Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: 5ZMd/e0G4p2LvXlKEXTaBk8n+gytKnI5M3/j6XzL8Nw=
Subject key identifier: A5:CC:D2:56:40:EA:06:05:04:3A:2D:53:AB:F9:4C:5A:FA:B6:E1:15
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019CAB6B3E0D1136739B4FD4C69F4F576AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0F6F
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: nUDU97pR5j7Qy4z5BMXdi5MY6k82fP4rx7IFNweXmaA=)
4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3e:0d:11:36:73:9b:4f:d4:c6:9f:4f:57:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=a5ccd25640ea0605043a2d53abf94c5afab6e115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:70:34:16:99:19:43:4d:95:9e:0f:5a:47:
9f:69:2a:ab:98:a3:76:1e:06:80:27:9d:fa:98:36:
74:10:9d:09:90:56:7d:44:bb:a1:01:c5:73:61:a4:
08:e5:fa:4e:7d:e2:91:a5:a0:59:df:59:3d:49:3c:
b9:e7:c3:af:f6:bd:e4:8a:83:a0:41:b4:d5:2b:9e:
22:ac:1b:95:0a:1f:5e:45:6b:f8:7b:96:7b:75:0d:
3e:75:84:48:89:a6:37:e2:d3:55:92:75:6f:5c:20:
f1:8a:ce:9a:fd:38:c1:71:b1:a5:d8:35:3f:b9:9c:
ea:67:07:f7:6a:9b:15:91:3a:c6:9d:d4:52:11:d1:
c8:de:4c:46:83:e8:26:65:45:4b:20:e9:e2:d5:fc:
ac:b3:d6:d2:58:65:2b:72:10:02:58:c6:a0:45:e3:
26:0f:9a:2e:34:65:c2:91:9a:39:fd:87:11:02:5c:
33:86:fd:6d:ce:7e:14:e4:66:3c:44:f7:8e:73:92:
45:27:72:a6:bf:f7:2f:26:75:f2:f2:d4:52:f5:9b:
c8:48:16:86:b0:ab:4f:3c:4d:42:ed:b1:54:d8:97:
ca:6a:41:5f:cc:01:e3:32:67:5f:fe:5c:72:fa:5a:
b4:eb:d7:68:2d:cd:84:51:3a:96:dc:aa:7a:de:99:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:D2:56:40:EA:06:05:04:3A:2D:53:AB:F9:4C:5A:FA:B6:E1:15
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:74:02:0f:f8:7b:d3:a0:eb:ce:b9:05:68:55:6c:8d:3c:f5:
ed:e1:30:87:8f:1d:87:0a:bb:bb:60:4e:4c:7d:12:24:44:f5:
48:ce:b3:f2:5e:8a:97:57:e0:12:3e:c4:f4:70:60:e8:8e:88:
2c:e7:29:cb:d4:d1:41:c1:b2:07:c5:eb:68:4e:b0:3a:12:ff:
db:82:e7:64:04:7d:b8:da:3b:58:43:bf:c6:b0:70:31:8c:62:
29:87:5e:4d:95:be:dd:c2:11:17:e2:a9:94:b2:60:d4:fd:74:
8e:9c:2f:8a:e0:a7:ea:5d:8c:cf:94:b3:59:b8:53:19:df:77:
6c:e7:e0:86:57:8a:8b:18:8d:87:98:98:d1:71:74:e5:c4:38:
6b:7d:75:ea:c8:1c:66:85:57:83:8b:93:40:45:51:0c:28:6b:
a0:1a:1e:84:41:19:64:ef:87:9b:bc:a8:c8:f5:35:2f:61:63:
f9:5d:fc:88:cb:1a:11:1a:ff:7c:e4:68:c0:02:ab:d3:f2:2e:
c0:1d:96:b5:ec:0f:61:7c:55:2a:64:94:16:2e:8c:f2:5e:2e:
a0:24:14:ba:a4:a9:79:0f:70:6e:c1:3e:c4:c3:46:e9:3b:77:
7b:8f:63:80:e3:6c:fd:96:d4:e3:67:c0:f8:b2:54:b1:8a:a2:
ed:ff:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:59 2026 by rpki-client