Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: g4O253KEUxA0RgbfO7MwY3iah30DJfooHEhh2gjZDlE=
Subject key identifier: 46:06:28:8C:3F:A5:98:B0:B7:30:BB:8D:CD:37:BB:AA:CA:1C:E3:C4
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 019CAC7DF2C5BE51DD4E8657B2CE9C044E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 1775
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: 5QmOeOcUdY7PgR2mhomMmURmuqs.roa (hash: nAdOMEid1C3Yq0ETT9B3VCzoGTlapbIXU3Ku/VQ6Zh4=)
2: eyf8XzSbncmCJU29RuqgmWhSNro.roa (hash: mUIcsYMRdVByHfVcrIRSb1EWADuJM/ORhSKfGGlrQmI=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: YgoxD28bHpmYbrPNvYUFSaZaz3V9357LAtUOFGw7VGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f2:c5:be:51:dd:4e:86:57:b2:ce:9c:04:4e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=4606288c3fa598b0b730bb8dcd37bbaaca1ce3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:8c:8a:3c:1d:d8:b8:db:ab:b5:ee:d9:f9:
b3:ef:bf:df:ed:bb:25:70:24:8c:4e:4b:b6:b6:0c:
e6:d5:2d:90:54:04:c3:96:65:b3:69:fa:50:a2:c2:
ca:5b:fb:a4:15:9b:f0:04:df:27:31:e3:a4:cb:76:
e4:9c:c3:42:af:7a:02:b3:75:27:6e:09:56:12:ca:
fa:81:93:67:3d:49:a2:e0:15:de:28:b8:99:a7:ad:
02:f1:01:07:0e:fc:c5:92:c4:52:3a:5a:eb:33:f7:
f5:8d:f5:4a:a2:f4:4d:09:f3:f6:eb:ea:e3:f6:6c:
3a:6e:35:b7:65:24:e4:35:f4:31:9b:53:e6:ce:db:
a8:5e:38:c9:a1:64:8d:2c:af:30:0b:18:84:49:2b:
ae:da:a2:04:b1:73:79:91:7c:90:96:46:28:e9:fd:
8b:62:c7:12:12:dd:a5:fc:db:c9:b1:97:9b:fe:3e:
cc:cb:28:d4:67:73:29:45:77:bd:b7:97:a4:08:68:
68:15:01:92:9e:f4:40:9c:7d:1a:99:e2:0b:31:dd:
13:07:48:3c:4d:fe:27:e9:a6:12:5a:ed:ad:25:29:
03:f0:09:72:14:98:76:51:5e:23:e2:ff:47:9e:5a:
ef:cb:fd:7e:cc:43:80:c5:fa:91:14:cf:ba:57:79:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:28:8C:3F:A5:98:B0:B7:30:BB:8D:CD:37:BB:AA:CA:1C:E3:C4
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a7:48:56:af:80:79:27:1c:e9:c1:61:2e:69:53:ae:b6:40:
e5:4a:85:8a:f4:b7:3b:39:10:65:67:50:d6:90:34:0c:fa:57:
72:a6:98:98:2e:d2:ab:01:3a:10:d7:4d:10:28:58:65:74:a9:
f0:34:57:96:d5:6e:a0:f8:22:a7:6c:06:c5:48:d3:45:1e:36:
ac:55:5a:74:7f:c6:54:b4:7b:fb:f2:bc:34:d2:41:8a:2b:ce:
a2:57:8d:2c:0a:ee:e1:43:9b:2f:9d:af:8a:15:5d:34:ba:7e:
9b:1b:2d:c9:ea:04:a0:3d:f6:5e:b7:b8:a1:8c:f8:8d:1c:3e:
51:36:10:5e:78:96:34:87:a6:04:60:03:3e:a4:91:80:c6:d2:
d1:22:95:2c:00:1d:b2:c3:b0:bf:b3:23:6b:db:12:d2:75:4a:
23:72:cf:18:72:84:2c:85:f8:29:62:2e:fc:31:1a:5e:5e:02:
74:87:f7:17:1b:77:c8:f1:b5:35:44:fe:53:c7:2b:0a:1a:93:
de:a2:99:fd:c8:be:a7:12:bc:f7:7f:de:73:72:10:24:58:4b:
5c:70:b4:c4:46:f0:4d:49:a5:f0:e8:68:cb:58:78:16:3b:34:
3b:28:da:a0:cd:e6:20:8b:e4:63:c7:1c:b4:68:91:13:65:08:
82:31:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:02 2026 by rpki-client