Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json)
Hash identifier: IB+vaMrxzU9Pl0HSrTdybrZkEWFfvL/XJT1zsCm2ygw=
Subject key identifier: C5:E6:4D:EB:64:CB:77:92:B1:41:4B:33:33:2A:AB:6B:AB:BF:EA:A6
Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Certificate serial: 019D3940A81D7F4AD33F9F16A0170D9CD040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:31 +0000
Manifest this update: Sun 29 Mar 2026 11:00:31 +0000
Manifest next update: Mon 30 Mar 2026 11:00:31 +0000
Files and hashes: 1: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: kzDMx2aJp2xA0zS4F+qM8IZWIwlyNA7drwGFldQkIpo=)
2: mc9vgt48FDSSjfdsSGOMMwU_Xnc.roa (hash: 7YStYGH0X3lXXsv/wC32bvyXMwAf6g2zLLXt60k5Dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a8:1d:7f:4a:d3:3f:9f:16:a0:17:0d:9c:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5
Validity
Not Before: Mar 29 11:00:31 2026 GMT
Not After : Mar 30 11:00:31 2026 GMT
Subject: CN=c5e64deb64cb7792b1414b33332aab6babbfeaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:8c:ec:28:6e:4c:03:7c:8a:04:64:51:43:
f1:65:5c:6d:dd:55:25:b9:1a:03:77:ea:3e:aa:af:
f3:86:9c:5c:d3:5c:fc:2d:c7:86:df:ca:83:39:19:
b4:ef:91:ba:d4:f5:fa:de:dd:5c:fc:0e:72:59:4c:
d7:5d:03:af:b7:7f:e7:8e:f0:95:1e:72:af:5b:af:
2e:59:a1:18:33:16:16:17:98:80:fc:88:cf:b4:46:
db:2f:20:da:1a:86:41:b4:95:2e:e9:f5:9d:c3:59:
c7:99:9b:6c:4b:9e:21:ee:ee:4e:53:7f:4b:9c:aa:
b7:ef:b9:0c:fa:1f:87:92:8b:15:6f:5a:e7:19:7d:
01:f7:01:f4:c9:e7:c4:e4:4f:a3:a7:71:51:3d:74:
4d:1a:28:fb:a7:4d:fc:4f:4a:71:ec:ec:9c:cc:58:
41:94:99:b7:70:fb:e2:08:0a:8d:79:36:21:9f:91:
9c:5f:18:62:7a:d9:b1:4e:1e:8c:37:98:75:ac:f6:
6c:69:6b:b4:51:c3:05:18:f5:bb:40:c0:ef:37:d8:
c1:65:53:18:1a:f7:54:e5:6b:16:bd:f9:a5:16:e0:
9c:d4:e8:44:1b:18:e0:37:0e:a1:b9:9d:33:5a:7c:
4f:81:60:b4:3a:79:86:f0:ea:50:a3:c4:92:7c:08:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:4D:EB:64:CB:77:92:B1:41:4B:33:33:2A:AB:6B:AB:BF:EA:A6
X509v3 Authority Key Identifier:
keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:b2:b0:14:3d:55:b9:85:09:3b:d6:9f:58:a5:45:8a:40:
70:ec:98:20:36:37:36:83:fc:89:0f:71:4a:ff:b3:13:4b:9e:
c3:15:44:1d:6b:9a:ce:1b:4c:5f:b3:6d:ad:19:74:1b:da:7a:
27:2c:e6:61:41:16:c6:26:c2:97:9b:e2:67:f6:99:e1:a6:bb:
4d:a4:76:e3:92:69:86:a2:e9:7a:dd:af:63:cb:e4:c6:a9:67:
bc:71:28:81:ac:a0:85:2b:c0:0f:1f:2b:ab:6a:ff:f2:38:be:
0e:db:ff:11:10:6c:f4:1c:d0:fe:2c:a8:fe:3b:02:f0:fb:9d:
39:1e:1e:60:18:f7:20:b5:23:e6:1a:6c:0c:33:7b:eb:8d:cf:
75:cb:ad:6c:6e:b4:77:74:67:94:1a:aa:f4:bb:c2:0d:47:8b:
e6:f0:7a:5b:16:43:de:98:96:cb:90:1c:72:a4:bb:4c:25:3d:
8d:69:63:6a:03:cc:76:11:57:6d:2d:67:d9:c3:36:ca:16:27:
16:03:cb:df:83:11:98:07:90:cf:94:78:95:b4:4f:5a:31:b6:
b0:dc:4d:06:97:70:82:a8:8e:6c:20:ce:bf:d3:ec:d4:a3:a7:
6d:3d:d2:15:4f:a8:e8:4a:a7:b6:1a:9b:9e:2c:aa:b1:e5:13:
60:54:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:22 2026 by rpki-client