Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: YpcSMG+js+h5A3m5bVqqFHYnnQ/9c+UVKUX6HAM4oOE=
Subject key identifier: 15:3D:EE:F8:08:08:D4:C0:46:DC:49:F1:C4:8F:E0:89:A5:57:41:68
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 019D3940B084E7B91202B2026F9094D87E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: Qy+eKOY6JcW1jJqrtdhJUUWOMoafKdDvoQq+lATtwkk=)
2: ecRzktYrFjLVxOC-GlugSTEtWK0.roa (hash: rKqBSvS82bzwCh2lS4Ae0RGYw1nfUEHFPUJO90hBbGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b0:84:e7:b9:12:02:b2:02:6f:90:94:d8:7e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=153deef80808d4c046dc49f1c48fe089a5574168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:7d:2a:60:7e:b3:dd:a9:6a:15:58:5f:fb:
79:f9:45:63:b1:cd:e5:52:35:f2:4f:f0:9b:84:63:
11:de:51:6f:9d:01:a6:4f:aa:eb:cb:57:50:2d:e8:
4c:c2:ec:dd:4a:6f:1a:4d:c6:1a:9e:e6:18:f5:1e:
d7:a2:b8:b8:1b:39:c9:26:57:b2:9d:67:56:60:7a:
ff:78:78:bc:b8:6c:fd:90:0a:c1:05:1e:27:9b:4a:
a1:fb:13:63:70:d0:61:7c:e2:fb:8e:95:46:c5:4d:
91:b5:95:16:ec:8e:7b:34:ca:21:5b:8f:6e:a4:7e:
12:c7:54:30:95:e4:39:f8:14:7b:84:da:ca:40:2f:
44:f8:c7:5f:1e:4c:90:69:39:25:03:90:d1:e5:30:
11:4b:11:3a:16:10:b5:6f:a2:e5:1b:8d:dc:ec:c8:
d4:c7:d6:32:ac:f4:bc:51:16:c8:20:74:2b:5c:0b:
42:a3:81:c1:41:ba:1e:be:be:b9:7c:6d:f7:ba:5a:
42:ee:e9:6b:a4:11:6c:55:e8:4c:c5:1d:00:ab:a8:
47:d6:b6:82:ed:ad:95:34:22:fd:7c:62:c4:e1:c9:
22:d0:22:cb:98:62:19:ad:d1:3c:a3:d4:a2:d2:67:
e5:d8:a3:c2:ec:1e:91:b9:fe:b7:16:eb:72:c4:77:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:EE:F8:08:08:D4:C0:46:DC:49:F1:C4:8F:E0:89:A5:57:41:68
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:07:57:c3:5e:d1:fb:fd:89:8b:be:ea:7b:ff:7e:82:ca:ab:
3e:9e:da:e8:de:31:6b:2e:71:64:e2:63:94:85:63:3d:eb:be:
57:fc:79:8a:9d:a1:83:b8:1d:c1:80:50:ab:4c:3a:fa:ae:b2:
9c:45:91:0d:0b:b5:10:38:99:81:8e:80:2c:eb:d1:6f:14:f2:
4e:a9:a3:da:3c:ba:5c:47:78:16:03:bc:82:1e:65:94:62:93:
7e:6c:f2:98:29:7a:e0:f7:c9:7f:54:cd:47:15:9c:bd:a5:74:
17:28:ab:92:d2:7f:9b:0f:1d:fd:d2:54:f3:5e:9f:41:7d:70:
5f:2d:59:39:c4:d7:26:c1:cc:c9:c8:ad:03:f5:73:c2:72:bf:
0e:1f:f2:6b:8e:8b:40:a0:2d:e0:de:5d:a6:fc:ba:36:dd:e6:
b4:7c:d9:d1:e8:7b:97:b7:92:b6:86:b1:14:3b:73:9b:3c:da:
c9:1e:93:21:db:87:3c:8d:ae:83:6e:9b:02:30:1d:61:33:ef:
da:cb:cf:af:92:f8:88:42:28:72:52:3c:8e:d9:0b:c8:3a:aa:
42:41:f9:f0:ed:5f:99:0f:6f:3f:be:f3:cb:12:42:27:cd:56:
97:c1:b5:f7:ae:09:b9:fc:0f:85:53:f1:3a:ec:d9:36:0d:5c:
03:ac:9e:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLCE57kSArICb5CU2H4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmYxZTcyMzIzNzQyYWM0ZDgxMzZhYjZjOGU4NWRmN2Jh
MzdlZWIwHhcNMjYwMzI5MTEwMDMzWhcNMjYwMzMwMTEwMDMzWjAzMTEwLwYDVQQD
EygxNTNkZWVmODA4MDhkNGMwNDZkYzQ5ZjFjNDhmZTA4OWE1NTc0MTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAR9KmB+s92pahVYX/t5+UVjsc3l
UjXyT/CbhGMR3lFvnQGmT6rry1dQLehMwuzdSm8aTcYanuYY9R7Xori4GznJJley
nWdWYHr/eHi8uGz9kArBBR4nm0qh+xNjcNBhfOL7jpVGxU2RtZUW7I57NMohW49u
pH4Sx1QwleQ5+BR7hNrKQC9E+MdfHkyQaTklA5DR5TARSxE6FhC1b6LlG43c7MjU
x9YyrPS8URbIIHQrXAtCo4HBQboevr65fG33ulpC7ulrpBFsVehMxR0Aq6hH1raC
7a2VNCL9fGLE4cki0CLLmGIZrdE8o9Si0mfl2KPC7B6Ruf63FutyxHetvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU97vgICNTARtxJ8cSP4ImlV0FoMB8GA1UdIwQY
MBaAFCi/HnIyN0KsTYE2q2yOhd97o37rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEt
MGM0ODFmMGFkMjBlLzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEtMGM0ODFmMGFkMjBl
LzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwdXw17R
+/2Ji77qe/9+gsqrPp7a6N4xay5xZOJjlIVjPeu+V/x5ip2hg7gdwYBQq0w6+q6y
nEWRDQu1EDiZgY6ALOvRbxTyTqmj2jy6XEd4FgO8gh5llGKTfmzymCl64PfJf1TN
RxWcvaV0FyirktJ/mw8d/dJU816fQX1wXy1ZOcTXJsHMycitA/VzwnK/Dh/ya46L
QKAt4N5dpvy6Nt3mtHzZ0eh7l7eStoaxFDtzmzzayR6TIduHPI2ug26bAjAdYTPv
2svPr5L4iEIoclI8jtkLyDqqQkH58O1fmQ9vP77zyxJCJ81Wl8G1964JufwPhVPx
OuzZNg1cA6yeEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:50 2026 by rpki-client