Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File: KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier: Vf8RAGZsy16/hxQFjNV35j1BS+yYvzjkDJP/1PxxUYY=
Subject key identifier: D4:97:DD:0F:4E:56:B2:29:03:ED:0C:CB:24:5C:FE:F3:3B:8D:61:7F
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019D38665BEB8B4B63964028E376D1853AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number: 0FB8
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: ZOB8FevezJjiLvlkeqJbvo0WsHGJFhlTqZHQygoZVe4=)
4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5b:eb:8b:4b:63:96:40:28:e3:76:d1:85:3a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=d497dd0f4e56b22903ed0ccb245cfef33b8d617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:7a:cb:87:cf:e9:2d:17:93:ef:b7:63:e8:
ce:b7:d6:b3:af:7a:bd:97:b1:7a:3c:7c:29:f3:ca:
43:01:2f:48:75:f0:21:a0:4f:33:a9:21:a8:bb:05:
a0:90:72:d2:67:ec:fc:9d:c3:ba:1a:1f:82:0d:f7:
0b:9a:15:16:3d:e1:22:c0:7e:b5:bc:3f:75:98:1f:
cc:33:1e:07:de:02:22:fd:30:c5:33:7f:98:3b:b8:
f4:93:c4:8e:1a:89:6b:e6:b2:7f:a4:90:17:15:5f:
c2:2c:a7:56:39:f5:16:55:56:b0:9d:98:a6:6e:bb:
4f:75:d6:08:69:0d:e5:e5:c2:0a:a0:8a:69:a9:ad:
42:fb:0d:14:f0:e3:6b:b3:16:86:fb:38:03:d5:7e:
c6:1c:54:a0:79:bb:af:db:cb:d3:da:3a:a7:2d:cd:
73:38:0c:91:15:f0:39:d0:38:19:e3:ef:0a:9f:40:
10:ef:eb:86:1a:2c:57:10:7a:43:6a:95:88:3b:67:
8b:b5:bf:2c:bd:ec:f2:0a:38:46:d4:79:08:38:9b:
3f:92:ef:65:2c:0c:d9:e8:36:e1:aa:b1:5f:aa:97:
80:5f:71:05:9c:ff:99:e2:39:7f:ca:53:5b:13:59:
4a:a5:9b:c9:fb:7d:f3:12:ef:41:0a:16:a6:62:17:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:97:DD:0F:4E:56:B2:29:03:ED:0C:CB:24:5C:FE:F3:3B:8D:61:7F
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:be:5a:e6:33:90:0c:24:64:c7:94:db:6d:8d:73:e6:39:
9f:ae:82:92:db:68:cd:1e:00:27:bb:82:65:53:9a:44:50:e3:
54:54:4d:c9:57:49:be:60:b7:28:7f:c9:48:78:c6:55:88:f8:
8a:28:b9:d3:28:86:93:17:ae:d7:56:1d:cc:87:48:c4:01:f2:
b9:9d:2c:4c:98:d6:c7:2d:77:29:f5:ce:c0:67:e5:e8:53:1b:
3e:e4:57:92:10:95:57:49:8b:13:23:07:f0:55:39:bc:7b:35:
e5:e5:83:0f:e2:c9:37:22:3e:37:58:50:f2:69:7c:30:e2:16:
63:1f:a5:56:d4:1c:57:60:fa:19:8c:c2:b0:5c:3e:2c:10:08:
54:ae:47:20:50:d9:d4:1f:69:3f:24:cf:36:5d:00:5b:e7:0f:
be:1b:0c:f0:51:eb:61:ad:40:7c:d2:67:04:83:70:f6:44:89:
c3:29:95:db:43:19:15:c9:ed:22:35:56:af:64:fe:93:35:2e:
0d:45:f5:bd:df:32:19:24:6e:ca:56:26:56:63:bc:a1:f1:63:
ba:bf:75:b7:7f:fc:30:a1:3f:aa:51:f8:ef:75:7e:60:00:c0:
46:63:c1:13:cb:ed:12:12:85:fc:a1:ae:8d:c6:54:56:6b:9a:
b7:c4:96:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client