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:08:2E:74:B2:E6:01:12:3F:D5:2D:41:C6:77:29:4B:2E:0A:50
X509v3 Authority Key Identifier:
keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:b5:1a:44:a5:7c:e3:da:52:9e:66:0a:cd:55:2f:54:1b:
9d:35:ab:de:b9:c0:c4:20:44:58:f2:47:6e:f1:a4:b2:cf:af:
ee:a2:c7:f0:90:c3:fd:a5:4a:d1:21:71:ee:e3:ca:78:18:00:
78:25:a2:ef:33:87:d6:c2:42:18:cd:f6:ff:a9:6a:ba:7b:6c:
e9:2f:6f:d6:79:95:b5:58:b1:da:e6:a7:ac:d2:9f:f3:93:e0:
4f:d7:79:08:da:ac:89:db:71:18:43:23:11:dd:4a:11:32:d5:
9d:cd:06:91:3e:bb:a4:f3:a8:1f:52:f1:d6:46:a2:6d:fd:c2:
4c:b6:ab:26:8f:eb:d1:a5:2c:16:56:1e:12:a0:9c:82:25:57:
c8:6b:46:52:42:5c:91:1d:d1:25:6d:55:51:a5:c2:ea:24:16:
44:50:24:85:e9:a3:77:b7:41:8f:d8:e4:79:51:03:89:8f:c7:
8f:85:57:b7:79:b5:c2:2d:a5:27:c8:e7:26:72:a0:87:cf:3d:
2a:5a:8d:3c:a0:b4:e7:5b:bd:7a:b3:c7:ab:21:f6:49:f8:83:
84:fe:99:9c:26:32:07:43:f9:01:e8:f2:27:d3:ea:87:0a:42:
2b:94:62:5c:e3:46:21:2a:13:9c:bc:f9:dd:1f:af:3d:d7:35:
e4:52:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:51 2026 by rpki-client