Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: Ka5Tv2Vrk4BKmhK+je0V+8AXuOj+0Z87Q58KrrwBa+c=
Subject key identifier: DD:A8:AE:50:12:9A:3D:DA:DC:CB:11:43:2E:46:26:47:CF:5D:27:A8
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 019ED574CE04064430E2AFE002F978DE743A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 12:01:02 +0000
Manifest this update: Wed 17 Jun 2026 12:01:02 +0000
Manifest next update: Thu 18 Jun 2026 12:01:02 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: nhwUf2eXwFLj69dT+pcCw3NXhoecaGwCPPaKPfTKyf8=)
2: eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa (hash: AcOLiKex+34XfbpE/I3e+xkSlJ3+mpg+qWqvKQ2QsM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:74:ce:04:06:44:30:e2:af:e0:02:f9:78:de:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Jun 17 12:01:02 2026 GMT
Not After : Jun 18 12:01:02 2026 GMT
Subject: CN=dda8ae50129a3ddadccb11432e462647cf5d27a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:d7:bd:6f:78:25:a8:bc:6e:97:ca:31:7e:
f7:2d:66:b2:51:e4:22:e6:dd:e5:22:a5:54:df:3d:
2c:21:b6:12:73:4f:40:ea:98:16:48:99:82:02:da:
59:fc:d2:bf:d0:5e:f7:20:bd:0f:f0:56:73:cc:88:
2e:cc:48:57:9b:a0:67:49:90:2a:a7:67:f4:98:12:
8d:1a:2d:78:ee:1c:73:2e:0f:3b:ba:ea:aa:5c:17:
04:30:6b:c2:b7:4c:4b:d2:78:fc:6d:e7:c9:c6:63:
1f:7b:16:6d:3b:fe:04:19:b6:50:8b:13:d4:e2:0e:
8e:c3:03:11:52:90:40:ee:17:00:a0:41:e3:96:69:
64:f3:ae:76:45:2e:b6:50:67:bf:33:6e:1f:a6:51:
30:54:a9:3b:26:8f:dd:0b:da:5d:33:9b:f0:81:dc:
66:b7:cf:21:3f:1b:7f:46:c7:c4:ce:09:d7:47:cb:
aa:8b:50:57:ab:b5:bb:5f:68:dd:a9:13:9f:1f:12:
e3:28:e8:4d:b0:c1:5a:1c:4a:a5:7e:0f:a2:1d:10:
80:58:1b:7f:b1:bc:3d:c2:93:d2:96:fa:d5:db:3e:
f4:f0:e3:c0:ec:a6:1c:06:b5:b5:6d:7d:3f:48:f8:
bd:1b:98:5d:7a:e8:04:c7:68:13:85:23:13:e5:bd:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:AE:50:12:9A:3D:DA:DC:CB:11:43:2E:46:26:47:CF:5D:27:A8
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:1a:9c:e3:25:d3:95:85:a2:1f:7a:a2:41:76:a7:26:78:db:
e1:f9:52:9a:da:e8:cd:3d:86:e1:5d:95:3d:42:af:8e:e8:30:
11:57:38:d3:99:02:54:a5:d1:a7:2f:de:e2:de:61:0b:be:d9:
0b:f9:00:f9:0a:96:7f:8e:39:39:e1:47:c3:dd:6c:e6:51:cf:
ce:e0:1c:af:d9:a7:ca:1a:68:79:c0:32:43:ed:8e:bc:15:67:
f9:bc:13:45:b0:97:17:de:cf:ce:2a:e1:42:bb:f3:41:78:e6:
e6:eb:5e:e9:6f:75:ef:b3:55:ef:22:ff:46:cb:d6:18:3f:0d:
12:2e:a6:be:03:ed:e2:8a:ea:55:8c:7b:16:be:9e:27:56:b1:
53:eb:54:9d:59:90:66:01:16:24:8b:1a:5a:06:aa:ae:9d:af:
50:22:94:00:66:4f:13:e8:e4:c3:81:f7:26:d2:17:c8:6c:69:
ed:29:24:a3:4f:89:70:de:7a:31:67:47:6f:e1:83:19:35:a3:
5f:a0:02:94:6d:73:53:eb:37:9b:a7:6b:55:22:6b:6e:7e:75:
ee:8b:17:8f:b4:2d:05:1a:98:5d:bc:75:cf:ec:23:6c:5d:62:
86:ea:5b:39:69:7b:e6:2d:3a:26:21:fe:95:89:97:89:3b:6e:
71:a5:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:20:25 2026 by rpki-client