Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: uHx4g7gD1KJaKVgkkrng49OhPXJUhGJj6gYIh/eEctI=
Subject key identifier: 43:2D:27:6D:F0:89:53:4D:C3:C0:87:49:58:0D:B6:45:93:B5:AA:5E
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 019D37524E2F79BF04721262AF937EB88206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:33 +0000
Manifest this update: Sun 29 Mar 2026 02:00:33 +0000
Manifest next update: Mon 30 Mar 2026 02:00:33 +0000
Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: 9lH044e54fPtJOFlZ/GBVJOxLS23nuVL/oJSvo1nL2c=)
2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4e:2f:79:bf:04:72:12:62:af:93:7e:b8:82:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Mar 29 02:00:33 2026 GMT
Not After : Mar 30 02:00:33 2026 GMT
Subject: CN=432d276df089534dc3c08749580db64593b5aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:03:20:a3:0a:4f:fe:f3:dd:bb:43:4d:ae:
a0:99:50:08:c4:13:2a:99:56:d5:9a:b8:b0:af:ad:
d2:7d:80:c2:77:a0:5b:ba:b7:71:af:77:39:87:98:
28:75:0e:c7:d9:6a:b5:78:d0:fe:73:c9:80:a2:00:
23:ef:29:1e:10:cc:ec:15:c8:45:d8:1c:48:f0:5f:
49:b0:16:4e:90:5b:40:fc:1d:fa:c8:e1:a6:ea:47:
94:3b:83:0d:b5:ad:ee:bf:8a:9f:e7:64:b9:7c:33:
7e:b2:ce:59:6f:fb:b1:a3:94:1c:44:22:43:b3:6e:
61:e8:9b:05:49:38:a1:db:fe:06:cb:01:07:5a:36:
aa:48:0f:3a:cb:22:37:00:b3:57:42:0a:45:cb:cf:
52:d3:0e:9d:d9:1c:ce:bf:36:c0:b1:85:d2:49:cf:
3c:31:06:d5:f4:4e:06:5a:ad:68:d0:92:72:64:3f:
39:1a:c0:80:78:c1:b2:e0:5e:73:62:c0:20:f8:6a:
53:38:ac:e7:40:d6:84:11:c3:c9:75:82:34:8e:da:
68:f8:5c:25:7b:f7:b1:82:c4:bd:36:f0:e9:f6:64:
35:75:65:b5:26:86:3a:54:18:df:c3:8a:73:51:79:
57:38:2b:fd:e8:2c:8b:b4:cb:64:82:f3:36:66:c6:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:27:6D:F0:89:53:4D:C3:C0:87:49:58:0D:B6:45:93:B5:AA:5E
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:7e:3c:6d:5d:42:ea:7e:b9:cd:3c:56:8b:8d:37:89:f7:
0d:80:ce:db:fe:6e:49:db:08:4f:11:2d:eb:68:43:d5:cd:57:
d1:3e:0b:02:31:21:88:91:7a:97:37:60:9f:8d:06:76:8a:37:
33:76:6b:92:2a:a2:8e:e7:0b:51:1f:0d:fb:d4:3f:ea:2a:0a:
35:5d:52:17:fe:f1:5c:10:ed:37:0c:ba:74:34:78:9f:c7:ab:
8c:54:1d:40:c9:ef:a7:56:88:5c:ed:e6:d7:96:cc:03:06:e7:
43:0e:89:27:8e:33:09:4e:83:18:a0:ba:b0:80:21:32:1a:b0:
9b:eb:b7:99:6f:47:aa:45:6e:f5:eb:fa:9e:8c:34:29:88:b8:
ad:d2:98:43:cc:32:bc:e5:09:fa:40:76:01:ae:c9:81:09:3f:
a9:21:2e:81:74:36:77:b3:91:46:83:29:7c:06:73:19:1f:2e:
40:06:45:16:79:bd:0a:48:82:46:82:87:d6:28:c1:3e:dc:d1:
40:8a:d5:50:68:d0:ab:23:25:e5:f4:8c:5d:16:17:b4:b9:f2:
5b:15:dc:e3:24:cd:f2:9c:31:c2:43:c3:bd:81:30:17:5c:1a:
23:e2:32:76:8a:8a:1f:b1:46:89:a4:a0:ae:2f:b4:8f:9c:41:
87:dc:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:07 2026 by rpki-client