Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: Sah2skdoPcSQld8zBQ2LORLB0UGZJbdDbBC+u/wID/o=
Subject key identifier: EA:CA:62:2A:65:05:D7:0D:81:8A:12:BD:5C:42:89:6B:B7:3E:41:76
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 019CAD22A78B565C8A940D1AEAC8C599AF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 1464
Signing time: Mon 02 Mar 2026 06:00:55 +0000
Manifest this update: Mon 02 Mar 2026 06:00:55 +0000
Manifest next update: Tue 03 Mar 2026 06:00:55 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: DenZ2y66qLt34sENN+q4MNsrMj2fv1qGn5AzmIQZnmM=)
2: VYFRuXlvwBdryFQTt5OTENfApaY.roa (hash: rnOyzeUtaX8vu4gXdx5Hk1vLfU4MWIMFx4e4U3jLOpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a7:8b:56:5c:8a:94:0d:1a:ea:c8:c5:99:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Mar 2 06:00:55 2026 GMT
Not After : Mar 3 06:00:55 2026 GMT
Subject: CN=eaca622a6505d70d818a12bd5c42896bb73e4176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:9b:d0:47:c1:07:3c:05:84:5f:08:9e:60:
85:59:73:f8:5b:35:77:ac:8f:3f:81:5b:30:00:28:
93:c3:58:b9:0d:3f:60:74:64:3b:27:94:3f:ea:a1:
be:8d:ce:73:b2:c5:71:f4:a7:64:58:d3:53:55:15:
14:d4:89:c8:70:46:9c:8d:18:97:09:a0:a1:6b:89:
27:6c:6e:32:23:44:7e:25:2c:0b:24:6a:d2:9b:ed:
7c:3f:56:73:fa:05:5f:97:30:e7:b3:f7:ac:e7:b2:
5e:13:ea:67:81:0e:84:46:25:81:96:ca:d6:61:4c:
d3:7a:1a:6f:57:6d:26:3e:88:8f:25:0e:5e:9c:a0:
3d:a1:6f:cf:f2:3b:81:ce:bb:fa:fb:e5:1d:11:4e:
ce:57:51:d1:26:67:2d:98:9b:54:e1:40:b7:f6:08:
ab:39:1a:bf:ac:7f:c6:a8:a0:7c:1a:30:d8:2e:01:
32:9a:c2:89:cc:5a:d1:0f:f0:17:e1:46:cd:28:af:
05:a8:2e:c0:9c:b9:66:9e:4f:87:52:ec:18:7a:37:
91:21:22:13:af:da:ce:0a:be:88:f1:ca:1f:f5:9f:
82:0d:cb:c0:8f:db:0e:6c:cc:8a:7d:69:ce:07:9e:
65:e1:91:89:f7:3d:22:44:9f:42:14:a7:6b:ca:43:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:62:2A:65:05:D7:0D:81:8A:12:BD:5C:42:89:6B:B7:3E:41:76
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:a8:05:07:39:50:89:cb:38:b7:90:8b:5b:4f:8e:7c:bd:
c0:14:f5:41:57:a8:8f:51:7e:a7:a7:7c:c4:57:26:02:0e:26:
78:84:4d:0a:6a:e0:b5:b5:9a:9c:f7:67:ce:8b:44:70:a8:5b:
84:ab:46:9f:b2:80:6d:ad:21:10:a4:45:14:c2:ab:92:61:6d:
50:67:23:cf:75:c1:57:ef:f5:f4:ee:20:d6:cb:b0:3a:16:74:
7c:6f:5a:05:d4:32:f7:16:7e:e8:ac:8e:2d:a5:97:69:e0:aa:
93:66:38:4a:d9:49:de:98:ba:5e:c3:6b:3b:99:bb:ea:bc:f8:
c2:d1:47:f9:8a:a2:ea:96:a3:35:f0:b6:00:b2:56:32:86:db:
bf:22:c8:75:79:d1:61:f9:f2:f7:b5:1d:49:84:97:58:ad:9f:
5f:83:12:e4:cc:f3:1d:50:37:65:3b:7c:3a:3b:0d:df:51:4e:
a6:fa:57:9d:66:33:e2:47:48:08:d1:1f:63:6a:72:18:03:f3:
c2:38:8b:74:69:f8:a7:af:ff:80:3e:c6:13:1f:81:d2:36:96:
98:d5:b4:1f:56:28:06:4c:4b:ed:c1:c6:4b:5e:a6:10:d6:0d:
5f:2e:d7:49:35:5b:9a:6c:9a:57:2d:7c:ea:7a:b5:8d:0b:b8:
f0:74:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:55 2026 by rpki-client