Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: 26ZRZ3txkl9McJfdNTJUffsxj6LjZI2Qz9dlakG5Twg=
Subject key identifier: FC:6D:7C:0B:8F:35:C0:AA:A2:C9:2F:20:2B:BC:D0:43:37:4C:66:29
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019D37C0EEDA011FEDD22CE19E8D671F894B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: yqA0VQXf+RDlsDn9Dp9n0138zKDlulo2ClzAPpjsMQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ee:da:01:1f:ed:d2:2c:e1:9e:8d:67:1f:89:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=fc6d7c0b8f35c0aaa2c92f202bbcd043374c6629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:64:dc:16:b5:ba:6a:c5:0d:fd:95:5c:7b:
24:e7:f1:56:0d:8c:4f:57:9c:0f:b2:90:96:ce:7a:
6f:9e:ef:bd:18:2b:bd:4e:b8:14:2f:8c:d6:a7:3c:
55:1b:a7:61:dd:15:2d:63:00:f2:32:75:d6:22:af:
2f:4f:d2:39:38:4c:a0:0d:4e:14:6d:84:22:3f:90:
cb:27:9c:04:b6:fa:bf:59:ae:d7:d8:b2:9a:5a:ce:
d9:34:90:35:f1:2a:b7:35:63:34:3d:7c:7d:39:23:
bb:c1:b4:39:a5:b0:07:14:85:9c:d6:a3:60:d2:7e:
6b:9f:1a:2f:f1:67:2d:17:24:e5:08:a7:2e:89:85:
ad:9e:fc:95:5a:49:00:02:e6:f3:ad:da:b9:ae:33:
bc:ce:00:19:9e:6f:de:04:1b:06:ed:2b:0f:35:82:
fd:03:b4:53:dd:24:2b:6d:48:b8:20:b0:10:95:15:
8a:31:d7:77:78:56:be:5c:15:e2:c9:97:50:7d:04:
57:37:97:7f:25:e7:d2:37:ea:e2:99:65:70:ea:ac:
c5:dd:0f:ad:1c:d2:b5:a4:77:ba:e8:37:f4:a2:ce:
7d:74:53:0c:97:50:af:61:d5:4e:a4:39:54:1a:a9:
c3:b2:5f:92:b4:fa:bd:55:36:31:a9:7f:b5:42:b8:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:7C:0B:8F:35:C0:AA:A2:C9:2F:20:2B:BC:D0:43:37:4C:66:29
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cb:1b:04:e2:c6:b2:a6:4c:62:55:93:b2:b1:6e:6c:1f:40:
81:d1:64:47:24:1b:e7:fb:ba:14:47:ad:67:b2:24:6c:71:c1:
0c:2e:4d:78:67:be:9b:8b:53:49:ea:fe:00:96:6d:28:df:12:
c3:23:88:8a:f4:ca:93:08:df:3d:ac:82:69:6e:8d:1c:d7:34:
ad:f9:e0:d4:40:c3:6a:8d:8f:0a:94:f0:e2:2b:56:9b:67:79:
70:4b:0f:33:ed:41:7c:15:d1:c3:ba:28:6a:27:d6:fe:b2:51:
57:35:98:10:6c:26:f8:fa:91:00:f1:cb:bb:ad:7d:23:52:05:
de:00:05:66:4c:f1:79:7b:91:13:c4:ff:56:08:ea:a5:4b:62:
52:b3:29:d9:dc:b3:1f:5f:39:86:2f:be:81:0d:07:0e:4f:13:
4c:1a:7c:60:6f:30:ac:56:d1:79:35:5c:45:51:95:39:d6:ad:
fe:55:06:a9:94:8e:c4:36:02:29:cc:d6:c3:d4:76:af:0e:5d:
5d:04:ef:52:7b:1b:b7:9f:09:0c:f5:37:ca:28:26:a6:b5:97:
7a:cc:fd:c7:90:9b:f4:8e:3a:e4:ab:fe:81:26:75:da:36:ce:
88:57:ca:11:f3:30:d8:3b:f3:1c:77:20:98:3a:34:f5:cd:94:
f5:d5:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:12 2026 by rpki-client