Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: tQoF5ZvdCcTrvUSzn9xb69E0i4rMrJFPP3jrHq4QlHU=
Subject key identifier: DC:0C:A1:BE:02:5E:9B:9E:26:44:66:E1:70:4A:F5:D8:8E:F3:34:8F
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019CAF10D8241ED0CD0A803EB129CEF5492D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 15:00:42 +0000
Manifest this update: Mon 02 Mar 2026 15:00:42 +0000
Manifest next update: Tue 03 Mar 2026 15:00:42 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: 2pw1lvkFhKTXwUShLDXuTFztStLfkUKv5ku9DGw8Sm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:d8:24:1e:d0:cd:0a:80:3e:b1:29:ce:f5:49:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Mar 2 15:00:42 2026 GMT
Not After : Mar 3 15:00:42 2026 GMT
Subject: CN=dc0ca1be025e9b9e264466e1704af5d88ef3348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:73:96:c1:44:7e:29:27:79:ba:89:43:43:
62:fb:0a:0b:35:5a:22:14:60:28:c8:2f:6d:80:cf:
ba:f6:3a:f3:df:fe:56:c9:0d:66:8d:e1:8c:22:7c:
f8:09:d2:a3:af:35:5c:22:b5:67:53:35:28:f6:ad:
f9:40:62:9b:da:44:b3:68:9b:fe:7b:57:a1:be:c3:
02:f0:bf:0f:32:b1:17:3e:a5:04:74:9d:83:fb:b4:
bf:52:46:27:e5:8d:45:5d:85:2f:46:95:75:0b:46:
71:f0:18:69:b2:65:6f:eb:bb:a2:e1:3f:5a:f7:12:
36:45:bf:13:d6:17:c9:4c:ec:7f:d8:0c:4f:98:32:
90:ec:a3:a6:cd:0a:c1:4e:27:94:65:d8:e2:6d:ff:
e5:e8:30:e8:c1:13:d8:d4:9a:d1:dc:23:20:9d:69:
e6:bb:3f:ef:2c:30:ab:48:7f:bb:10:28:b8:99:3b:
ac:27:44:97:3c:77:d8:bb:99:58:c3:59:bc:36:15:
0e:ea:34:f2:5e:8a:c6:28:7d:4f:bf:e5:86:93:48:
6f:58:bf:2f:66:76:3f:f6:30:f0:08:32:04:ae:f8:
fe:56:f5:08:d9:ad:7b:e8:06:5d:7d:6e:07:8b:09:
e1:eb:73:f8:cf:f8:5d:30:f5:7e:fd:72:d4:d7:1f:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:A1:BE:02:5E:9B:9E:26:44:66:E1:70:4A:F5:D8:8E:F3:34:8F
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:60:50:23:5b:ea:92:52:43:fc:9f:72:f7:1f:a3:e9:49:dc:
18:be:51:c1:48:5e:ea:ed:10:f0:f4:2b:6e:af:61:a9:7c:2a:
4a:52:7d:84:46:15:d7:78:23:b5:c1:59:04:5b:a0:e4:9c:06:
cf:02:53:50:2d:19:8c:b8:24:1d:48:db:0a:07:5f:27:29:16:
a4:44:90:29:5a:bb:90:5c:d9:29:a4:a6:0c:93:0d:50:3d:9d:
5f:90:ac:85:02:fd:cc:c5:b0:1b:c9:2c:3e:6f:59:51:e3:fe:
94:c0:99:c3:37:4c:25:73:b0:cf:48:d6:94:a5:67:4d:2e:96:
9e:fd:db:6a:bd:1a:eb:b2:3f:b3:b1:5f:94:2a:4e:d1:22:81:
ec:a5:ed:92:12:42:d7:87:52:69:71:bf:3c:28:97:9c:0e:93:
30:ee:e8:3e:a7:1b:36:b6:ce:8f:22:1e:53:21:54:23:50:b6:
60:2f:71:46:73:28:97:ad:a8:a1:29:23:1b:34:ee:c0:b2:e1:
36:9f:94:d6:5c:45:63:77:c2:b6:c1:21:32:57:01:c7:21:a3:
8e:d6:05:02:1d:68:29:45:93:25:b8:b7:e2:eb:26:96:7e:25:
94:55:6d:ee:26:72:d0:91:90:16:37:95:20:fb:2e:20:48:92:
12:a1:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:58 2026 by rpki-client