Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: 8sW1pqiQhORNPh96IExCqlQjbZYJy/vNX5yJXkXclJo=
Subject key identifier: E8:D3:F7:F6:99:E1:33:6A:0B:59:CE:09:2A:9F:C6:D7:87:F1:AD:0B
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019D38D3BFA7C39C95E648C8D66588F95806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0C6F
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: HVowXrdOWYwIxGgjLmeAVFsb2JY.roa (hash: hYRe+VklsUZJL10nJgEreFr/d/IK6lzb5yYEfqhUAdI=)
2: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: NRdjciBAqqutTRJ8FQtcx6ekVyKHhYC3BpjLZBy1FOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bf:a7:c3:9c:95:e6:48:c8:d6:65:88:f9:58:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=e8d3f7f699e1336a0b59ce092a9fc6d787f1ad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:93:78:7a:9a:46:bf:92:dd:84:40:b2:cb:
d2:95:b3:f8:53:d4:40:d5:5f:98:a2:0e:a0:e8:84:
72:f6:1f:4b:3b:65:1c:3a:20:fe:14:d8:4d:8c:85:
51:91:f8:1d:c9:11:1c:f1:cf:44:ca:63:90:aa:d2:
aa:ca:19:b3:82:21:54:ea:39:db:6f:ea:bf:db:5a:
d2:9e:be:b3:41:57:dd:d9:ed:40:be:8c:ca:9b:5d:
a3:94:c0:0e:bb:40:f6:96:10:ad:60:79:4a:38:d5:
e7:c1:e5:f8:ce:c7:4a:95:be:b3:6b:dd:07:32:29:
8c:b1:fc:25:a9:15:4d:86:0e:79:6d:28:69:34:87:
20:d1:fe:14:a6:21:f0:b3:e7:c8:53:ed:e7:84:22:
8f:ab:95:22:74:7b:38:01:c3:71:23:ba:97:e4:af:
90:ba:4c:57:83:5e:a6:88:01:05:f5:11:63:73:fa:
6a:22:8f:ec:fd:24:b2:de:b9:f7:d2:ef:b6:a0:e7:
e3:c2:7a:97:c0:6a:10:29:a1:a9:97:be:4e:ee:a5:
8e:e4:47:f8:76:b2:7c:a7:d6:16:4d:0b:1b:f8:0e:
43:e3:83:fb:7a:ad:71:f1:f2:60:de:8d:1b:d7:aa:
09:be:ca:ed:95:76:13:ae:ae:f1:ba:3a:d0:a7:5b:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D3:F7:F6:99:E1:33:6A:0B:59:CE:09:2A:9F:C6:D7:87:F1:AD:0B
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e7:2f:90:18:83:b2:b5:26:4d:54:8b:a6:12:67:12:26:a8:
5a:6b:60:98:cd:db:d4:96:75:d3:34:01:f8:e1:5a:f5:1a:a7:
64:8d:92:9f:40:8e:e3:dc:49:3a:e1:f1:39:bd:48:9b:82:ab:
99:d4:5a:f9:48:bb:19:78:14:06:ce:09:4e:99:01:29:25:c7:
fc:0a:f4:4e:e7:07:5d:ad:ff:66:5e:a3:4f:f7:cb:b5:a0:4b:
87:29:f5:2c:8b:65:0c:29:aa:5a:fa:78:6e:e1:1e:93:1f:3b:
53:89:ca:f1:ef:10:02:0b:b2:2c:f6:8d:2e:1f:ec:98:50:a6:
8d:b4:6f:41:47:ca:c3:e0:af:89:d2:06:6b:cf:51:f6:c8:5d:
73:7b:46:a9:ff:f2:82:32:97:4d:f3:97:94:01:c9:50:a9:88:
d6:f5:1f:59:5e:88:fe:84:a0:ad:d4:92:b5:4d:09:21:01:97:
ca:64:ee:00:38:3c:35:81:5e:96:43:08:2f:99:d7:ff:be:2f:
e6:a4:43:5f:a7:27:79:d8:cf:d9:ec:73:1b:a5:9d:ca:a1:d6:
5e:02:c6:3f:78:e0:75:3d:aa:04:c0:ee:7d:0f:b2:99:df:dc:
07:d1:ab:82:e9:7f:9e:f9:2a:05:18:64:8b:43:f8:f4:9c:ea:
56:d4:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:09 2026 by rpki-client