Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: 35NFFk+/KXPKctLlczEZVooeQDL7cWkhueDncXt8qqY=
Subject key identifier: 38:EF:1A:F6:7F:8E:DD:31:01:72:69:A5:DD:5D:48:1B:D2:44:30:93
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019CAB6B96A6FE386D287C181734415F34DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 10E3
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: /6CgskKcFCMTpgC2zNpVRBU5Nlwu8wrT6EiO0Lz7S+I=)
2: zFPDIQ6oyxHzuUI5QPn3o0ndWIE.roa (hash: kZJWLecWvxb0aVQv+4P+LbA10Ay5ixM4OkGwIDMl4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:96:a6:fe:38:6d:28:7c:18:17:34:41:5f:34:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=38ef1af67f8edd31017269a5dd5d481bd2443093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c7:26:9f:0d:07:fb:8a:bf:2f:ed:2c:ac:f9:
29:1f:ed:fc:9c:d4:4c:89:cd:f3:5d:63:07:de:ae:
c6:84:f1:e0:3e:88:44:5b:e9:ca:9c:20:d5:b2:97:
dd:78:58:99:88:74:ce:39:8b:d1:73:b3:08:84:e4:
c3:0e:58:4a:8d:d3:38:ea:2d:5e:a8:36:41:2a:6d:
25:70:de:65:1c:39:a1:cb:d0:a9:f7:83:07:bc:e9:
13:ab:05:33:a6:fd:73:ba:db:78:b8:33:90:5b:49:
2e:69:fc:28:30:52:02:87:6d:2a:62:76:cb:f7:ed:
49:4c:16:5a:9e:77:c1:36:51:aa:71:d6:d0:70:bd:
7f:6b:dd:26:d5:c9:8d:67:23:16:b4:54:39:e8:a4:
6f:d6:aa:c2:d1:e4:08:00:83:4d:e5:5a:e7:0f:92:
47:d4:21:cc:42:d4:81:3f:c4:4a:67:80:bf:84:42:
55:b0:ed:2c:dd:a6:58:f7:b5:62:53:b0:9b:a2:c9:
0c:10:48:c7:0a:e0:8c:b6:f5:5d:75:c0:1f:bf:c1:
47:f5:be:1d:b0:0a:df:73:86:f9:37:24:1c:74:ad:
1e:9c:53:6d:3e:99:6c:64:1f:53:9a:b7:1f:50:a9:
1f:48:45:ef:ed:6c:91:ad:41:61:44:75:b6:6c:fe:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:1A:F6:7F:8E:DD:31:01:72:69:A5:DD:5D:48:1B:D2:44:30:93
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:71:a7:f1:9e:01:6a:ce:ba:65:08:25:f3:6d:72:26:d2:56:
b1:58:9c:8f:e8:b1:08:24:4f:c6:a6:b0:7d:64:3a:01:75:36:
2e:79:e7:43:17:1f:14:2e:36:29:da:26:2a:5a:e4:20:46:84:
12:73:e6:3b:9d:da:52:7c:08:74:d0:72:ce:77:ce:22:4e:4e:
70:d7:95:18:f6:74:1f:ef:a2:ce:bd:35:6a:ac:a1:44:59:57:
35:65:23:28:97:4e:19:47:4a:a7:b5:9a:d0:7b:43:56:c8:5a:
72:b2:02:d7:a5:05:d5:86:b8:76:61:21:c4:28:25:5b:82:db:
84:bd:d4:1c:f9:93:af:b6:26:53:aa:ba:82:e4:3e:94:eb:d5:
2c:9c:6f:66:1e:a3:ed:70:05:cd:d4:6d:58:b3:34:16:c2:7b:
a7:02:52:1c:7b:da:eb:19:87:6c:8b:25:a3:82:74:71:40:93:
89:d4:18:38:22:b9:f0:cc:eb:4c:05:ce:16:84:7e:c6:e6:1c:
32:19:8d:5c:a3:f2:ea:e3:12:9e:e9:97:44:a4:f0:9e:83:47:
a2:41:5d:bd:a7:69:d0:d2:34:ef:9b:84:d7:f1:35:b8:87:0b:
ba:da:de:c6:ca:88:6a:0d:a7:74:70:f3:74:4e:7c:83:1f:55:
67:79:f2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:19 2026 by rpki-client