Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: 8YIklmhduJ2gu9cHmLhSBBy4hNxmxuMUPqvhBG8ElIU=
Subject key identifier: 89:ED:D1:54:F5:3F:18:2B:EF:E8:E0:DF:8A:AF:59:DD:DA:12:D0:20
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 019D389C6463A27D0C20ECE6FB27054FB505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 0711
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: RmwecLNGMVh377pL3L9rowJXlMgJ/xYSVmk6eUaT08E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:64:63:a2:7d:0c:20:ec:e6:fb:27:05:4f:b5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=89edd154f53f182befe8e0df8aaf59ddda12d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:b8:a2:1b:97:55:56:a4:22:c3:b3:4a:e9:
f1:83:09:37:9b:08:7d:00:19:78:c8:58:06:d3:bb:
a2:7b:10:fc:33:38:20:82:b0:e9:8a:b7:4d:0b:5d:
82:59:34:c2:55:ca:82:8c:9f:1c:79:fd:6a:23:64:
08:5b:c6:71:65:5b:e5:b8:86:46:12:fe:d1:53:b4:
5f:2c:8c:46:ca:26:9b:f9:4e:c6:18:e6:c8:29:7f:
3f:d3:ff:f6:d5:b6:5c:8f:1d:37:94:ee:9f:4b:8d:
0e:53:04:13:c3:e6:30:7b:8c:fa:4d:33:6e:16:04:
7f:ae:4b:ae:9a:f6:7f:6b:34:2b:b2:bc:29:9f:bc:
46:1f:9d:05:bd:b4:0a:93:30:b3:fc:a8:f5:1f:dd:
fa:9b:d1:6e:be:82:50:f5:0d:ad:56:29:5f:29:39:
f6:95:e1:7a:1c:ef:1c:00:d2:38:8b:83:9e:9f:e0:
29:bc:ba:c5:b9:cc:d9:8d:51:c0:80:08:c0:61:d6:
79:47:f5:4c:c1:67:e3:60:38:d8:86:11:95:16:e9:
d5:ac:9d:7f:e8:48:13:ee:be:ec:70:a1:2e:52:ef:
d9:08:0c:5f:5d:1e:77:dd:73:df:d3:63:e1:ac:79:
6a:62:f4:36:d0:f7:22:1e:84:fa:31:82:81:f1:a0:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:D1:54:F5:3F:18:2B:EF:E8:E0:DF:8A:AF:59:DD:DA:12:D0:20
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:09:86:d0:eb:09:7b:04:9a:24:d3:a6:a7:55:7f:07:e1:fd:
d6:34:b5:72:a2:76:b4:63:d6:fe:41:1a:c0:8e:96:ff:9a:9f:
8a:e9:fe:39:c9:59:aa:6d:42:aa:4d:2e:a4:77:86:d7:b9:ba:
cd:34:91:89:9e:6d:43:ff:98:10:4c:51:3c:0b:ee:86:79:31:
ef:36:34:9d:65:fd:71:d4:20:61:08:6e:c5:1b:62:73:9e:9f:
a3:02:ea:d4:39:e7:cb:3a:eb:f8:45:78:c6:58:0a:5c:f6:78:
85:d6:69:4e:d7:69:fe:37:db:30:36:cc:04:88:d3:4a:9e:c0:
44:86:ac:7f:86:04:aa:74:6a:51:7d:6f:17:a6:e0:63:2e:68:
21:93:af:47:94:a6:56:c0:93:7f:b8:13:6c:80:bf:7b:60:dc:
ad:05:1c:57:d7:d6:fd:f9:63:4d:59:7f:f6:9f:0f:9f:31:d8:
15:c5:25:5b:44:50:41:51:40:2a:37:12:7b:f0:98:7e:83:69:
67:91:06:7b:5f:59:6a:85:ac:d2:14:0e:3d:18:f6:24:9e:78:
4c:a9:72:4c:7d:66:ea:48:16:31:81:b8:25:aa:35:1c:f3:45:
aa:5b:0f:33:b8:24:44:fe:63:d3:70:2f:cb:2b:3f:09:5b:69:
1d:a2:86:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:40 2026 by rpki-client