Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: TRhk8f1paa0dhQZNjZsvtw8KsFsLWEfEj/gLHmaJNFY=
Subject key identifier: 21:0B:28:08:81:79:AC:93:CB:23:74:2C:74:A3:BD:94:F6:9C:D7:27
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019CAC4719EA80968291AE8489DA2BE7FABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:06 +0000
Manifest this update: Mon 02 Mar 2026 02:01:06 +0000
Manifest next update: Tue 03 Mar 2026 02:01:06 +0000
Files and hashes: 1: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: 00aw7olkR3PuxYm21UpL6phY7aGk/QxWJQUKRtZcVjg=)
2: mc9vgt48FDSSjfdsSGOMMwU_Xnc.roa (hash: 7YStYGH0X3lXXsv/wC32bvyXMwAf6g2zLLXt60k5Dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:19:ea:80:96:82:91:ae:84:89:da:2b:e7:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Mar 2 02:01:06 2026 GMT
Not After : Mar 3 02:01:06 2026 GMT
Subject: CN=210b28088179ac93cb23742c74a3bd94f69cd727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:1e:25:1e:9f:96:d3:cd:04:bb:0e:98:46:
d1:30:84:42:7f:04:e5:01:9d:ab:e8:29:a8:59:d7:
38:93:c5:71:d7:9a:03:71:b0:95:34:47:fb:a0:d1:
18:f9:d9:5b:cc:9e:19:d2:ba:c3:81:a3:9f:26:ae:
c3:39:66:c3:1f:af:11:46:90:f3:71:58:f7:cb:86:
12:b5:66:d4:d0:23:2d:ca:4a:f6:ba:66:43:41:cd:
95:6d:ff:09:87:a6:47:ad:9d:8a:e4:a7:49:0c:13:
22:66:00:64:c3:9f:bb:59:ba:78:f3:77:46:97:3f:
c1:57:eb:3e:d1:5e:83:be:54:4b:b6:13:08:42:6e:
90:af:f9:a1:db:17:b2:06:35:2c:6b:3e:e5:cf:b2:
8b:5e:0f:e1:5c:fa:d9:3f:bb:f2:24:d3:a2:47:9c:
c9:ae:7a:62:66:e9:04:5b:7a:26:12:de:2b:43:20:
48:3f:8d:5f:54:ed:53:6e:f8:93:4f:f0:51:df:c2:
c4:6f:de:88:62:19:98:15:69:f1:1e:72:f0:6d:d8:
1a:ec:78:15:38:84:93:5f:1b:b2:31:42:28:78:2b:
7c:fe:ea:75:2e:15:fb:a4:33:d7:5b:02:eb:70:42:
22:d0:47:b8:d5:a6:d2:bb:54:7e:10:89:35:d6:9b:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:28:08:81:79:AC:93:CB:23:74:2C:74:A3:BD:94:F6:9C:D7:27
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:d2:31:56:22:fa:4a:df:a9:81:64:82:01:f7:fd:72:c5:
88:1b:12:f5:ab:79:82:7e:0b:71:06:96:e4:23:6b:8c:32:ce:
e0:40:4c:0e:4e:bf:e9:cc:7a:54:55:db:64:28:05:24:11:c9:
96:82:48:80:75:e2:75:3a:ad:0f:11:65:b1:74:f9:83:e1:a6:
c2:78:21:5b:ab:18:ba:d9:da:5e:c6:4f:76:1a:17:22:9f:d5:
6f:cf:f8:0c:0b:9d:a6:22:be:33:0c:e5:62:5e:c6:96:96:a3:
8d:99:45:8e:b8:2d:86:5b:21:62:48:37:48:af:d6:f8:5a:95:
d2:38:fd:7e:bf:14:0d:cb:fc:a2:ea:3a:ce:3c:9d:fd:36:6d:
c8:04:c2:9b:b5:c3:e1:be:71:aa:b5:1f:ae:fe:5d:8e:88:81:
a5:41:24:da:ff:39:00:db:f0:f4:d7:1a:a9:1a:f3:bf:ff:83:
96:1f:bc:ed:5a:0c:73:9e:69:29:6e:92:45:c8:2f:ad:bc:28:
64:37:4e:e2:c3:0c:19:5e:83:fe:85:79:d3:b6:d7:7c:7c:fd:
ad:77:dc:7d:aa:26:03:b4:3b:3d:f2:52:ac:ca:86:1d:f1:95:
98:3e:a1:54:3d:ef:2c:15:bc:b2:58:1c:de:59:9f:8e:8f:94:
63:a9:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:13 2026 by rpki-client