Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier: LzQIXbRK2f1lQ7enw1X4j7+zZR5xjVla/5774DYUlpM=
Subject key identifier: FF:30:B5:3D:C0:09:ED:BC:13:35:89:9A:0B:C8:80:B3:B0:E2:86:16
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 01A17C29261C31B3BFBD99DA82F6A03CE39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number: 16B3
Signing time: Tue 27 Oct 2026 07:00:33 +0000
Manifest this update: Tue 27 Oct 2026 07:00:33 +0000
Manifest next update: Wed 28 Oct 2026 07:00:33 +0000
Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: GlX6/3OrcUoNrnhjuFXNBwAc4l1LljIQA8z5WGTXsY8=)
2: _4eyDo0YaGsmGxLjpSLVcXjQlMA.roa (hash: RsUb78pB4Qf1AjbUOQg1QR3AESX/yHh6P81eH5hNHKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:26:1c:31:b3:bf:bd:99:da:82:f6:a0:3c:e3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: Oct 27 07:00:33 2026 GMT
Not After : Oct 28 07:00:33 2026 GMT
Subject: CN=ff30b53dc009edbc1335899a0bc880b3b0e28616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:2a:6a:7c:65:61:08:f2:7e:51:7d:50:e5:
2e:8c:d1:9f:68:4e:89:1f:4c:81:48:1f:df:5d:17:
d3:1d:1a:90:3a:e7:de:30:dd:3e:cf:25:35:31:d2:
19:7a:67:ef:1f:a2:af:90:ae:d1:8b:c1:13:4e:8e:
45:12:50:0a:d0:5a:2b:b9:72:d4:1c:6c:85:88:d0:
e2:fe:1d:81:03:dd:bd:e6:13:f5:54:68:c3:a3:15:
6f:e8:aa:d9:31:6c:53:b3:e2:1c:a9:56:1e:eb:11:
00:01:cc:16:8a:34:56:60:40:f6:9e:02:9e:a1:0c:
f0:8e:91:35:ba:47:0c:c0:b5:41:ab:01:0d:64:b1:
8d:db:5e:3b:c5:69:4b:e0:e2:62:b6:bd:17:da:c1:
e5:e2:a5:b2:a9:2f:02:f3:0d:4a:ca:8c:2e:a4:4a:
29:c6:63:88:3b:6f:f4:8f:d9:2d:ae:a3:23:c4:6c:
48:6c:5b:47:f3:8f:4a:e7:96:23:9b:ab:08:32:97:
04:e1:0c:bf:a4:8a:4a:d2:41:44:0c:11:dc:7b:b2:
5e:06:8b:7b:dc:c4:ab:fc:10:a0:70:0d:34:51:da:
e7:c3:5f:6e:f9:fa:fd:81:6e:7e:ce:98:67:50:bb:
af:a6:e2:2e:30:e7:2b:f9:26:ca:f7:88:34:3b:4a:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:30:B5:3D:C0:09:ED:BC:13:35:89:9A:0B:C8:80:B3:B0:E2:86:16
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cf:4d:c3:2b:57:c5:d4:b2:8f:61:89:8b:c0:d7:5d:24:c9:
42:f6:65:8d:4a:06:6d:c8:92:59:06:b8:99:13:58:06:b0:91:
39:e3:37:b6:ba:6a:b3:d6:66:3f:f9:4c:7e:c1:3b:86:40:f4:
01:25:00:ab:44:64:21:56:ee:40:29:51:a4:b0:15:22:34:16:
b9:58:8c:90:65:80:81:12:c7:65:02:ed:a2:7a:fd:2f:84:f5:
bd:7b:e7:ac:fe:f7:b2:fd:db:88:e5:58:0f:fb:13:27:72:12:
b9:46:e0:19:42:e1:5e:bb:af:3c:72:d5:e4:bb:ad:55:b6:66:
6d:89:78:03:e5:e4:be:57:df:53:66:4e:b3:76:a6:a8:61:a2:
b8:94:76:29:ff:8b:d6:3d:e6:9e:cf:3c:c7:1d:a2:c4:b6:96:
77:68:0a:e0:a2:50:0d:3e:7a:a9:d4:58:bd:49:6a:b8:0d:86:
7b:4c:0d:bc:4e:7c:5a:fc:96:9c:b4:82:a6:c9:78:a9:78:da:
be:34:1e:a4:bf:7d:71:3d:a1:50:aa:1b:9b:1e:d9:6b:af:4d:
31:1f:55:56:bb:d9:1d:bd:5c:c5:6d:2b:5d:d8:3c:3e:bb:92:
99:43:6f:67:87:0d:b0:43:f2:48:13:0b:95:a6:b6:2d:f5:31:
48:71:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:50:47 2026 by rpki-client