Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: FpJvcDTYigQRxIKCyU8ypiStpqtwQFevmec3KoA7t74=
Subject key identifier: D3:39:DB:81:EB:EC:45:19:70:67:CC:11:4C:AF:20:4A:52:6F:DA:C3
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 019CAB33D60967996F7808B08FF0DAD38CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 123E
Signing time: Sun 01 Mar 2026 21:00:26 +0000
Manifest this update: Sun 01 Mar 2026 21:00:26 +0000
Manifest next update: Mon 02 Mar 2026 21:00:26 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: 1v93pQCRBbmw5y4TYPoGZJihB/pUDDhWhF4Bbse0RxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d6:09:67:99:6f:78:08:b0:8f:f0:da:d3:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Mar 1 21:00:26 2026 GMT
Not After : Mar 2 21:00:26 2026 GMT
Subject: CN=d339db81ebec45197067cc114caf204a526fdac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:35:0b:06:5f:04:8e:65:98:0b:6a:6f:8e:
0d:88:f0:eb:5a:26:ba:91:b6:87:16:42:50:4b:c3:
e5:12:7f:78:a0:71:7a:ba:cd:bc:55:ee:24:0d:b2:
96:ff:be:1f:51:ed:05:d3:7e:42:4d:05:de:c2:01:
1a:8f:6a:77:ec:65:de:39:a6:e3:2e:a1:66:9c:61:
ef:71:fd:b1:db:f5:f2:c9:4d:15:8a:04:53:25:ef:
e2:94:88:fe:e2:74:84:6e:25:0c:b8:f9:7d:91:f3:
35:86:0c:5d:3a:20:3e:2b:4a:49:96:6a:20:a8:98:
cf:44:67:e1:70:da:48:0e:99:df:f4:da:73:5e:64:
8d:25:ca:3a:fd:f4:9d:e1:bb:b7:36:ae:4e:a3:bc:
db:f3:80:77:ba:99:1d:81:4c:3c:4f:1e:c9:f2:65:
61:1c:46:82:7f:07:6b:a4:46:4c:43:ae:5e:ba:c1:
9c:8d:9f:95:29:8c:3e:88:e2:4c:81:5c:8e:66:7f:
b9:80:72:3e:a5:40:61:87:7a:fd:b4:65:8b:aa:16:
4b:59:5a:95:76:7a:67:d4:c9:47:c2:35:2f:3f:d6:
17:76:18:2e:15:51:40:a3:32:dc:c1:07:63:32:86:
07:1e:f3:76:7f:c2:43:eb:aa:48:9c:81:ed:aa:14:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:DB:81:EB:EC:45:19:70:67:CC:11:4C:AF:20:4A:52:6F:DA:C3
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d8:2a:13:83:10:7b:0c:8c:f6:b7:9d:3a:5d:91:f6:52:b0:
7a:56:c9:d2:8f:67:a0:09:f5:1c:2e:cf:e9:b5:0c:17:97:42:
b6:2f:a9:64:f1:dc:11:d0:e4:00:bc:43:db:8a:8f:79:5b:53:
7d:11:af:dc:1c:8e:2e:aa:2b:d4:4c:fb:a4:cf:26:20:1c:14:
fe:e4:a6:9e:5c:c4:28:f1:01:3c:27:0c:65:41:5f:7d:17:3e:
c8:9f:99:fb:df:8b:b0:67:d7:89:32:9b:b3:9b:18:0a:96:b7:
fd:0d:1b:a2:0e:72:8a:fa:37:bd:e0:95:dd:80:3d:ea:6a:7e:
2f:d3:c5:ed:3a:e6:1a:c6:8f:80:6d:a6:e2:6d:e9:9c:63:88:
ec:25:c7:3b:fe:30:9b:9c:5d:d9:c9:7a:01:4b:e1:76:73:92:
b2:14:0d:44:65:48:dd:2b:29:5e:97:f2:9e:eb:ad:67:27:ad:
8c:75:d2:56:05:42:a6:fa:69:1b:8b:f6:1e:e2:43:bc:a8:6a:
6a:ec:31:07:9a:d3:08:76:10:29:34:8c:b0:a2:0f:70:ea:90:
59:d7:34:82:2d:e6:52:62:0f:77:84:de:ae:cb:b7:1c:a9:e1:
a6:e0:aa:ca:26:12:d3:d3:8c:d2:61:21:71:3d:07:33:8e:75:
4e:b7:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:13 2026 by rpki-client