Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
File: KknhDg5wlLReuhwW-WN-HOxnvcY.mft (raw, json)
Hash identifier: Boy/qMQrBs28lZHg6RqtORK75bqt//uGiSGTltlKDDM=
Subject key identifier: D7:C8:1F:70:97:69:DC:6D:A1:27:0A:6C:9B:FA:25:82:D4:5C:11:C8
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019D389BB88D3CC592728FF054A40F4B45E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
Manifest number: C6
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: KknhDg5wlLReuhwW-WN-HOxnvcY.crl (hash: f80OBH1I1Ij89DwFMiNwUoBcY86LU5zZta3tRikmhss=)
2: Nvkp4OHy0XjmNZcE8fX5Z-KueDQ.roa (hash: G0/QzlmRMEQtlNEZ8lhOPdNMyp6Hv4D1m4DiR2+PyZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b8:8d:3c:c5:92:72:8f:f0:54:a4:0f:4b:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=d7c81f709769dc6da1270a6c9bfa2582d45c11c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:cd:32:df:52:a0:c6:b8:40:07:75:04:8d:
58:44:18:6f:7b:cb:ef:4f:c0:6a:f9:16:1b:66:57:
fb:a0:a5:e3:fe:fb:72:53:aa:77:9b:e7:ec:d3:52:
fb:0a:e8:dc:8b:00:60:3e:3c:69:d3:ee:13:85:b4:
42:fe:b6:40:f0:7d:08:b3:4c:34:47:e8:76:b7:1e:
23:4f:5d:96:7d:96:c6:ce:2c:53:75:68:f1:be:28:
fd:41:d3:35:e0:a4:c7:be:53:5a:7c:3a:d0:d4:71:
0d:4d:07:da:59:14:45:60:5d:2d:01:32:9d:89:ad:
9a:d7:75:b5:dd:1c:3c:d4:50:d9:48:f4:dc:e5:f0:
97:b3:0c:51:f9:d6:32:7b:44:44:b8:74:77:9b:32:
86:ad:47:40:28:e3:d4:5e:f0:90:aa:07:c9:e7:f2:
dd:f5:f4:e1:23:4f:5e:b7:7e:f7:08:96:d7:62:df:
fd:ae:b7:65:33:e3:c8:c0:40:e4:27:d7:5b:a8:ee:
28:5d:d7:5d:7e:50:a1:e8:79:64:ff:3b:7e:68:f9:
b3:36:93:6e:a7:3f:5f:a5:ae:29:2f:1c:19:4c:f7:
0a:c9:29:5c:97:ea:bb:ca:92:c4:5f:a2:01:84:3e:
9a:28:a3:cb:ea:a5:13:e3:b0:91:4f:8b:9a:28:39:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:1F:70:97:69:DC:6D:A1:27:0A:6C:9B:FA:25:82:D4:5C:11:C8
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:da:06:f6:9d:9c:07:18:c4:70:3a:6f:ac:39:72:b8:87:43:
38:d0:99:02:b8:18:42:7a:ec:23:fd:50:46:bf:97:19:e1:2d:
97:4a:80:24:85:7d:53:91:25:64:ad:59:18:91:11:42:df:65:
56:3a:5e:26:59:3c:9c:ad:a7:21:07:41:e4:17:1c:f5:fe:ee:
00:5d:56:d3:f1:cd:97:c8:3b:80:c5:50:f5:ec:83:ed:fc:3a:
42:7f:18:e7:40:fe:90:7b:c2:a4:01:56:80:ea:50:5b:fb:e0:
34:83:fe:47:b9:62:98:42:dc:d5:11:63:98:57:d4:5e:6b:50:
78:ab:f2:88:95:55:fa:d1:fb:5e:54:ee:9d:76:b8:39:b4:7e:
8a:35:13:df:8c:03:de:9a:14:ba:33:51:79:87:d1:5e:b2:a7:
5e:e8:41:ec:06:4a:5f:d2:ff:53:5a:a6:82:19:e6:cd:1e:60:
19:93:d2:e8:be:d3:0a:df:7d:dd:10:a5:e2:ac:6a:2a:24:69:
71:0a:67:77:fb:e6:4c:23:92:40:0e:69:1f:41:c8:c2:e9:8e:
f7:a1:8f:0f:25:8b:19:3d:34:3a:0b:6c:1a:73:ac:de:e8:a8:
08:57:90:90:7a:48:5d:a6:24:81:e1:45:12:53:9a:42:28:f7:
fd:24:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:14 2026 by rpki-client