Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
File: KdlQvBhFV79QTPK3yUp9zsCHbWY.mft (raw, json)
Hash identifier: a24FzH2c+YLYl2fK94pljzSJ5VXfC3kzubDk7IMTUns=
Subject key identifier: E7:8E:EF:0F:0B:1C:27:60:E2:F9:B8:26:64:48:D5:6E:CE:AC:C2:92
Authority key identifier: 29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
Certificate issuer: /CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Certificate serial: 019CAAC6C69C2D8867B75847DB359A878173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: KdlQvBhFV79QTPK3yUp9zsCHbWY.crl (hash: OVGtrlKjk1Z+MJX4OpSMbTfsOtE2udJt4ZlFTMF+Epc=)
2: bXOv_CUuxonwS19Bf5bYfNwVcEw.roa (hash: pgxwkEVra6Le7zeKVNiooLUsbulw8SiiT7aDE/ZBWEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c6:9c:2d:88:67:b7:58:47:db:35:9a:87:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d950bc184557bf504cf2b7c94a7dcec0876d66
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=e78eef0f0b1c2760e2f9b8266448d56eceacc292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:2a:81:66:2e:b8:8c:31:26:a9:ed:d3:b6:
bd:da:15:71:b4:ae:cc:f5:56:ea:e2:f2:b9:c1:bd:
3b:0b:46:09:77:6f:f6:83:40:8e:21:aa:8e:ad:01:
d5:1b:63:d2:77:6d:59:db:07:eb:43:48:c1:b6:7c:
d4:f1:e9:04:ca:16:e3:71:2e:68:d1:dc:a3:4b:9d:
0f:01:fc:41:09:f5:14:ef:65:41:4e:51:25:cb:b8:
7c:39:ba:44:fd:8c:15:90:cf:bc:e8:99:31:67:4d:
77:3b:dd:6f:24:0c:67:26:dd:de:c5:21:4e:bc:20:
02:fd:16:0d:a2:9b:c6:25:3d:1a:cd:7f:5f:47:ff:
b3:9d:89:65:97:fe:78:b5:a6:95:a6:0d:17:4d:9e:
d7:36:7b:ff:be:dd:47:2d:1a:12:3b:14:39:1f:6e:
22:32:1a:3f:0a:91:d7:70:2c:08:4a:7c:cc:da:59:
b7:de:6c:c0:a3:10:b1:ef:8a:ac:f6:c5:dc:6d:82:
2e:63:e0:d6:6d:98:f5:42:10:90:3a:bc:9b:27:c7:
59:ad:24:c2:48:bb:0b:c8:29:2f:e2:fd:97:48:45:
23:fc:9d:bc:e1:fc:e5:08:13:37:30:df:99:06:37:
eb:2c:14:31:8d:bb:02:83:b5:d1:b8:59:04:81:50:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:EF:0F:0B:1C:27:60:E2:F9:B8:26:64:48:D5:6E:CE:AC:C2:92
X509v3 Authority Key Identifier:
keyid:29:D9:50:BC:18:45:57:BF:50:4C:F2:B7:C9:4A:7D:CE:C0:87:6D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdlQvBhFV79QTPK3yUp9zsCHbWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/772fea-4715-4010-8c1e-dee66a35506c/1/KdlQvBhFV79QTPK3yUp9zsCHbWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:7c:60:09:15:e0:18:57:6f:98:38:d0:df:bc:6b:56:14:
59:64:34:bb:5c:52:01:40:2b:96:5c:e6:b0:c7:17:aa:2e:20:
f5:26:39:01:28:f3:34:9c:3e:f6:f9:1e:2a:e4:85:38:d9:1e:
ab:44:cc:d6:1d:20:6c:01:55:16:33:07:59:74:19:90:c1:c3:
4b:1b:d4:d4:7d:94:e2:c5:03:4e:7a:3b:90:17:0b:ff:3b:0f:
67:c7:2b:c4:c9:57:dc:e2:89:d9:d6:22:b6:2b:2f:94:4b:29:
4f:fc:07:a7:2c:45:bd:7b:d5:0e:a6:75:c3:d5:32:ca:1d:42:
1a:52:76:e0:48:5f:02:2b:1f:e6:b2:b1:bd:fa:37:d1:90:5c:
1b:c9:4e:97:56:22:79:22:c5:57:ca:cf:3f:3d:1a:24:52:ac:
15:8b:e2:a1:b9:18:d4:07:d1:66:7c:3d:21:64:09:bb:08:25:
66:33:d5:a5:65:98:1f:2a:11:44:f3:64:9f:ce:20:da:20:3e:
41:0e:16:f6:a9:86:76:6e:77:ff:c3:46:f8:10:e4:2b:23:be:
77:40:be:cc:b7:58:69:08:a6:44:b8:52:17:1a:1c:79:d4:9e:
3b:b9:14:3b:10:80:db:74:c7:c7:57:62:54:7d:da:7a:11:b4:
76:90:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:00 2026 by rpki-client