Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: MsA91vgCeOT7W8ddElBSu4lRSCwwhRrV9d5dJavU5Ek=
Subject key identifier: FD:3F:AF:52:82:81:EC:D4:81:A2:AD:A7:95:C8:79:83:4D:76:A3:9B
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 019D39AF6DD0C1741E349EB3C87D98E67CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 0B0E
Signing time: Sun 29 Mar 2026 13:01:31 +0000
Manifest this update: Sun 29 Mar 2026 13:01:31 +0000
Manifest next update: Mon 30 Mar 2026 13:01:31 +0000
Files and hashes: 1: 7vJiOOFZVIBu8OTi7uB4Ub56tv0.roa (hash: 4nXeb8eJUJSSZu0hz1s4is8W6GROXevPEkNgkVkf91Y=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: lfUc3cJ0FNTxWhTROp26lT78LWto9J625yNu+RXL42M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6d:d0:c1:74:1e:34:9e:b3:c8:7d:98:e6:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Mar 29 13:01:31 2026 GMT
Not After : Mar 30 13:01:31 2026 GMT
Subject: CN=fd3faf528281ecd481a2ada795c879834d76a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:d2:81:fb:ed:16:cb:5b:a4:47:64:bd:b5:
e8:83:be:8a:b7:89:2a:6b:f8:32:94:a3:c8:d6:e0:
0f:fc:a8:e8:ab:e1:0d:c9:07:2d:12:fd:d3:af:60:
fd:07:3d:d1:59:c9:e5:9e:24:ee:ac:b5:c8:91:c5:
5b:00:d9:32:fa:8a:af:bc:92:39:d2:ef:ab:c3:f2:
49:9c:ba:48:89:c4:f1:a4:39:9c:81:83:82:18:1b:
9b:40:d2:55:17:3c:5b:0f:e9:93:2b:14:16:ba:2a:
e5:b2:d5:cf:d1:9e:25:07:10:a0:05:00:0f:63:5f:
b1:38:bd:96:85:43:9c:79:9a:91:5e:ef:59:c4:86:
97:4f:50:92:0b:dc:bf:b0:3f:6d:ed:a1:3d:bf:3d:
37:89:74:c3:03:19:f0:07:de:0f:c3:b5:02:21:3e:
66:e2:4e:ed:90:57:51:7e:43:db:49:5d:9a:4f:cc:
de:ee:58:c0:0d:a5:ef:47:70:93:76:19:0f:d9:a7:
2b:3d:14:ee:36:d0:59:d5:fb:27:7d:de:aa:54:45:
a5:3e:7e:75:da:39:86:3f:99:b8:5c:9e:98:83:f4:
ff:6e:c7:25:d5:7f:02:8b:c5:3e:a0:5f:4a:6d:25:
51:e3:2c:f9:65:12:4a:3b:e8:45:3d:ef:6e:be:9c:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:AF:52:82:81:EC:D4:81:A2:AD:A7:95:C8:79:83:4D:76:A3:9B
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:36:c0:36:7c:d5:a9:4a:ea:52:9e:b5:1f:4c:30:9e:9b:fc:
15:9d:c5:58:db:6f:74:3a:20:3b:3d:24:54:67:20:5f:0f:9d:
6c:27:48:be:b3:13:88:82:64:ba:0b:38:6d:16:e3:f4:b2:dd:
8b:b0:7f:9c:3c:9e:da:ec:63:fa:97:71:21:c8:7b:1a:d7:0f:
18:92:ae:7e:5b:54:3a:e2:61:02:50:dc:a5:da:ee:74:e2:c0:
0d:61:46:f9:43:d7:7a:ae:7a:a8:66:65:fa:e7:ee:94:f4:e9:
ca:0d:bc:7c:a4:9c:ff:82:4e:cf:63:c8:be:d0:72:88:1d:eb:
9a:50:9f:ee:95:34:91:01:1d:21:46:01:3c:02:c6:28:c3:82:
e4:a6:eb:ee:bb:ae:e1:5c:7a:07:ce:de:f6:2a:f0:16:e8:db:
76:02:fa:52:5a:67:46:7e:63:b3:4f:ae:fd:70:d1:35:3a:38:
38:1b:94:7b:12:43:84:5e:c0:b9:b1:b2:cc:38:6f:56:d5:c1:
e7:36:68:d4:9d:d2:3f:aa:70:63:54:0b:0f:a2:eb:5e:23:bc:
14:f9:f9:1d:d4:28:3a:3f:6a:0e:d4:aa:16:8d:71:3e:a0:e5:
d1:3e:36:32:bf:58:a7:7c:7f:11:7d:1d:9c:44:9b:94:46:d1:
66:e2:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:00 2026 by rpki-client