Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
File: Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft (raw, json)
Hash identifier: COLz0mGB6lKATJgUQnHy5k1ym+WO9Pnrv+zzT3jNmMo=
Subject key identifier: 49:A3:7A:15:78:13:F4:5D:FF:D8:38:CC:DC:56:BB:99:62:D6:22:17
Authority key identifier: 29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3
Certificate issuer: /CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3
Certificate serial: 019D382E5A696B62D5933D978ECE354DE606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
Manifest number: 0172
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: H6XYccC7fpMMsVAvJhpTJJjKAts.roa (hash: VBnY93gu3N5mykvYUP5adQhIP1FUaypyR6LQP53Vd6A=)
2: Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl (hash: YXqx+NbSe7Nst7Pv9VWB1zJMS5MS7+6VJ13i9jmxiC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5a:69:6b:62:d5:93:3d:97:8e:ce:35:4d:e6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=49a37a157813f45dffd838ccdc56bb9962d62217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:d4:7f:0c:0d:cf:62:d3:41:ed:ce:61:6e:
a3:3c:bf:4f:3b:bf:d3:98:9d:2d:be:f1:92:ed:02:
58:73:41:b1:9f:27:e6:70:4a:9f:3a:72:63:16:f7:
20:42:52:1a:ae:0f:d6:c0:cf:47:bf:04:97:12:8a:
04:93:36:d1:e6:14:53:a2:07:87:c1:c9:6f:b4:c1:
0e:ed:11:c4:7b:3e:c1:52:67:cd:75:a8:be:9b:eb:
38:63:60:a8:ba:bd:c4:a2:38:6b:64:96:59:99:fa:
84:09:7c:9f:9e:50:02:5a:94:01:f6:3f:ff:83:f8:
24:42:e8:5b:6c:f7:92:05:0c:b1:df:c3:88:b1:80:
eb:39:c1:9f:e1:ee:1c:d9:bb:3e:77:e2:32:f5:51:
0a:8e:12:3c:8b:73:1d:ab:f2:ea:ba:6f:2b:7b:23:
c9:00:55:b9:7d:46:e7:f4:ba:a2:5a:9a:5f:b9:68:
37:00:22:5a:7d:84:2a:14:90:05:ea:eb:24:74:36:
59:22:04:95:cf:a5:75:d8:a3:fc:26:f6:aa:64:78:
3a:77:95:6a:df:ab:07:b7:6f:dc:1c:da:a4:fe:00:
f8:39:13:99:9a:9d:3d:1c:58:6d:4c:a3:c6:60:48:
ef:d4:6f:15:3c:2b:6d:a9:5c:82:7b:b4:23:f9:00:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:7A:15:78:13:F4:5D:FF:D8:38:CC:DC:56:BB:99:62:D6:22:17
X509v3 Authority Key Identifier:
keyid:29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:54:03:2e:f0:77:a0:5a:24:b3:82:29:05:9f:d7:a4:09:
08:1c:8a:4b:d2:7c:55:73:dd:eb:41:2f:e5:c1:fe:e3:1e:4d:
65:c3:55:35:ab:20:01:2d:5f:25:0b:16:6b:ff:05:55:d8:c9:
bb:e5:91:ec:a7:04:96:28:71:eb:89:a0:73:c8:fd:d1:e5:52:
d7:37:6f:aa:25:4c:e9:62:d8:98:d9:91:58:39:4d:8c:20:d9:
bd:1a:a8:e9:9f:b6:73:20:6d:f8:1d:43:23:b6:99:1c:f2:38:
6c:e0:cb:d8:48:0d:fe:5d:07:3c:95:72:81:5c:6a:a5:4c:df:
89:f1:37:ce:89:d4:f0:20:6e:4e:65:1b:06:15:da:51:9a:ee:
a9:7b:f6:a7:82:f6:e7:ab:1f:64:df:ab:58:0b:44:0b:53:9f:
b9:86:51:8f:0d:b7:ab:ba:a6:9b:24:cd:4c:37:ac:60:c6:a0:
23:1d:43:d0:53:71:89:6c:26:ba:b5:70:06:e0:19:f8:49:a3:
4b:30:68:90:db:0d:5a:a6:c5:e5:d7:8e:89:9e:f1:34:22:03:
ae:81:d4:54:2a:7a:05:90:ec:4b:db:3a:e6:49:13:4d:48:0a:
c2:5f:fd:48:5f:10:7d:52:06:98:19:5c:c0:06:19:43:d0:5d:
5a:73:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:46 2026 by rpki-client