Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: lt4hYjC50b1JLqqhEkNWxqvr9Bn91UDJyrgjSWxOcpo=
Subject key identifier: B7:8D:4F:9F:17:57:83:55:D9:C2:DE:1C:C9:F4:E2:8C:35:4A:2B:0F
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019CAAFD23EE573E8F231860F2725B563239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0D63
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: N7Jj5bGEqHlT7r2d7FfZLWqB3burBOxgRbZvc2uLtGM=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:23:ee:57:3e:8f:23:18:60:f2:72:5b:56:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=b78d4f9f17578355d9c2de1cc9f4e28c354a2b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:8d:e3:16:dc:e1:09:14:80:2d:6f:2a:31:
9a:79:57:de:37:bc:b4:1f:7c:fc:b4:5c:2f:97:7a:
62:6d:b7:aa:86:82:cb:d2:b4:33:79:ab:7e:0d:18:
6b:b3:50:5b:28:14:95:24:33:8d:b2:90:cb:e6:9a:
f9:39:3f:72:4a:c7:dc:8a:6b:02:20:4a:b8:d1:c2:
a9:ea:54:1a:e0:c8:17:18:63:a7:bc:61:87:64:f4:
34:58:96:e8:98:55:e3:42:2f:fc:ac:c2:77:76:04:
6b:18:d5:9c:86:03:9d:17:19:e1:fb:5a:2b:b7:c9:
5b:a2:5f:64:92:bf:7c:7d:c8:8a:7b:f8:9e:60:02:
d7:9e:63:fd:1b:a3:e2:cd:ee:ee:5d:09:1d:4d:7a:
04:a0:5b:10:9f:48:bc:70:dc:05:26:f7:2a:33:2e:
66:69:5e:93:50:d2:0a:aa:c6:b7:79:28:96:a5:a8:
88:bf:f9:3f:b2:a4:26:cb:8c:cc:77:98:7d:39:83:
cc:09:c6:84:31:7b:86:c4:94:6b:18:5a:56:57:e7:
2b:14:86:e6:82:69:1f:51:d6:68:69:73:ad:19:4f:
fc:01:65:d2:ad:19:31:a1:28:8b:34:41:85:a8:b3:
a5:3d:05:f0:5d:db:38:60:dd:47:5f:51:11:51:38:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:4F:9F:17:57:83:55:D9:C2:DE:1C:C9:F4:E2:8C:35:4A:2B:0F
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:e1:1b:0e:d8:28:bc:e4:20:6e:b6:d4:17:7a:b1:15:d2:
68:c3:06:62:2a:90:2d:7a:28:21:51:db:76:ee:b0:9f:04:48:
7c:33:23:75:83:2e:69:1d:98:de:54:d8:40:90:dc:f5:d5:8a:
ec:0a:36:53:36:d0:dc:e2:50:6e:7a:a4:d4:87:e1:b7:0e:d8:
79:58:57:f5:57:6a:a1:5a:20:b9:cf:76:cb:8b:58:50:1d:47:
69:63:12:e7:0c:b9:fe:50:b5:92:55:35:95:6b:26:84:ae:94:
ea:d0:37:d7:71:55:ca:20:ea:8f:06:ef:bb:05:f9:ef:d5:3f:
c7:4c:7b:b7:0c:64:4b:a5:bb:2a:2e:c7:db:57:cf:40:cf:a3:
61:0d:e0:20:de:70:b2:44:9e:7e:81:47:3e:48:b9:e0:bd:b0:
33:f2:d7:9d:45:29:65:24:23:af:fc:81:f8:05:cf:3e:ec:fe:
e7:cc:a1:d2:40:b9:98:29:d2:ac:9a:35:4d:27:4c:34:ab:f2:
36:d1:f1:d7:a4:af:da:34:6f:b8:76:6f:89:c5:b4:82:64:e9:
39:4d:db:31:1a:34:8a:96:95:be:08:07:22:c2:96:ca:93:f1:
1e:8e:cc:97:c0:56:44:71:65:b4:d4:52:5f:d3:d0:2e:b0:e4:
2a:15:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:05 2026 by rpki-client