Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: yvEbrCKiURxXq1/wanFINzGLmBe1s+gPipQDYBPl+V0=
Subject key identifier: 1B:E2:47:FC:47:5D:80:D8:A1:90:3A:F4:10:3F:61:9F:80:85:EA:73
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 019D37C08DA6400A0A577FF473ECD0F62201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 1364
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: ujt+aCEuEoNVNDRr7wkqkiT79BaP6SLWunYLBpf3j2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8d:a6:40:0a:0a:57:7f:f4:73:ec:d0:f6:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=1be247fc475d80d8a1903af4103f619f8085ea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:b6:7d:54:f4:11:16:bf:e0:d7:0e:7a:d3:
a2:82:7a:03:e6:35:ad:a8:f6:36:18:10:4e:38:1d:
a1:83:86:60:00:c9:c5:93:56:0b:21:f8:c0:23:bd:
9e:3b:d3:42:19:32:62:d6:09:fe:f9:69:29:0b:aa:
a2:1d:7e:92:4e:07:40:bb:b6:9a:35:7e:ca:ec:c1:
b4:27:c9:57:74:f9:3a:3b:9b:9b:a8:2e:63:b1:fb:
51:80:63:da:8b:2b:ab:1f:55:8c:0a:eb:cb:c7:15:
d4:14:14:a3:aa:3b:24:cd:37:e2:74:4a:10:0e:99:
21:ae:fb:c1:d7:96:73:c6:21:95:d0:4c:80:c2:06:
eb:2b:74:20:54:dd:e7:a0:98:73:ea:e1:14:56:13:
92:9e:8d:f6:11:8f:a3:2d:82:e5:ef:95:29:a6:f4:
af:87:6a:f2:ce:45:0f:1f:dc:fa:63:2a:e2:4e:9c:
f2:9a:c7:17:8b:c1:16:ba:b0:2b:f2:71:9c:11:25:
5d:e7:f3:8a:39:bb:28:fa:f8:2b:33:fa:e3:0d:bc:
55:43:32:cf:e5:73:64:00:5a:ec:f0:ed:bd:be:5f:
fb:22:a1:9d:16:0b:69:54:5b:6d:7b:fd:3b:ea:d1:
1b:ce:72:5f:41:96:10:43:b3:36:82:49:85:a5:bb:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:47:FC:47:5D:80:D8:A1:90:3A:F4:10:3F:61:9F:80:85:EA:73
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:65:99:c0:f2:62:a1:9a:84:86:4a:7a:cf:b1:42:fb:b9:06:
f6:03:c3:30:b1:0b:64:21:5e:c7:2f:c2:ae:4f:ef:0e:86:9c:
1e:32:d0:2b:b2:55:a8:7d:58:84:1a:70:46:60:7e:a0:58:ef:
82:b6:2c:2d:a7:08:d1:65:36:93:40:61:3e:33:71:7d:b0:95:
10:f5:0e:c7:b2:5a:29:0c:66:c9:7e:01:5a:9f:28:d6:f4:6f:
34:14:4e:38:cf:16:b0:65:46:58:3e:d9:14:cb:20:8c:b6:15:
54:41:9e:d7:8e:1a:32:f7:04:82:82:50:98:0f:db:01:dd:13:
b2:d3:09:36:b7:9f:ed:64:c7:9d:46:f8:e8:ba:c6:cd:75:45:
b3:78:18:6c:aa:06:62:0e:6b:e0:b0:b1:2c:a0:07:c1:14:e7:
d0:96:bb:e2:0c:1b:0e:a4:a1:99:6e:2b:8e:70:39:52:7d:40:
89:4d:7c:5a:ed:8d:3f:71:8c:90:93:03:00:0f:76:95:c5:00:
73:dc:37:76:3a:97:05:2d:fb:f5:fc:20:e5:9f:f8:51:57:6d:
38:3a:0b:c5:68:2b:8d:eb:69:76:b7:8e:73:0f:b8:41:19:12:
5b:38:fe:91:b2:d6:85:8d:cf:2c:f4:b2:72:87:6c:16:f6:01:
d0:46:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:53 2026 by rpki-client