Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: /r9ZTDdfgi2E+WWAmneGYlo72V3bobdQvk1Y5MvDT+k=
Subject key identifier: 16:70:23:34:84:50:1D:F4:E2:AD:FE:09:76:F1:39:A5:8D:54:D9:C7
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 019CA9463E006B67148F8A99D01B6F2825AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 12:01:18 +0000
Manifest this update: Sun 01 Mar 2026 12:01:18 +0000
Manifest next update: Mon 02 Mar 2026 12:01:18 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: 4xb2r4lHTcCpv9q8SZo16h5xanCcLcQK8veOYoL13wY=)
2: eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa (hash: AcOLiKex+34XfbpE/I3e+xkSlJ3+mpg+qWqvKQ2QsM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3e:00:6b:67:14:8f:8a:99:d0:1b:6f:28:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Mar 1 12:01:18 2026 GMT
Not After : Mar 2 12:01:18 2026 GMT
Subject: CN=1670233484501df4e2adfe0976f139a58d54d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:64:ab:e7:b4:b7:64:c2:67:7d:7e:2d:42:
9d:89:85:99:b4:76:52:cd:1d:2b:37:53:a8:fd:eb:
cf:00:cd:10:43:79:76:46:c1:01:3b:01:1c:92:7d:
af:82:90:cb:2a:69:30:b5:03:5c:7f:37:2b:f8:bf:
12:66:e4:fc:6f:da:de:b1:4e:80:e7:a5:e0:ab:31:
f0:83:fe:a3:69:2b:e3:5a:2d:6b:fd:35:ba:f0:43:
04:95:f6:3d:6e:14:a5:67:31:62:1e:76:3e:ed:ab:
99:77:fc:a7:13:35:46:68:fd:b2:e1:f5:1e:27:20:
24:ac:08:ce:1b:b2:5f:a4:f7:ce:4d:e6:d3:8a:a7:
d9:ff:5f:20:3d:58:55:56:ca:a6:d3:11:7b:ca:49:
73:b0:96:2c:b3:b3:13:9c:a3:2a:ed:ea:40:8c:07:
6e:1f:f6:72:6c:97:82:14:fc:ba:9d:1f:db:49:c2:
e9:50:c0:b2:59:10:83:0c:6e:33:62:7a:a2:6c:25:
23:c3:db:8b:6f:e8:15:9d:e6:9c:e4:02:4a:c0:0f:
e4:73:14:9d:69:0d:46:2e:27:51:65:0f:32:4f:c2:
81:84:c3:9e:13:0c:50:bd:1b:77:c3:53:09:0a:1a:
44:e0:9a:1b:0a:95:94:4e:59:0f:2e:0e:84:29:bb:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:70:23:34:84:50:1D:F4:E2:AD:FE:09:76:F1:39:A5:8D:54:D9:C7
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:a8:d2:41:27:bd:b5:b7:5d:a7:6e:2c:08:43:c8:d2:7c:
5e:52:73:48:3b:cb:f7:a4:47:3b:29:ce:f9:d4:e6:13:f9:32:
99:d9:49:5a:2a:36:64:9d:13:34:d6:e2:83:b9:6d:6f:0e:5c:
af:de:4a:13:ec:ec:4f:a9:1b:42:d4:f2:98:e2:3c:b8:ec:a7:
02:52:d2:27:af:9a:85:fe:bd:4b:38:ad:cd:e2:61:8a:f7:80:
9b:4e:5b:60:b2:54:65:39:21:fa:3f:26:a1:6e:86:84:1c:6d:
7b:4d:55:78:0a:eb:54:1d:90:d9:84:13:f6:f4:95:2f:6a:cc:
52:8b:06:a9:dd:77:6c:be:31:42:bd:97:14:33:1d:e9:ce:50:
fa:5c:24:00:85:a2:bc:41:c5:ed:f6:c5:39:31:f5:8e:56:7c:
64:e4:d5:88:09:c0:fc:bf:02:9a:21:72:53:50:75:36:e9:37:
18:91:df:cd:33:18:9f:4f:18:c9:56:10:4b:0a:a1:e6:a4:0c:
38:02:91:63:b7:b8:56:99:cb:19:9f:31:34:05:ef:38:dc:b2:
1d:bf:c7:a7:62:16:90:f2:37:a5:58:b5:32:81:95:5e:cd:79:
d5:3b:b3:4c:0d:d3:cd:ee:f4:c3:f9:b6:e9:b0:0a:5e:be:52:
89:2a:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:28 2026 by rpki-client