Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: qz2SmSLAZf2hyCRD+vvL5XiefZGyRUwoor90U1v6heU=
Subject key identifier: A3:1C:4E:85:15:04:8B:D8:DD:18:AB:62:A4:A1:8A:E2:EC:05:76:52
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019CAD5A3552B459E2CC90B33791464ADE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 1246
Signing time: Mon 02 Mar 2026 07:01:36 +0000
Manifest this update: Mon 02 Mar 2026 07:01:36 +0000
Manifest next update: Tue 03 Mar 2026 07:01:36 +0000
Files and hashes: 1: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: fETCUKa5P2esT61Re8mUwRJScKSgbRaUCyQbTKM3RHA=)
2: qOlFxZL8qRvtCfn6pv83b3CjTWk.roa (hash: yAGRaZNO2UXU7Vp3V5rpWxYXofVJuCbat4KTkM4jlWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:35:52:b4:59:e2:cc:90:b3:37:91:46:4a:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Mar 2 07:01:36 2026 GMT
Not After : Mar 3 07:01:36 2026 GMT
Subject: CN=a31c4e8515048bd8dd18ab62a4a18ae2ec057652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:8b:33:2e:c8:29:29:88:c9:34:eb:4e:ff:
1f:c9:62:73:06:cd:9f:a6:b8:38:84:6b:a1:a9:11:
02:db:20:be:64:f7:dd:e7:32:e2:fe:85:b1:c2:1b:
44:82:8e:b4:96:bd:9e:3f:aa:5c:0b:ca:b6:ba:fe:
a4:2d:ac:79:37:27:ce:31:64:ea:00:1d:48:ee:5e:
6f:f0:3f:dc:bc:62:c4:4b:7b:9e:a9:fa:4c:47:20:
02:92:b5:d5:b0:3a:61:5b:93:c9:13:98:5a:d6:07:
75:46:44:6b:56:3e:82:9f:21:ad:48:2a:53:57:0c:
d5:b9:bb:7a:b7:55:29:48:36:fc:84:27:99:b0:bb:
66:d1:fb:91:f9:2a:18:e5:96:63:c1:5a:48:51:ba:
1e:eb:0c:da:20:a0:da:ec:27:cf:e9:a4:aa:3b:11:
7f:a6:02:64:f3:c7:19:ae:10:eb:a8:cb:de:bb:d9:
f2:e3:56:17:64:a9:89:a9:72:56:7f:76:41:42:04:
29:86:1b:12:5f:60:b4:88:cb:5f:4d:59:43:7a:3a:
a8:34:03:68:09:ee:12:f9:21:61:af:a2:7f:72:2c:
75:6c:dd:39:ae:2e:dc:2d:e7:31:16:37:1f:48:0e:
ef:7b:0f:6e:bb:0b:d6:e1:0a:d7:51:ec:5e:83:6a:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1C:4E:85:15:04:8B:D8:DD:18:AB:62:A4:A1:8A:E2:EC:05:76:52
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:90:ee:d5:ae:cc:89:2c:7f:e2:5c:d7:ea:32:c6:59:83:5b:
d0:3c:a4:46:b7:25:7e:59:60:dc:1f:1a:4c:a3:8d:1c:68:fd:
40:60:28:df:d3:22:f5:96:8d:d0:42:48:78:a7:46:8e:f9:bd:
59:95:1a:18:33:a2:27:75:de:35:f3:04:96:dc:dc:e1:a2:6e:
c9:62:fb:a7:91:14:11:23:87:75:ba:12:c3:27:33:61:9a:17:
08:64:f8:38:25:bc:70:4a:39:22:49:b7:1e:f8:81:a3:11:26:
ec:ec:da:a8:f3:b7:8c:82:0d:e5:6d:c2:f3:ac:55:a4:a9:b6:
42:96:5f:87:ce:11:53:d8:8f:c0:65:c2:bd:4b:ba:cc:f6:09:
0d:ef:e5:b4:7e:20:f4:65:38:71:0b:8b:d0:a9:4d:0d:93:82:
fe:4c:eb:92:c9:ea:95:d2:db:e3:a4:f5:c4:f5:25:69:bb:ba:
c6:de:b6:b5:5e:21:c9:73:1d:8c:e0:fe:21:7d:c0:c2:06:41:
43:20:14:b4:55:f2:2e:1d:f9:94:4a:af:77:11:cf:0e:c8:42:
07:09:ac:7d:e0:89:b0:89:46:40:7c:2e:14:f9:e1:e4:06:fa:
fb:80:4d:bf:43:a4:e3:07:b4:87:7f:79:ed:56:f5:76:f1:bd:
42:e0:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:47 2026 by rpki-client