Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: WIJVCYL0hAxhlnbVUHCBcT0iLmIbX+Zxah24brKwM/Q=
Subject key identifier: EE:F0:9F:75:E5:97:DC:9A:F8:E9:7F:B4:89:47:5D:FB:42:F8:78:C1
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 019DA3AEDDDD6F1F2E9D83F57FA27F6D9A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0D66
Signing time: Sun 19 Apr 2026 03:00:39 +0000
Manifest this update: Sun 19 Apr 2026 03:00:39 +0000
Manifest next update: Mon 20 Apr 2026 03:00:39 +0000
Files and hashes: 1: 1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa (hash: RiIz/j+OmLa7FEdZbMFlKrhGfrujyA65C/HnMjy7A3s=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: yCEETXnfXYQDsFkAbfO5k3gjM8kCy9doBNOO8FrCpvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:dd:dd:6f:1f:2e:9d:83:f5:7f:a2:7f:6d:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Apr 19 03:00:39 2026 GMT
Not After : Apr 20 03:00:39 2026 GMT
Subject: CN=eef09f75e597dc9af8e97fb489475dfb42f878c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:0d:61:6c:1c:76:b1:1f:cc:27:45:52:ac:
bb:0b:07:a0:59:2e:1d:ab:22:30:f6:05:21:76:e2:
b1:1f:f1:42:9d:fb:4d:3f:72:b8:76:97:42:ba:76:
fd:fd:c3:43:cb:74:4f:ea:05:b9:2e:c7:7e:dc:06:
e5:47:f5:8e:5e:25:35:c4:2a:c3:52:ad:7d:81:1a:
6d:b3:47:f5:32:6b:cf:4c:42:a6:0d:80:95:25:4f:
24:80:ff:6f:f3:a5:50:b1:a5:72:c2:b8:b8:91:91:
22:46:66:94:28:09:7f:c3:5f:a7:e4:68:5e:7d:0b:
d2:94:c9:72:1a:c5:ee:ac:9b:a5:8d:66:b5:f6:5c:
a3:e1:8c:7c:b1:22:48:6e:7b:ef:46:bc:4b:14:3b:
04:ee:9e:c7:6b:9a:7b:db:ff:d2:23:f9:ea:32:78:
02:37:d4:c9:14:26:2c:45:a9:62:8a:13:b4:c3:85:
95:78:02:39:f3:d5:9b:ac:1c:29:21:6d:a0:7b:6a:
08:67:8a:ed:ba:c2:0b:7b:8a:86:bf:e1:e1:f4:87:
a6:67:35:5c:4b:62:f2:f0:98:5f:3e:1d:36:f0:14:
39:fa:2a:0a:b7:2d:e8:70:48:03:94:a0:b6:ba:69:
86:11:1a:71:34:47:36:e6:14:d4:af:a3:ec:6d:04:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:9F:75:E5:97:DC:9A:F8:E9:7F:B4:89:47:5D:FB:42:F8:78:C1
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:da:e5:aa:4f:17:bc:0a:28:8d:64:af:68:8c:19:ca:84:0b:
c0:53:47:c9:cb:bf:d7:9c:ab:a9:33:33:15:25:f2:29:dc:3e:
05:30:60:07:ac:ce:65:d1:d2:be:fa:b9:4e:1a:de:45:fa:17:
fd:11:97:26:84:8c:30:ff:44:05:3e:eb:d2:ab:55:d0:b3:47:
cb:2c:bd:84:32:4d:1c:b6:d2:dc:b4:2f:b6:f7:ac:3d:08:68:
cf:11:80:d5:e8:89:14:65:d3:59:3e:b8:0a:68:66:4e:a2:a0:
c4:b4:4f:33:43:61:f5:a5:37:f1:b1:74:50:a5:ab:e4:d9:15:
99:61:94:00:86:5f:fd:f4:90:81:3c:9e:1b:1a:3c:6d:65:7d:
e9:a2:a3:e4:71:62:1c:ac:55:64:24:e3:1c:21:be:8d:5e:68:
da:8d:d1:97:48:26:66:0b:8e:13:eb:68:ef:2b:dd:b5:16:28:
12:dc:87:46:20:1e:7e:7b:f6:7a:72:1e:e2:c7:23:66:8c:cc:
32:6c:9d:af:99:c6:b5:fc:e6:72:0a:12:fe:5b:19:ed:3c:f3:
ff:c4:a8:b9:e8:19:1c:cf:d5:d1:02:cc:30:b9:fd:99:cb:d5:
1b:4a:51:0d:77:10:c2:c3:e3:a4:b7:13:a9:71:37:0f:c3:a6:
23:e3:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:23 2026 by rpki-client