Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: biSRx6ErRiyNE+gbQCH1J7waQKnopyLMeCz+dL9CMTE=
Subject key identifier: 8B:8D:1A:CB:8E:87:6F:37:BA:37:92:FA:48:E2:4F:F9:E0:F3:68:5E
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 019D37F6FDE67D041006F9982050009B59C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 1812
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: omfnRx/keYXMc+dg+ZqUa5RnclJIhVDVWhmbIiOn20Y=)
2: v-wCFquCVU3REEeKuxPMifGq75E.roa (hash: VExpozMOuBZjJ6RPCyBqYq82PjuTIznByXSgv//ywPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fd:e6:7d:04:10:06:f9:98:20:50:00:9b:59:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=8b8d1acb8e876f37ba3792fa48e24ff9e0f3685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:fa:3a:8e:5a:5e:d1:f5:43:de:1b:48:78:
52:75:83:83:58:64:68:05:8c:36:fa:8b:78:10:1b:
37:32:e2:95:f8:4e:38:fb:af:2a:2f:a0:e2:c3:03:
3f:50:85:38:00:44:8a:f2:8b:20:19:d6:ce:87:64:
5f:50:85:ef:c4:28:80:8d:45:82:69:c8:f9:02:90:
3a:d0:66:d8:7f:75:0a:a7:7b:45:33:42:3e:3e:52:
ca:62:9b:75:54:7b:5b:43:dd:73:dd:76:f2:e4:21:
92:e5:8a:3f:8a:6f:04:8c:6c:4b:b8:0e:64:d1:91:
3d:c0:cc:47:20:3a:57:d4:94:4f:aa:65:18:16:03:
db:5a:7a:6b:c2:1b:71:5a:c2:dd:69:c4:11:ff:c2:
87:6d:2f:9f:45:14:c3:d5:6f:62:39:65:ea:e6:f9:
87:30:13:b4:af:30:ad:66:2a:ee:fc:5b:b5:04:15:
32:6e:b1:72:c8:cd:e7:ac:1d:65:ac:c4:98:a5:ff:
eb:93:1e:5c:c6:5f:6b:e3:3e:b5:0c:bd:92:2e:e4:
5d:81:c2:6b:5f:d3:61:9a:0c:0e:ef:b9:18:8e:ed:
36:37:c2:ab:83:61:fe:48:15:c4:85:a9:d9:c3:99:
1c:9a:48:6e:89:b6:4e:39:b9:1a:23:4f:70:8b:39:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:1A:CB:8E:87:6F:37:BA:37:92:FA:48:E2:4F:F9:E0:F3:68:5E
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5e:70:d8:da:d4:e4:83:17:6c:c0:fa:b4:48:93:ec:ed:5f:
1a:a6:f0:37:0a:48:2c:11:13:54:a1:f7:19:43:f7:68:0c:84:
13:a5:13:ed:5d:fb:ab:19:2b:4d:3f:8f:8c:1e:39:ec:f1:01:
29:9a:57:75:a0:6f:42:88:66:d8:b4:34:ab:8f:79:60:b6:0b:
16:6b:c5:87:17:0b:99:2e:f2:09:73:85:7e:e3:22:bd:6f:8a:
02:aa:86:f3:21:02:30:c9:d9:0c:17:b7:1b:d2:da:83:b6:09:
2b:f3:4c:14:bc:57:7a:49:06:81:e9:23:cf:19:b7:b9:10:e9:
1c:89:8c:0e:53:63:f8:5a:26:0b:3d:bc:aa:b8:2a:97:c4:35:
b3:f7:15:9c:cf:6f:70:c1:a7:8b:73:44:53:2a:be:68:16:ed:
7c:6e:f9:a5:6b:23:78:62:a7:3c:5b:c2:b4:b2:a7:e2:37:f7:
e2:3b:2d:21:0a:58:1b:d2:d2:38:d5:6b:77:68:e2:33:34:05:
cf:cb:d4:6f:f7:df:5d:3e:a8:3b:20:7a:6b:f4:6d:b7:a5:70:
57:b5:6b:f7:b9:ee:60:71:1a:cc:e7:65:96:8c:28:47:59:72:
f4:42:bc:af:2d:d7:4a:db:05:33:d1:ef:e3:fe:fc:b7:37:c2:
ed:39:45:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039v3mfQQQBvmYIFAAm1nJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZGM4MWVhMzg5ZGQ2YWFjNGVmYmMzNGQ1MmQ3NzhlYmE3
YTdmYzQwHhcNMjYwMzI5MDUwMDI2WhcNMjYwMzMwMDUwMDI2WjAzMTEwLwYDVQQD
Eyg4YjhkMWFjYjhlODc2ZjM3YmEzNzkyZmE0OGUyNGZmOWUwZjM2ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU76Oo5aXtH1Q94bSHhSdYODWGRo
BYw2+ot4EBs3MuKV+E44+68qL6DiwwM/UIU4AESK8osgGdbOh2RfUIXvxCiAjUWC
acj5ApA60GbYf3UKp3tFM0I+PlLKYpt1VHtbQ91z3Xby5CGS5Yo/im8EjGxLuA5k
0ZE9wMxHIDpX1JRPqmUYFgPbWnprwhtxWsLdacQR/8KHbS+fRRTD1W9iOWXq5vmH
MBO0rzCtZiru/Fu1BBUybrFyyM3nrB1lrMSYpf/rkx5cxl9r4z61DL2SLuRdgcJr
X9NhmgwO77kYju02N8Krg2H+SBXEhanZw5kcmkhuibZOObkaI09wiznGuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuNGsuOh283ujeS+kjiT/ng82heMB8GA1UdIwQY
MBaAFCjcgeo4ndaqxO+8NNUtd466en/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQt
YzA3ZmZmNzQ2OTM4LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9iNjljNmEtYjc4OC00YTFmLTljNWQtYzA3ZmZmNzQ2OTM4
LzEvS055QjZqaWQxcXJFNzd3MDFTMTNqcnA2ZjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi15w2NrU
5IMXbMD6tEiT7O1fGqbwNwpILBETVKH3GUP3aAyEE6UT7V37qxkrTT+PjB457PEB
KZpXdaBvQohm2LQ0q495YLYLFmvFhxcLmS7yCXOFfuMivW+KAqqG8yECMMnZDBe3
G9Lag7YJK/NMFLxXekkGgekjzxm3uRDpHImMDlNj+FomCz28qrgql8Q1s/cVnM9v
cMGni3NEUyq+aBbtfG75pWsjeGKnPFvCtLKn4jf34jstIQpYG9LSONVrd2jiMzQF
z8vUb/ffXT6oOyB6a/Rtt6VwV7Vr97nuYHEazOdllowoR1ly9EK8ry3XStsFM9Hv
4/78tzfC7TlFQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:07 2026 by rpki-client