Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: VparHcM+804ezefEnzF8VCUixZjE/xfoCL0zQmQNWHg=
Subject key identifier: 4F:CE:65:F5:8F:94:03:C4:87:06:3A:F3:25:62:1F:D5:DB:2A:A5:11
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019D389C537BAA24DDD26A451E350D2141B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: 2m9ztvKxVoCMb710BoyjxpUi5t1Y+MnFZ3lUWYEAnQI=)
2: Yuog9y8JF_gUyOtwmx2LA41kaSA.roa (hash: bgBtmLlCdZ3iz8t6uBn4uo/dQZySgZ2naQr/qUoBKkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:53:7b:aa:24:dd:d2:6a:45:1e:35:0d:21:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=4fce65f58f9403c487063af325621fd5db2aa511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:46:87:b9:8f:f9:25:8c:ec:6c:f0:e4:46:
d5:b6:1f:db:58:5c:dc:8a:9d:16:71:fb:d1:ce:b8:
42:3c:bf:f7:48:25:66:3b:ad:7b:ba:80:49:ee:c7:
3a:99:2f:ad:79:19:83:06:a0:bf:a9:ec:a4:f4:da:
a9:85:bd:6c:e8:30:5e:44:41:9b:17:dd:6d:1c:b2:
a3:6c:74:7a:a9:13:9b:cc:78:b3:0f:31:d6:ec:22:
58:f4:1b:63:c6:39:14:a6:3d:da:1f:6f:01:a6:ab:
b1:b8:1d:12:e3:97:a8:bd:95:75:32:87:56:05:b3:
bf:72:21:1e:98:d6:4a:50:b0:de:5d:fa:7b:6d:97:
c3:33:b2:95:e4:e1:79:67:cd:99:4c:86:ce:14:9b:
a4:7c:bf:79:3d:11:46:f5:9e:9e:b9:bd:69:6b:f4:
b8:69:72:63:21:cb:61:89:13:8b:8f:2f:72:3b:b6:
ae:ef:6a:c7:88:7f:9d:f8:3d:bd:07:ca:c5:3d:fb:
aa:dd:99:a2:9b:59:78:20:48:e4:28:d8:cf:20:fa:
35:cc:08:04:21:fa:80:ee:d6:4d:85:42:af:88:37:
0a:db:09:09:00:c1:02:17:f4:3c:ab:76:cb:cc:4f:
b8:f0:8c:1d:10:97:6c:ce:48:a1:20:45:26:ab:cf:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:65:F5:8F:94:03:C4:87:06:3A:F3:25:62:1F:D5:DB:2A:A5:11
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fc:63:8a:7b:18:9e:32:27:03:2f:c6:99:ee:5e:e0:58:1b:
c4:83:c5:c5:aa:9f:ff:c7:81:17:73:b3:5a:65:93:60:a4:eb:
95:25:06:6b:35:48:15:e5:d3:12:70:27:d6:f3:bb:5e:b5:86:
27:78:51:75:53:33:b2:13:6e:65:d3:6d:38:20:0b:dc:30:12:
93:91:4e:68:7e:7f:1d:59:ce:df:3d:5e:cd:d1:4a:af:ec:a9:
13:8f:45:fe:45:16:da:aa:ff:89:61:82:77:18:56:ff:a2:29:
34:c9:44:22:9a:c3:3c:5d:c5:82:48:72:5b:f9:6d:d1:c2:13:
02:ca:ea:ff:4c:8b:44:93:4d:e2:c6:3e:d4:6a:61:51:54:06:
a8:36:74:c1:dc:c7:70:bb:59:d7:3a:22:10:dc:7b:8b:d4:f9:
78:1f:9a:51:25:53:2e:12:62:ce:38:28:db:01:94:50:60:aa:
2d:11:3c:a0:0c:f6:94:f1:9c:8c:41:ea:ef:dd:a1:31:33:6a:
fa:ed:47:49:51:e8:8a:6f:ea:aa:a9:ba:c7:fe:65:76:b9:ac:
cc:95:ec:aa:af:e5:d4:09:47:05:27:5e:53:28:f3:ad:bc:af:
36:50:48:02:14:44:f2:6c:97:db:19:4c:e4:f5:60:a6:4e:d8:
3c:96:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:33 2026 by rpki-client