Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: E3oF6KPfR9cClYrZMHKyzLp4F9GIE4kMMTn23rsj7vE=
Subject key identifier: F8:87:82:F2:07:B4:35:3E:75:BD:02:D3:6D:54:0C:A4:4F:53:1B:F7
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 019D389C2E283E910959344467A6529F6B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 037F
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: igP_j0gqdj6VYQfMBatyuvEtzjE.roa (hash: Cvo1yExlPO8Dsib93UiD0RmAn7lporXrd5tMSD8Uf7s=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: bCrkXFADCPcof5Bl0mFn9oTuym0GBO3dhooJt91WHl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2e:28:3e:91:09:59:34:44:67:a6:52:9f:6b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=f88782f207b4353e75bd02d36d540ca44f531bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:28:a8:ad:7b:17:0b:3f:33:bf:0d:e9:b8:
8e:99:eb:0b:5e:2d:c8:61:7e:64:90:dc:0a:6d:58:
1b:40:d9:63:aa:04:83:e2:4e:e0:e9:56:03:f2:23:
da:dc:d6:a3:69:54:5f:bd:bf:cd:d5:0f:39:29:c5:
75:88:fc:2c:1a:44:88:5c:cc:12:e7:2f:c1:4b:b0:
36:7d:a1:3e:60:1c:b8:cb:71:c7:84:b0:01:7c:5c:
53:c2:59:f6:8d:b0:9a:81:ff:c5:85:7e:d1:66:51:
70:e9:61:79:f5:e8:f9:f4:ef:0a:eb:6c:02:13:d8:
df:52:1b:1d:72:20:43:fa:24:ed:8c:76:68:49:01:
2e:72:a3:77:bf:08:15:24:19:14:34:cb:71:32:fa:
44:35:a8:55:76:72:b4:38:ee:88:19:4c:b9:02:1f:
3c:0f:9d:72:1a:1d:72:27:e4:4e:1f:30:58:f7:31:
e0:85:0f:72:a5:01:8a:1f:71:44:7b:75:b5:91:3d:
c9:af:84:1b:5d:6e:8b:4f:f0:77:ed:3f:31:11:ec:
74:13:cc:b8:02:79:9e:72:97:29:36:77:25:98:94:
ed:2d:ff:c2:3b:10:34:fe:32:ce:a3:ad:dc:8c:26:
dc:43:b1:3e:9a:a1:b1:70:bd:ce:85:a8:af:38:25:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:82:F2:07:B4:35:3E:75:BD:02:D3:6D:54:0C:A4:4F:53:1B:F7
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:31:1f:2d:e5:85:fc:3a:9f:c3:89:b4:e7:e2:bc:cf:ff:f3:
94:40:45:5d:ea:70:0e:99:39:b1:75:46:91:df:b4:b9:ad:b6:
23:83:ca:07:d1:12:fa:7b:16:14:54:52:13:e3:74:3f:5f:17:
6a:04:fc:a8:7a:d4:0e:2b:57:21:33:35:bc:27:5a:6c:ca:58:
c5:e1:b4:66:65:f8:ca:d5:46:96:05:63:d8:e2:ef:33:c0:aa:
00:71:17:7a:3d:cf:c3:00:3d:f3:aa:84:1d:2d:67:1c:58:28:
9f:86:e5:5b:93:ed:bd:46:08:e0:b4:7c:8f:d9:c4:02:97:16:
e3:d7:e6:08:6d:9a:bd:80:29:aa:b0:c9:59:31:86:ed:b4:77:
8a:94:bb:9b:75:a0:33:81:78:50:6a:26:e7:25:61:7f:68:ff:
a1:02:92:99:a7:d7:58:4e:2a:3c:20:c9:fb:69:60:27:46:73:
e0:7d:7a:2e:ed:0c:db:b9:99:e5:94:52:a7:0a:f2:2f:92:8b:
e8:99:ce:29:59:f2:42:6c:cb:66:13:5e:b3:8f:b7:a8:4d:38:
5f:22:87:7f:33:b7:a5:53:27:2c:68:31:42:f0:ea:6a:7b:69:
ef:dc:82:ce:87:4d:52:67:5f:c3:02:43:11:96:76:6b:6e:b5:
34:97:a1:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nC4oPpEJWTREZ6ZSn2siMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz
ZTFhYTYwHhcNMjYwMzI5MDgwMDUyWhcNMjYwMzMwMDgwMDUyWjAzMTEwLwYDVQQD
EyhmODg3ODJmMjA3YjQzNTNlNzViZDAyZDM2ZDU0MGNhNDRmNTMxYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OMoqK17Fws/M78N6biOmesLXi3I
YX5kkNwKbVgbQNljqgSD4k7g6VYD8iPa3NajaVRfvb/N1Q85KcV1iPwsGkSIXMwS
5y/BS7A2faE+YBy4y3HHhLABfFxTwln2jbCagf/FhX7RZlFw6WF59ej59O8K62wC
E9jfUhsdciBD+iTtjHZoSQEucqN3vwgVJBkUNMtxMvpENahVdnK0OO6IGUy5Ah88
D51yGh1yJ+ROHzBY9zHghQ9ypQGKH3FEe3W1kT3Jr4QbXW6LT/B37T8xEex0E8y4
AnmecpcpNnclmJTtLf/COxA0/jLOo63cjCbcQ7E+mqGxcL3OhaivOCVanwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiHgvIHtDU+db0C021UDKRPUxv3MB8GA1UdIwQY
MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt
ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm
LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDEfLeWF
/Dqfw4m05+K8z//zlEBFXepwDpk5sXVGkd+0ua22I4PKB9ES+nsWFFRSE+N0P18X
agT8qHrUDitXITM1vCdabMpYxeG0ZmX4ytVGlgVj2OLvM8CqAHEXej3PwwA986qE
HS1nHFgon4blW5PtvUYI4LR8j9nEApcW49fmCG2avYApqrDJWTGG7bR3ipS7m3Wg
M4F4UGom5yVhf2j/oQKSmafXWE4qPCDJ+2lgJ0Zz4H16Lu0M27mZ5ZRSpwryL5KL
6JnOKVnyQmzLZhNes4+3qE04XyKHfzO3pVMnLGgxQvDqantp79yCzodNUmdfwwJD
EZZ2a261NJehzA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:09 2026 by rpki-client