Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: KdZRCf2k8ZmnqUJxRmVUEUUS5bnYnEbZydE0jnIDin4=
Subject key identifier: 12:11:25:0F:14:ED:16:C5:0E:35:70:71:CC:42:BB:DA:DC:97:09:58
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019D270491B28A2EF0381FD1AF5B8596F22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: CRFwUz3q65oG5qCeKL99+NJ6Q8v+iY2Ppl5OQLXNXY0=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:91:b2:8a:2e:f0:38:1f:d1:af:5b:85:96:f2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=1211250f14ed16c50e357071cc42bbdadc970958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:26:e1:58:4e:ca:91:ce:e9:43:2e:64:01:
9d:31:12:db:8d:10:df:c1:65:d3:3d:72:c0:f7:68:
36:d2:25:db:88:10:81:84:fd:f4:fc:1d:32:6e:33:
1e:7e:8b:af:ee:17:4f:33:18:ec:94:88:f8:ac:f8:
61:82:b1:d3:25:67:de:7c:de:16:ff:80:4a:0d:02:
1d:1d:b3:ff:5d:bb:f6:a6:f1:c4:94:4d:8c:79:2f:
2c:b9:9b:48:19:77:b5:f6:e0:4a:8b:59:0a:f7:24:
82:b2:2d:05:6f:0e:d4:89:a9:b8:7c:f4:9c:20:f6:
a7:d9:84:f1:2c:b9:0b:2f:74:29:f7:98:90:41:ee:
29:64:97:75:16:c7:4e:c1:fd:3c:09:0f:98:28:cd:
28:3d:90:ef:44:3c:a0:91:e0:00:4f:f1:a0:a3:29:
b3:2e:dc:90:90:27:01:d8:11:f8:3a:5d:d9:ba:e3:
6c:36:6a:91:d3:c1:25:e3:32:3c:2c:33:32:18:d7:
b3:a4:b7:73:4b:1b:76:ea:d8:ef:86:89:3f:73:7f:
d9:0e:d1:df:64:c1:3d:98:ba:15:aa:d8:6c:15:83:
2b:ed:68:e6:2b:28:4e:31:53:6e:b5:99:d8:ba:c9:
cc:08:1a:bc:c4:0f:2f:ef:21:47:a9:12:2b:14:7c:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:25:0F:14:ED:16:C5:0E:35:70:71:CC:42:BB:DA:DC:97:09:58
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:8d:15:c1:d3:c3:71:aa:99:90:6d:1a:ba:9a:de:c6:72:
64:50:4b:46:40:51:3d:7c:15:e6:98:f0:20:f9:cd:9d:5a:74:
2a:d2:f3:86:01:16:dd:37:96:53:13:a9:48:73:64:96:ec:ba:
8c:a2:f0:9f:b4:30:84:e9:81:21:c8:6c:a2:f7:fa:be:a3:c9:
89:07:71:33:9e:c1:78:a4:16:a5:42:31:07:d3:0f:f0:4e:44:
51:9f:c9:5c:82:bd:5d:1e:40:b7:ee:58:39:f0:19:60:cc:00:
45:fc:f9:1c:8b:55:2f:c1:9f:1f:ea:29:46:5c:6d:f7:c4:69:
c0:80:e0:52:9a:c5:a8:69:8e:bf:e0:95:79:cb:6f:91:ee:38:
cb:91:d1:6e:87:21:e0:0a:5d:b3:53:80:d9:d9:82:d4:d8:4e:
89:09:91:34:49:a4:4c:39:a8:82:eb:0c:c1:53:f3:58:f1:c4:
00:8a:45:3d:e3:cc:f3:f0:fa:25:74:c1:a3:f4:ef:ae:75:1c:
e4:e9:96:12:e0:3a:45:02:50:88:b0:2b:2b:89:b9:2d:1e:b7:
64:ae:8f:90:05:93:f9:61:92:62:74:9b:ba:bc:b1:22:d7:a4:
c1:3d:ff:a2:b1:bf:73:f8:e8:d3:b0:44:1e:16:d6:54:04:75:
6a:9b:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:36 2026 by rpki-client