
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: 7MrKLM9TyXxUOFNlpZQAEeZFkx2VJCsSIm+PDpV2jjU=
Subject key identifier: 72:65:1B:AF:99:CA:42:AC:FC:2A:2C:C8:C2:35:32:E5:E2:90:FB:AA
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 019CAB6B7796664352F7742F9A64246AB168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 0575
Signing time: Sun 01 Mar 2026 22:01:12 +0000
Manifest this update: Sun 01 Mar 2026 22:01:12 +0000
Manifest next update: Mon 02 Mar 2026 22:01:12 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: h3zXWF1oidahgXWT60hzg+94eUMDvbcpt9Sem1KKzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:77:96:66:43:52:f7:74:2f:9a:64:24:6a:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Mar 1 22:01:12 2026 GMT
Not After : Mar 2 22:01:12 2026 GMT
Subject: CN=72651baf99ca42acfc2a2cc8c23532e5e290fbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:f3:8b:f9:90:a2:53:0e:30:af:46:e7:75:
23:5f:57:9f:4a:54:2d:28:51:19:5c:0b:f2:4a:e0:
46:db:fc:f8:61:40:a3:03:59:14:57:d3:18:81:e6:
07:97:a0:b0:bb:ab:21:0b:50:0e:dc:f2:91:20:45:
cb:bf:f0:ef:ad:e4:f6:f0:0b:1e:4b:60:68:f6:f2:
f3:87:be:dd:02:fe:16:82:46:fb:e8:ec:1c:a6:64:
35:a8:4a:9f:73:35:9a:2e:a0:f3:b3:a4:08:4f:b7:
33:70:63:25:0a:c7:ff:ac:15:89:f2:49:1a:06:0d:
c4:07:5a:ac:46:a8:89:bc:fb:d4:8b:f0:84:c6:8c:
30:56:7e:17:66:cf:46:1a:5f:f8:6a:d5:56:82:d0:
2e:58:63:48:cc:83:a5:e6:ef:fe:b4:58:22:9d:2f:
3b:88:ff:47:0a:83:a3:d3:4c:12:d3:0d:82:e4:ae:
c1:29:ce:34:74:33:4a:8e:09:08:57:e9:b4:1c:d4:
07:b3:95:be:4b:ac:9d:48:3b:2b:b2:3a:12:9a:ac:
2f:70:08:cc:3c:6c:67:9a:32:40:b7:37:ff:46:43:
71:fa:37:4d:f4:3d:6d:ce:a2:05:f0:dd:3a:6c:b2:
86:a4:fb:18:b4:19:b6:7f:fc:22:73:ab:14:8d:41:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:1B:AF:99:CA:42:AC:FC:2A:2C:C8:C2:35:32:E5:E2:90:FB:AA
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:95:79:b8:cd:46:56:5c:f3:25:67:74:a8:45:0a:c9:42:f1:
32:a9:b6:59:d1:7e:a8:e2:34:46:f4:eb:1d:1e:3e:4a:47:f1:
05:a1:b0:53:65:58:d1:76:41:a9:35:2d:03:df:64:20:16:a4:
6a:81:6a:03:3e:df:a4:3c:0a:54:fa:11:b7:93:b0:81:af:a3:
b1:a4:ad:71:8b:9a:af:c9:5f:fc:37:e1:cd:3f:8a:4c:26:23:
ab:b9:cb:15:2b:f4:d4:b3:6f:cd:6a:5c:44:86:fc:f0:46:4b:
6d:13:b8:ef:86:a8:3d:cd:ac:2e:14:47:c6:d6:94:95:f2:b6:
fb:6f:65:5c:c9:e8:8f:2f:f4:56:02:a7:e4:c2:96:88:c2:f8:
f1:0e:66:ab:ac:d2:aa:52:5b:12:d2:32:f6:77:6e:74:cb:ac:
88:7b:fb:bf:01:8c:97:a9:e2:36:91:72:73:c2:ca:59:8f:09:
6a:fb:72:c5:2a:d2:dc:58:b8:37:ff:5d:42:56:6b:f9:ac:56:
5d:63:c6:18:20:2c:48:3a:26:72:62:f7:da:f7:01:e5:1b:5d:
ae:3b:29:ac:75:83:18:b0:ce:7e:1c:ab:e5:8d:bd:ef:e9:f1:
b6:7f:ee:aa:6e:74:b1:6c:2e:6a:59:b4:c1:8c:07:f2:4f:51:
4e:9a:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:05 2026 by rpki-client