Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: PV4yGnceqab8sF/axhSvj+yz9a0FenO8Nuf5Mrpq0zo=
Subject key identifier: FA:7C:46:EC:EB:B3:0C:44:BC:31:EB:0E:C4:98:2B:DB:75:D7:9E:4C
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019D3866777779EC6F3196D98C7463C49E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 128E
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: AJFjAChoQhmyygjYrAH9F04kQdKGWk8lv2bzIDDR25s=)
2: qOlFxZL8qRvtCfn6pv83b3CjTWk.roa (hash: yAGRaZNO2UXU7Vp3V5rpWxYXofVJuCbat4KTkM4jlWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:77:77:79:ec:6f:31:96:d9:8c:74:63:c4:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=fa7c46ecebb30c44bc31eb0ec4982bdb75d79e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:e1:ee:ca:82:65:c0:8c:49:9a:b5:48:07:
16:fc:c7:fc:e0:44:de:48:71:d3:80:80:91:5a:4f:
88:c4:17:10:0b:38:20:a3:ec:b3:5b:b0:02:51:66:
7f:6d:cf:d7:5c:e6:1e:fd:0b:04:ac:2e:f3:e5:90:
a2:90:50:4f:93:82:02:85:7d:6a:aa:d6:e0:fd:23:
a0:9e:64:63:c0:75:b6:8f:fc:72:36:6b:29:7f:61:
e2:82:ce:21:2c:1e:19:23:12:aa:74:1e:71:0b:de:
f8:7b:22:83:2f:a7:b4:a3:e0:33:fb:6f:2c:d8:f2:
b4:f5:ed:d8:fb:91:b0:74:a1:b8:66:f9:96:94:41:
9e:f6:47:ac:79:70:70:14:ac:4a:d2:a5:39:46:2b:
49:e5:a1:19:f4:28:e6:27:fd:91:3f:a2:07:af:9a:
a2:9b:5b:04:03:90:2f:c1:f1:e6:4a:99:2b:0d:55:
96:f3:f5:da:e6:f9:d7:16:2d:a2:38:31:e4:f4:23:
03:18:2f:ef:28:a3:d9:4d:7d:b7:7f:03:6e:22:65:
5b:22:a7:80:52:54:ca:a4:72:66:3a:53:c7:7e:77:
d5:bd:74:a9:95:fb:e7:bc:16:52:90:e1:ba:f3:e8:
8d:5e:a5:38:2e:ff:f2:81:59:5c:d2:bb:c2:a8:dd:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:46:EC:EB:B3:0C:44:BC:31:EB:0E:C4:98:2B:DB:75:D7:9E:4C
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:95:1c:45:a5:28:cd:dc:57:47:f1:3a:00:bf:d1:c1:ab:03:
17:bb:aa:39:0b:f4:bf:a2:4f:40:ae:ca:9e:db:7d:1d:6c:0e:
f2:9b:fe:6f:f5:5d:60:45:b7:b7:51:0c:16:3a:1b:3c:2f:f5:
c3:3d:a4:e8:50:df:13:5e:45:e0:51:79:b5:7c:b7:a5:dd:85:
5d:5a:41:c0:cc:f9:a8:0e:0f:70:7d:e5:ed:b5:fe:e1:2b:c3:
7f:d0:da:ac:3b:82:31:e1:f2:81:9a:5e:94:4a:e9:34:60:f8:
7e:90:63:0f:01:9d:a0:50:cf:0c:7d:22:d7:53:74:2e:88:90:
9d:2f:46:e3:63:94:60:49:33:f0:c9:d9:2f:40:da:d7:92:0e:
44:a7:9a:33:ec:a7:38:36:87:74:aa:56:9c:4f:93:60:9c:06:
0e:d8:ad:2a:3e:90:b2:1e:3a:de:8d:12:42:be:ba:1a:97:66:
f8:88:dd:c6:31:87:a8:b6:df:23:20:0a:34:f2:3e:63:b0:22:
00:34:30:6e:e1:51:78:eb:6c:08:e8:22:6b:88:15:74:63:33:
d2:ab:e3:3f:d3:9f:d4:b2:19:57:f9:fa:92:42:10:ab:30:80:
70:c6:85:a6:d6:39:66:47:f0:b6:9f:20:1e:31:64:65:3e:ff:
c0:e9:60:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Znd3eexvMZbZjHRjxJ4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0
Mjg2NGUwHhcNMjYwMzI5MDcwMjEyWhcNMjYwMzMwMDcwMjEyWjAzMTEwLwYDVQQD
EyhmYTdjNDZlY2ViYjMwYzQ0YmMzMWViMGVjNDk4MmJkYjc1ZDc5ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRXh7sqCZcCMSZq1SAcW/Mf84ETe
SHHTgICRWk+IxBcQCzggo+yzW7ACUWZ/bc/XXOYe/QsErC7z5ZCikFBPk4IChX1q
qtbg/SOgnmRjwHW2j/xyNmspf2Higs4hLB4ZIxKqdB5xC974eyKDL6e0o+Az+28s
2PK09e3Y+5GwdKG4ZvmWlEGe9keseXBwFKxK0qU5RitJ5aEZ9CjmJ/2RP6IHr5qi
m1sEA5AvwfHmSpkrDVWW8/Xa5vnXFi2iODHk9CMDGC/vKKPZTX23fwNuImVbIqeA
UlTKpHJmOlPHfnfVvXSplfvnvBZSkOG68+iNXqU4Lv/ygVlc0rvCqN2bIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp8RuzrswxEvDHrDsSYK9t1155MMB8GA1UdIwQY
MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt
Y2UwYjhhNTFhNDUxLzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQtY2UwYjhhNTFhNDUx
LzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpUcRaUo
zdxXR/E6AL/RwasDF7uqOQv0v6JPQK7Kntt9HWwO8pv+b/VdYEW3t1EMFjobPC/1
wz2k6FDfE15F4FF5tXy3pd2FXVpBwMz5qA4PcH3l7bX+4SvDf9DarDuCMeHygZpe
lErpNGD4fpBjDwGdoFDPDH0i11N0LoiQnS9G42OUYEkz8MnZL0Da15IORKeaM+yn
ODaHdKpWnE+TYJwGDtitKj6Qsh463o0SQr66Gpdm+IjdxjGHqLbfIyAKNPI+Y7Ai
ADQwbuFReOtsCOgia4gVdGMz0qvjP9Of1LIZV/n6kkIQqzCAcMaFptY5Zkfwtp8g
HjFkZT7/wOlgxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:17 2026 by rpki-client