Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: bfUKiVyYOWiJNVvmJeL1+lLWCEi3tYDCIZSC1DpHVgA=
Subject key identifier: 42:50:5F:36:1C:31:54:DB:A3:D2:13:74:F4:5F:F1:A1:8B:C8:B0:4F
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 019CABA248EFB723830079BD866CDA3E5AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 0512
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: Inia4wkbnTJXBtZdPYUtm7iOFvnAuGrLWV272BpWtxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:48:ef:b7:23:83:00:79:bd:86:6c:da:3e:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=42505f361c3154dba3d21374f45ff1a18bc8b04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:13:32:83:5a:ff:f7:20:28:22:b5:47:25:
d0:b9:c2:8f:19:28:79:de:31:e0:2f:28:a5:4f:25:
4a:28:48:5f:05:42:ae:82:fb:2c:b9:40:67:15:3b:
7f:03:82:33:2c:05:e1:cc:01:f2:a9:81:5e:cf:f4:
b6:81:f5:20:5e:11:75:49:4c:99:bc:0e:14:57:5f:
3d:e1:43:a9:9a:3f:90:56:55:49:0a:5c:9a:fd:a1:
c2:83:3e:cb:6d:fc:a7:29:85:30:10:fc:7f:e4:6f:
cb:9f:e0:05:6a:09:30:5d:fd:a5:4f:ec:e9:bd:cd:
50:9f:f4:a2:78:32:e3:2d:5d:9b:13:5d:31:4a:88:
c2:65:69:52:d6:3d:cc:6b:ee:13:40:53:b5:f3:d8:
8f:a9:d3:ac:fe:d8:e8:ea:c8:ae:bd:20:c7:4e:9a:
27:fe:3b:19:01:e5:f5:4f:9d:8b:26:19:f7:b2:73:
0a:32:49:c9:c4:2e:4c:32:ba:37:11:33:a9:8c:9c:
bd:40:2b:37:43:61:5b:ce:2a:12:b6:c4:22:bb:f6:
e4:ef:6f:dc:36:84:18:47:11:5f:cf:be:82:e5:fc:
f5:af:0d:fb:15:2d:01:75:8c:5b:20:52:6d:f6:81:
bd:2b:5f:6b:3b:70:63:24:c7:6e:e2:af:0a:78:8e:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:5F:36:1C:31:54:DB:A3:D2:13:74:F4:5F:F1:A1:8B:C8:B0:4F
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:81:ac:21:33:cc:84:f6:60:37:32:3f:35:3c:ee:01:f6:
57:ae:38:9c:87:db:87:24:62:d1:a4:52:ff:11:01:9d:51:18:
c8:d8:28:4e:82:83:7d:dc:b9:fb:7b:08:b0:7f:7f:ae:4b:b8:
82:91:19:0d:18:c7:d9:aa:bb:31:7f:6c:fa:44:58:9e:26:0f:
08:99:26:93:bf:0e:d7:87:2b:b8:c0:9a:31:14:bf:d5:a2:1a:
cd:3d:30:2b:1c:25:0f:37:fe:9c:23:1b:1b:cd:f7:a5:4d:63:
19:5c:a0:98:7b:6c:e7:8c:35:dd:c6:9f:13:97:91:c5:14:7f:
55:8e:2c:6c:5e:f3:ad:48:42:e9:00:ce:a1:ad:f2:69:0b:ed:
d5:62:5e:cf:75:b7:a6:15:c7:0b:f1:7b:ef:87:b4:60:16:4f:
74:17:80:90:8b:26:03:b2:a3:22:be:4b:76:0a:b9:4b:49:b1:
fe:07:eb:b0:e3:e5:78:50:bd:0b:34:fc:ff:22:8e:e0:67:1d:
53:e9:4f:39:49:04:10:57:b2:06:9f:cb:51:99:a0:0f:71:2d:
5a:91:e5:09:eb:f0:a9:b8:5f:3f:86:09:a8:7b:f6:fb:59:ee:
b7:7e:01:16:48:29:50:8e:1e:67:60:37:8f:85:31:4a:db:6f:
57:98:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:10 2026 by rpki-client