Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: 8eJgsSY8KH8UCDUBSEm2sTwGbXzY2UNJHICWkVM1RqE=
Subject key identifier: 79:BF:CC:FC:EC:3D:C2:E9:14:3A:7D:44:1B:18:CF:40:30:89:3A:0E
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019CAA590E689D4EC4C3C2F019AC8992ABEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1509
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: ZPmewUcaEZ2doCFnnrnBr0xAj9Gr70k5P6Km0W/THUo=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0e:68:9d:4e:c4:c3:c2:f0:19:ac:89:92:ab:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=79bfccfcec3dc2e9143a7d441b18cf4030893a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:1a:11:56:b5:63:c4:dd:49:8a:1e:32:2e:
83:74:cd:e0:9e:5f:65:58:91:02:6e:3a:62:2d:0e:
bb:c9:ba:9d:fa:b2:71:9e:21:2e:5d:e7:45:83:14:
4e:04:24:e6:18:5b:c5:ba:75:2e:34:91:9e:e4:1c:
c4:c7:95:d7:e7:43:be:c6:8a:e2:60:8b:c4:5c:ed:
2a:33:4c:69:e5:3b:df:33:32:6e:d9:86:55:70:7c:
d7:5a:8e:95:cd:c8:19:2c:01:e5:61:48:97:99:7d:
1c:49:1a:7e:76:0d:19:17:32:cc:1c:6f:c5:5b:0d:
89:d4:e9:44:28:a9:5a:46:2d:a6:a9:eb:89:e5:61:
5f:4a:71:f8:6b:95:40:11:8a:e1:80:49:52:2f:76:
3f:a7:e0:78:68:0f:7f:83:91:cb:e0:63:b5:e9:ae:
e2:69:26:47:ca:74:88:43:b4:d6:9d:e7:6b:36:5e:
98:49:de:fd:c7:b8:70:ab:08:27:b3:06:35:ad:42:
87:d6:b7:c8:a3:11:fa:68:9f:0e:5e:26:e1:76:f3:
8b:89:3b:2d:e2:4a:2c:64:3c:08:87:ab:ed:27:5d:
f4:de:4e:f4:bc:e2:22:13:f5:3f:eb:15:81:e7:fc:
f6:12:e5:e7:46:6d:28:78:aa:6f:ab:c1:f7:7c:21:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:CC:FC:EC:3D:C2:E9:14:3A:7D:44:1B:18:CF:40:30:89:3A:0E
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:40:9f:bd:ab:49:59:d3:43:2b:41:dc:8d:f2:c2:f1:f1:
56:70:06:b0:23:2a:e6:f2:49:32:43:c1:e0:d1:35:b2:25:b7:
3d:01:4b:47:24:09:fb:1a:1b:e3:fc:93:7c:d1:16:4b:88:c3:
f7:f8:03:18:6f:5f:90:2c:26:5b:0a:75:16:40:3f:4b:e8:27:
e8:78:00:30:72:32:0c:8f:92:bd:9b:68:d9:20:38:fc:30:a4:
1c:d8:d6:fd:04:a0:c3:6c:5b:8a:1b:03:20:a9:bc:5f:04:d8:
ef:a3:c7:3d:48:1f:fc:f2:1c:53:6f:2f:66:03:5e:1a:71:5b:
66:54:ec:8a:a5:29:4e:b0:1f:62:be:68:ed:d2:77:a4:4a:c9:
42:a3:af:fc:52:a8:8d:95:03:0b:8d:be:56:f6:f5:07:d7:50:
81:02:38:93:6a:e8:82:96:5c:9f:a3:55:b2:e0:2d:2c:e6:63:
d2:ea:71:01:c1:f3:46:f2:14:33:b6:67:fc:ff:af:f2:78:f5:
ea:55:3a:93:91:a2:b0:0a:42:bc:00:5f:68:96:3f:c1:e2:d9:
0f:20:6a:14:47:c6:b5:4d:c3:7f:d6:62:d7:20:cc:61:0d:20:
0e:b2:3f:88:75:e4:90:a1:7d:6f:3b:26:f9:ee:4a:6f:3f:ff:
a8:43:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:35 2026 by rpki-client