Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File: KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier: GwPapLVVZ2NoapYCAnbajuX0AhCIlD7FwbjkQqAwnFk=
Subject key identifier: 0A:28:11:CD:1E:79:E5:E1:EB:04:A4:92:04:C6:83:66:31:40:4B:54
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer: /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial: 019CABD9E213181FAE81FDB3E5377D9EC325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: t6IzdNiYazwJtjObECjP6k9h9Lw7TMMtnIL3vX88RcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e2:13:18:1f:ae:81:fd:b3:e5:37:7d:9e:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=0a2811cd1e79e5e1eb04a49204c6836631404b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:27:e1:dd:0d:2d:c3:5c:43:7f:dc:e9:df:
a5:51:c5:2f:d9:d9:c1:f7:ce:b1:7c:65:61:2f:94:
d5:8c:73:70:b1:c6:c7:06:ae:db:97:cf:e0:93:22:
7a:ac:dd:31:cc:25:1c:78:58:f7:cd:dd:85:2e:cb:
ad:79:4a:6c:72:5b:bb:9b:b0:a2:23:09:98:d5:8a:
ca:4c:36:2b:83:6d:c4:12:ae:b8:bf:9b:17:4a:73:
a9:13:a0:a2:73:9d:60:de:bf:f8:a0:75:3b:ec:39:
4b:7f:4e:14:44:79:04:0f:33:ca:2e:44:8a:98:6d:
79:05:45:f7:b6:0c:14:22:3e:a6:7b:4d:33:b8:2b:
4c:31:93:e2:ac:21:e1:b2:0f:a3:5f:79:73:d0:b7:
1b:56:4a:65:6e:2b:d7:bf:f1:ac:a1:ce:26:3a:0a:
3a:43:2b:dd:5f:43:c2:7b:4c:5f:6c:d8:fe:7c:5e:
28:55:08:75:4a:39:c7:25:8a:d0:9f:f4:b3:d3:c9:
7d:43:ad:de:c5:35:94:e5:b1:2b:6e:a8:40:36:4d:
89:51:99:20:c5:72:9c:c3:08:31:b3:35:7f:c3:b8:
07:25:5b:d1:39:e4:84:8c:be:ec:60:f8:a9:2c:7c:
5f:51:a2:62:19:2d:2f:d6:c4:d8:64:e7:14:45:f5:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:11:CD:1E:79:E5:E1:EB:04:A4:92:04:C6:83:66:31:40:4B:54
X509v3 Authority Key Identifier:
keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:a3:33:29:73:c1:21:80:83:0a:58:38:a2:d1:37:74:3f:
2a:2b:34:94:b2:43:a2:6a:a8:08:dc:96:22:d0:80:6c:c7:3b:
97:4d:79:5a:35:78:50:d1:53:55:cb:5b:aa:bc:81:77:fa:a3:
8e:05:f0:6d:ad:29:87:4e:0e:d2:17:53:b8:e2:4f:4f:64:a2:
5a:ea:6d:37:dd:fa:09:8e:3d:16:ca:54:84:51:7e:6c:69:fa:
6e:8f:c3:4f:00:41:dc:c2:ca:0c:9d:78:b7:25:17:ec:f2:9a:
35:68:17:b4:8f:79:5c:09:d7:ed:32:2e:0e:c3:0a:47:7f:3b:
b9:26:90:5b:23:ee:b5:9b:28:44:6b:f1:1e:1b:65:1a:1b:f7:
b0:53:5d:c6:fe:e9:38:76:7d:04:16:09:a9:1a:5c:6a:5c:7c:
82:66:5b:db:eb:64:79:d9:40:c9:cf:28:48:92:a2:25:23:19:
c7:24:63:e3:cb:4a:f8:16:9d:3a:0c:0e:10:31:d0:f8:83:98:
fa:92:f0:2a:84:98:a2:57:d3:d9:16:f4:64:93:ab:2f:64:3b:
15:3d:55:b1:f5:38:d9:f4:5c:46:67:68:10:18:f5:62:61:78:
04:70:34:98:f5:f7:8f:7b:67:f1:8d:9b:96:b2:21:4b:c6:16:
09:9c:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:15 2026 by rpki-client