Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: kFUzJwke2xysiCEmiyjvG//YKPJX8pqYkJBK95EbFzM=
Subject key identifier: 25:3B:06:A6:83:42:20:95:CB:42:C2:37:40:93:6D:FC:C2:21:34:A0
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019D39AF6117989CE81FB6EA000B1DBEBC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 08E4
Signing time: Sun 29 Mar 2026 13:01:28 +0000
Manifest this update: Sun 29 Mar 2026 13:01:28 +0000
Manifest next update: Mon 30 Mar 2026 13:01:28 +0000
Files and hashes: 1: 8iSljF9yURlFbqs-gvEXq7OZBjM.roa (hash: ARcwma/vswYt5XBxVOW0CoTAWWMy+ZmtkB5FXlj5D4U=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: yuT8Y2gi3pIZjDxfAekSxufw/D29i5jtfcp6bInWoug=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:61:17:98:9c:e8:1f:b6:ea:00:0b:1d:be:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Mar 29 13:01:28 2026 GMT
Not After : Mar 30 13:01:28 2026 GMT
Subject: CN=253b06a683422095cb42c23740936dfcc22134a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:94:01:bc:95:88:1c:f9:61:8d:37:57:28:
06:6d:ed:07:88:a8:1e:35:7f:69:2b:c9:e1:10:90:
2f:1b:72:43:dd:dd:e1:ff:b5:d0:b2:8f:1a:5f:53:
e8:6a:2e:be:82:9b:1b:dd:93:ec:2c:75:99:17:ea:
1a:39:9a:3e:25:c4:5d:aa:54:b9:6f:a8:9b:01:1e:
79:19:f6:86:5a:2a:43:99:31:33:db:b9:35:8f:d1:
f2:20:5a:27:0b:56:af:6c:58:b6:6d:8e:cf:6d:63:
80:4e:49:4e:22:1f:7c:19:8d:48:07:a1:f8:f9:3e:
6e:7d:5d:80:3d:ae:b2:0a:c5:50:25:e2:64:4b:18:
13:64:2c:35:7a:27:f6:e8:6e:ac:09:ac:5d:74:b6:
ed:4c:9d:19:14:43:d7:26:1f:79:f4:b2:9d:38:e1:
0d:c5:a7:cb:c7:28:10:bd:13:f6:6a:11:f1:71:d2:
e5:98:7b:e2:9b:0d:c0:b0:1b:44:26:c7:c0:df:ec:
87:27:bb:a8:ee:13:e4:e7:47:86:26:1b:b6:cd:29:
96:a0:45:41:78:d4:89:72:d1:4a:93:8d:85:a2:de:
08:2f:d3:67:a2:01:03:49:bb:a0:78:71:85:aa:a2:
af:32:e2:66:63:7d:1e:29:75:7e:bc:82:35:a9:28:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:06:A6:83:42:20:95:CB:42:C2:37:40:93:6D:FC:C2:21:34:A0
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:62:34:52:84:fa:47:9a:24:af:2a:15:93:ff:b2:73:af:
c9:50:aa:f0:3e:e1:f6:8f:31:ad:83:af:e0:74:d8:e0:76:e5:
0e:28:ea:ba:96:92:83:77:14:e9:73:0e:45:b6:c4:6a:54:43:
6f:38:fb:b6:45:9f:81:1f:da:3e:a1:a5:28:5a:1e:12:6b:87:
67:8d:0b:5a:dd:64:fd:c4:c2:00:88:87:04:5d:db:c5:a2:9f:
d8:34:68:ce:e4:da:01:b2:85:73:7b:d8:86:f6:59:4b:cb:6f:
8a:c2:da:36:3b:38:99:d2:b7:ab:8b:9f:24:28:59:cc:65:7c:
32:69:ce:b2:9d:f1:2f:f0:7a:ff:3a:5e:33:fb:08:62:44:55:
d4:7e:69:88:11:3f:97:2b:23:c4:15:6d:ad:0d:50:57:15:71:
b5:66:0f:24:e7:91:47:34:e1:ea:ee:82:12:74:0b:ca:25:9f:
ba:d6:ae:b8:0c:a9:8d:c2:74:16:c4:ce:17:8b:3a:18:dc:1b:
fd:db:01:f7:7d:c2:6c:5b:fb:b7:10:eb:6d:b7:d6:a8:5e:62:
98:da:40:4f:bd:84:08:f4:88:2b:3b:d7:e7:34:38:db:cb:f2:
9b:e4:5c:9b:b0:51:b6:3c:0b:45:2b:6e:1d:91:41:d1:74:7e:
45:3f:d4:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r2EXmJzoH7bqAAsdvrx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw
YTFiZmYwHhcNMjYwMzI5MTMwMTI4WhcNMjYwMzMwMTMwMTI4WjAzMTEwLwYDVQQD
EygyNTNiMDZhNjgzNDIyMDk1Y2I0MmMyMzc0MDkzNmRmY2MyMjEzNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLCUAbyViBz5YY03VygGbe0HiKge
NX9pK8nhEJAvG3JD3d3h/7XQso8aX1Poai6+gpsb3ZPsLHWZF+oaOZo+JcRdqlS5
b6ibAR55GfaGWipDmTEz27k1j9HyIFonC1avbFi2bY7PbWOATklOIh98GY1IB6H4
+T5ufV2APa6yCsVQJeJkSxgTZCw1eif26G6sCaxddLbtTJ0ZFEPXJh959LKdOOEN
xafLxygQvRP2ahHxcdLlmHvimw3AsBtEJsfA3+yHJ7uo7hPk50eGJhu2zSmWoEVB
eNSJctFKk42Fot4IL9NnogEDSbugeHGFqqKvMuJmY30eKXV+vII1qSif7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU7BqaDQiCVy0LCN0CTbfzCITSgMB8GA1UdIwQY
MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt
M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy
LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuRiNFKE
+keaJK8qFZP/snOvyVCq8D7h9o8xrYOv4HTY4HblDijqupaSg3cU6XMORbbEalRD
bzj7tkWfgR/aPqGlKFoeEmuHZ40LWt1k/cTCAIiHBF3bxaKf2DRozuTaAbKFc3vY
hvZZS8tvisLaNjs4mdK3q4ufJChZzGV8MmnOsp3xL/B6/zpeM/sIYkRV1H5piBE/
lysjxBVtrQ1QVxVxtWYPJOeRRzTh6u6CEnQLyiWfutauuAypjcJ0FsTOF4s6GNwb
/dsB933CbFv7txDrbbfWqF5imNpAT72ECPSIKzvX5zQ428vym+Rcm7BRtjwLRStu
HZFB0XR+RT/UoA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:19 2026 by rpki-client