Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
File: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft (raw, json)
Hash identifier: y1g7cPWIEAYW6jmzlqYvy2+HKDhGemvcYW2bfObrw9E=
Subject key identifier: 86:DE:F0:0C:77:08:C4:C3:00:F6:B8:80:B8:DE:6C:B2:65:C9:ED:1E
Authority key identifier: 2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
Certificate issuer: /CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Certificate serial: 019D38658E62C82B0F1A56362E116FE7CE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
Manifest number: 0215
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: KC3pwRJlxssQCjrX0g5HrbfU1EI.roa (hash: si4EVd8souGe3WH04N57kO7Q5aV9/qU7ZKR+lctmJH4=)
2: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl (hash: JbmD4eRKQRRpy0DH3zCe0GP+oNhGe/SjkDsGyAIB9ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8e:62:c8:2b:0f:1a:56:36:2e:11:6f:e7:ce:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=86def00c7708c4c300f6b880b8de6cb265c9ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:0e:1c:5e:bd:b5:f4:6c:6e:02:fb:3c:3a:
8b:92:d0:de:1b:ab:5c:6e:00:92:5a:c4:57:85:65:
86:2c:9c:48:6e:4f:e2:a4:9a:ec:f1:69:28:05:e1:
b9:71:c4:1a:b9:e3:1f:9e:76:7e:7e:9a:dd:5b:46:
6b:ad:8f:83:2f:9b:c0:c0:bb:0e:62:7d:3c:c4:e7:
ea:07:2b:5f:16:b2:09:f8:d2:cc:56:f0:3e:5a:5e:
72:6b:0b:60:21:bc:d4:71:f0:f6:94:e5:09:fa:32:
42:2b:58:52:88:a6:33:bc:d4:67:d2:30:e3:e7:41:
5a:62:4e:a1:57:e4:b3:19:e5:1b:f2:a7:33:8e:87:
2c:28:98:4d:c7:3f:c3:ec:57:25:a7:71:8c:0d:71:
c8:5c:1a:83:cd:5b:5b:6f:6a:ed:27:c0:1b:d5:94:
75:5e:9f:9a:4b:54:85:d1:f7:da:9d:80:eb:43:0a:
2c:17:85:d8:d3:8a:8d:12:7f:c8:2d:4a:d7:e2:f2:
49:cd:c7:8b:8f:65:e6:ee:99:eb:a3:a9:c5:d9:85:
19:b7:97:b8:15:f0:4f:25:41:71:1c:c5:bc:f4:10:
de:6e:56:ae:bb:5a:ed:98:10:45:19:7c:7d:e8:89:
2b:8f:cc:e5:c5:0e:16:8d:03:56:23:de:37:c1:d1:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:F0:0C:77:08:C4:C3:00:F6:B8:80:B8:DE:6C:B2:65:C9:ED:1E
X509v3 Authority Key Identifier:
keyid:2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:86:4e:d9:e6:9a:2a:c6:cd:5c:d8:9a:3e:73:db:59:5a:ad:
03:ec:ea:53:14:c5:a5:2d:70:a3:3a:5c:93:56:89:9a:47:19:
38:b7:04:41:69:f2:f5:92:44:ce:a5:98:94:a7:f2:3f:ab:85:
75:be:8d:80:ee:8a:77:44:20:4d:7d:2e:e7:5c:60:b0:a9:33:
3b:32:c4:47:ca:4e:91:4b:6d:ec:3f:22:49:66:65:49:e1:68:
3d:dd:17:e4:54:40:ae:22:91:4f:66:cd:98:1c:b1:82:db:12:
43:6a:d9:9b:d9:2b:8a:a2:9a:1e:a4:67:bb:cc:8a:2a:b4:46:
7e:8a:e8:9d:6f:07:07:ce:b3:ae:48:bb:37:cf:4b:35:21:72:
20:f4:69:7e:2e:66:b2:48:d6:1e:d0:2c:ad:d4:24:89:e1:df:
eb:d9:7f:c5:63:b3:08:27:58:1f:f6:e6:98:f1:61:06:c3:c2:
70:d4:3c:fc:cf:7b:0a:8a:a2:ba:98:47:23:03:0f:6a:58:af:
d7:22:e1:f1:43:28:b5:cf:55:c8:a0:80:33:e8:87:9b:32:0b:
92:4e:5f:8e:70:d0:76:93:a2:2f:01:d5:25:70:83:cb:a2:0d:
a7:2f:0a:86:46:b7:ec:48:00:79:59:fe:21:57:e1:4b:d4:2c:
20:ea:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:02 2026 by rpki-client