Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File: K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier: oryPUwA/6Q5bywS52bNlqLFzAdGEkIKqREqoDFjBATI=
Subject key identifier: 1A:E8:A4:E4:5D:AD:C5:A5:95:E7:CD:5E:AE:9A:40:D8:D0:02:49:15
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer: /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial: 019D37C089D987660B32184A3D7445962469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number: 10A4
Signing time: Sun 29 Mar 2026 04:00:58 +0000
Manifest this update: Sun 29 Mar 2026 04:00:58 +0000
Manifest next update: Mon 30 Mar 2026 04:00:58 +0000
Files and hashes: 1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: rkVP8s+Csob58HrADepByfyelLxo8CI7Q5bwuKofMww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:89:d9:87:66:0b:32:18:4a:3d:74:45:96:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Validity
Not Before: Mar 29 04:00:58 2026 GMT
Not After : Mar 30 04:00:58 2026 GMT
Subject: CN=1ae8a4e45dadc5a595e7cd5eae9a40d8d0024915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:5a:e4:b9:4a:60:c2:12:2c:95:2f:bf:67:
b0:c6:aa:7d:f7:54:b6:1b:d1:9f:2c:48:ad:f2:3f:
54:cd:8d:fb:8a:d7:79:63:14:e9:1d:01:9e:e0:2f:
38:f4:7c:b1:51:7c:55:a3:a1:e6:b2:ac:a6:96:38:
53:ea:67:0b:47:74:c8:c3:5e:8a:a0:f2:ed:a7:31:
ab:fa:81:e2:19:fa:f9:25:1e:32:3d:a2:e7:7e:24:
98:26:e4:ad:1f:30:8a:e5:07:8b:1e:5c:21:90:82:
7d:89:d4:de:43:94:2d:54:8b:b9:c4:1a:4c:d1:77:
e9:2b:8f:0e:14:7b:3e:e9:92:24:5e:b6:2d:82:a9:
d4:5b:46:c3:89:50:21:7f:82:95:78:ce:50:17:04:
44:83:0f:f6:6b:13:93:e2:a6:85:d8:13:0e:15:28:
9e:ff:ae:ff:a4:7a:19:3d:0c:18:41:69:7a:39:52:
5e:a7:75:50:02:cf:98:51:ca:c0:d1:e7:15:bf:75:
61:38:ae:9c:b3:19:bc:d2:a0:94:dd:31:ac:7f:15:
06:66:f3:50:7c:fa:f0:c9:31:1b:35:0b:12:dc:bf:
d5:4f:8b:f5:8e:95:45:b5:41:9c:99:46:dd:c0:da:
f8:1a:ce:8a:d2:26:ea:5e:80:36:2c:50:9c:fa:2f:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:A4:E4:5D:AD:C5:A5:95:E7:CD:5E:AE:9A:40:D8:D0:02:49:15
X509v3 Authority Key Identifier:
keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0a:eb:1f:4d:18:63:1e:c6:2e:77:91:50:b4:f9:32:b1:42:
20:1f:5e:be:88:ea:44:85:db:0c:56:85:c2:d1:6b:b9:ff:88:
43:39:5e:e8:b8:54:ea:4d:01:e2:45:8c:37:67:52:31:69:51:
99:f7:c0:cc:d9:b2:85:47:63:ce:34:79:a6:83:2f:b7:6d:d5:
d2:da:ad:0a:19:3f:89:05:9e:ae:fc:9f:71:f1:ea:42:c3:87:
16:18:30:d6:c6:83:90:86:2f:62:8c:67:df:66:ba:27:c6:52:
bd:64:8a:9f:51:ea:20:cb:33:5e:85:11:ca:8b:76:d9:a7:1f:
d3:d1:45:44:0f:43:7b:f7:9d:f8:85:e4:1c:d1:f8:41:2b:1c:
ce:b8:6a:6a:e7:13:09:8d:78:14:09:c9:c4:f7:d8:e2:ac:3f:
a2:4a:52:4a:41:40:8c:54:f3:a6:72:90:f6:96:aa:36:d6:85:
b7:b1:3b:ae:9a:55:73:a4:5c:35:16:ef:b8:80:ac:d9:07:94:
a7:75:c7:bd:ac:c8:73:c3:d1:64:94:78:dd:00:c2:59:9f:9b:
6e:9f:63:0e:aa:ab:66:f0:35:20:78:1b:e4:23:86:2a:0e:78:
58:8b:46:c7:f4:cd:ba:02:3e:8c:05:73:59:c8:1c:d6:42:bd:
31:4b:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:58 2026 by rpki-client