Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: Wutwt6qHE/aaXZ+B0kpPV8CIZgTP3fr1YH3rOAl6uPQ=
Subject key identifier: E2:FF:44:0B:7F:91:C3:93:7C:CE:93:47:90:6C:81:64:B0:B7:83:39
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 019D3940F90E9FFB1B730CE0A15782E22379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 176E
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: PHSh2RK3m4dpqjU8hk1hE9xGqzI.roa (hash: z9RT/9Jkq4vz3VK737R/u9nIymh4paqLKc/5slB5Igw=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: 4Bph1uae/gWgKyvYc4sCp2n5EWeiDCOnS8LHx2VAXSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f9:0e:9f:fb:1b:73:0c:e0:a1:57:82:e2:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=e2ff440b7f91c3937cce9347906c8164b0b78339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:69:2c:37:82:0c:2e:7d:08:13:93:92:82:
4d:ed:fe:e6:89:4d:ff:7b:fd:59:fb:0e:c6:0b:0d:
5b:1e:44:95:bd:00:9e:56:6b:a1:8a:46:d6:50:ae:
f6:a7:ec:0a:b3:e8:bc:28:5e:24:92:5a:4e:c5:a8:
29:5e:4c:65:b0:f1:3e:23:3c:29:ee:c0:a9:cf:b6:
9c:73:cf:02:81:bb:a5:e7:18:39:6f:93:43:03:ea:
6b:fd:6f:27:73:f7:cf:a1:61:a5:f0:56:cf:4c:96:
ab:2a:36:4d:76:ad:61:b1:ba:58:4f:37:a5:29:da:
46:a5:18:2a:e7:25:2d:ff:a9:8c:d5:c9:40:94:35:
38:4b:ce:4b:be:7f:32:e6:8b:52:ca:4b:16:15:4c:
f0:68:b6:1b:54:b4:f6:b2:52:fc:79:ba:34:ec:81:
9d:54:7e:78:8c:18:08:81:9f:48:57:43:6f:f5:d9:
33:8e:4f:64:24:b8:20:76:30:c1:eb:3f:a2:5d:a0:
73:46:65:5c:8f:ce:dc:44:b1:42:09:3d:83:09:74:
43:0c:ea:15:e6:5d:54:d2:21:89:4f:1f:45:ac:b9:
f5:ec:2c:f6:6a:ce:ee:42:7c:f7:91:19:aa:a8:0d:
73:0f:ee:f3:bb:0a:24:1e:1c:2a:11:6f:f1:5d:70:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:44:0B:7F:91:C3:93:7C:CE:93:47:90:6C:81:64:B0:B7:83:39
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:37:a0:a3:44:39:e6:d3:a3:4f:0d:42:cf:cd:3b:f7:8e:0f:
ba:c8:64:47:86:5f:14:58:78:ab:6d:13:1b:8a:74:1f:ec:4b:
20:31:a6:8b:01:fb:97:1b:54:6d:2c:73:7b:90:81:f7:db:2e:
bd:80:61:db:62:0b:ed:20:63:60:37:6a:0e:52:dc:46:50:48:
e9:bb:38:26:7e:f6:69:7d:84:7b:72:4d:77:9f:31:33:44:98:
bb:85:9e:54:be:8d:46:ba:39:08:d5:67:5d:3c:62:99:88:5c:
2a:fc:b0:b8:4b:64:30:29:ef:31:70:33:9e:46:c1:51:a4:c1:
e7:f0:a4:a2:5b:90:f9:56:e4:18:d9:18:be:bc:8b:38:ab:81:
83:7e:38:50:46:cc:d2:97:0c:5a:66:4d:d7:9e:d8:19:ab:5f:
bc:af:db:bf:83:39:12:6d:87:8f:0d:0a:e9:b5:a8:c7:e9:14:
49:5f:95:0f:3b:dd:04:c3:45:29:e6:62:95:0a:24:cc:c7:1c:
69:c8:96:be:c8:7f:7d:df:95:77:53:ef:b0:20:92:b0:54:bc:
00:dc:b7:08:ac:1f:21:70:61:0b:f2:34:bc:d7:16:42:bc:fa:
d9:92:d4:a1:1e:d7:c2:84:a3:a3:7f:49:82:28:df:56:e7:37:
0d:2c:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:03 2026 by rpki-client