Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
File: KgedPD3CTph79wxKn6u6QFsIOkU.mft (raw, json)
Hash identifier: Ql6xFn6XRYVnjnIamj0QNC2NZE/+Zmo7oMPmALdxxBQ=
Subject key identifier: B3:83:5D:6B:9B:CC:63:73:6E:92:D0:28:69:47:5B:E0:88:53:FA:28
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 019D38667E6FCC7C67ECBCD8789C65A7772A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: KgedPD3CTph79wxKn6u6QFsIOkU.crl (hash: 2DQ9dYRcYhuqpOPYI60cdt8yGl/voENZLT82NE/Rfv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7e:6f:cc:7c:67:ec:bc:d8:78:9c:65:a7:77:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=b3835d6b9bcc63736e92d02869475be08853fa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:6b:6f:4b:89:f9:79:72:f4:96:f6:0c:f5:
36:c2:d6:1d:d3:f4:a1:5c:85:a6:03:66:7f:f1:5d:
5f:74:74:ab:4e:69:00:9f:57:d7:22:5e:5c:63:d5:
1e:46:dd:e0:c7:f3:8b:c4:b0:cb:13:29:fe:2f:9b:
49:64:e2:50:68:9b:b3:66:bd:cb:1d:f6:7a:12:41:
92:8f:42:fa:5c:11:07:16:0a:f6:ed:f3:6c:32:8b:
26:88:a8:49:ca:47:30:93:f5:04:0b:69:31:ec:1a:
34:cb:a9:c1:e8:db:38:2b:4c:28:41:49:a5:3a:ca:
53:74:8a:3a:89:32:19:13:45:f5:0a:73:85:2e:7e:
8c:eb:0a:22:89:72:5d:16:a3:cc:0d:99:01:83:da:
96:21:ed:20:0e:12:3c:57:32:42:5c:32:e9:ee:b9:
05:22:ad:3f:b9:b2:8e:49:a3:0d:47:d7:66:81:b7:
aa:8d:91:1f:95:45:59:dd:64:e2:96:50:c3:f5:80:
0f:59:a2:47:05:3f:85:40:25:31:11:ea:fa:6a:e0:
7f:96:90:88:6a:de:1c:6b:5d:db:93:3f:e0:86:40:
79:d6:33:81:9c:d2:10:e8:82:13:f8:5c:47:8d:20:
02:4d:05:69:01:de:e2:e0:8e:09:32:6b:41:36:3e:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:83:5D:6B:9B:CC:63:73:6E:92:D0:28:69:47:5B:E0:88:53:FA:28
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ed:88:56:34:43:d7:a2:d7:b4:6a:4b:59:c7:d4:94:81:08:
f0:65:93:20:d5:fc:08:f2:4c:7c:2b:24:28:a4:53:be:50:d6:
da:04:f5:e9:d2:ec:38:80:1d:0d:1a:84:94:fc:c1:07:b4:ad:
8f:17:5a:66:1b:f1:21:40:99:33:1a:81:89:59:ca:20:ce:f4:
6c:f1:5c:2e:ed:bd:84:1f:f0:99:94:6f:2a:f1:bc:de:68:6b:
3d:76:a7:97:e5:32:95:f2:f1:34:35:c4:0d:f7:74:9f:78:14:
4b:a4:8d:6b:30:29:b3:8d:d0:96:2e:20:10:14:ce:48:c8:da:
b5:c9:a6:91:e5:f3:02:6e:0a:b8:35:77:dc:93:e3:ff:b1:50:
70:06:5d:c4:7a:d4:44:10:2c:47:90:8e:34:54:18:1b:31:40:
ce:0f:2f:21:14:ac:c8:cb:a6:93:9e:c1:f6:00:96:5f:87:8c:
ac:30:b2:8b:62:76:e6:f8:52:b7:73:d5:ea:74:7c:08:64:54:
6c:f7:a5:a4:96:a4:06:71:13:85:ee:be:0e:26:38:ea:3d:ce:
32:8f:18:2f:f7:d7:c5:5c:ad:6c:d9:fc:93:eb:97:48:e1:5e:
bb:f2:04:20:8a:02:85:fc:f1:47:17:88:be:51:39:42:70:4b:
d4:7e:40:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zn5vzHxn7LzYeJxlp3cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMDc5ZDNjM2RjMjRlOTg3YmY3MGM0YTlmYWJiYTQwNWIw
ODNhNDUwHhcNMjYwMzI5MDcwMjE0WhcNMjYwMzMwMDcwMjE0WjAzMTEwLwYDVQQD
EyhiMzgzNWQ2YjliY2M2MzczNmU5MmQwMjg2OTQ3NWJlMDg4NTNmYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvxrb0uJ+Xly9Jb2DPU2wtYd0/Sh
XIWmA2Z/8V1fdHSrTmkAn1fXIl5cY9UeRt3gx/OLxLDLEyn+L5tJZOJQaJuzZr3L
HfZ6EkGSj0L6XBEHFgr27fNsMosmiKhJykcwk/UEC2kx7Bo0y6nB6Ns4K0woQUml
OspTdIo6iTIZE0X1CnOFLn6M6woiiXJdFqPMDZkBg9qWIe0gDhI8VzJCXDLp7rkF
Iq0/ubKOSaMNR9dmgbeqjZEflUVZ3WTillDD9YAPWaJHBT+FQCUxEer6auB/lpCI
at4ca13bkz/ghkB51jOBnNIQ6IIT+FxHjSACTQVpAd7i4I4JMmtBNj4C7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLODXWubzGNzbpLQKGlHW+CIU/ooMB8GA1UdIwQY
MBaAFCoHnTw9wk6Ye/cMSp+rukBbCDpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYmI4YTAtM2ZiMy00MWVlLTlmNjUt
MWM4ZDllNmVkMTI0LzEvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYmI4YTAtM2ZiMy00MWVlLTlmNjUtMWM4ZDllNmVkMTI0
LzEvS2dlZFBEM0NUcGg3OXd4S242dTZRRnNJT2tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdO2IVjRD
16LXtGpLWcfUlIEI8GWTINX8CPJMfCskKKRTvlDW2gT16dLsOIAdDRqElPzBB7St
jxdaZhvxIUCZMxqBiVnKIM70bPFcLu29hB/wmZRvKvG83mhrPXanl+UylfLxNDXE
Dfd0n3gUS6SNazAps43Qli4gEBTOSMjatcmmkeXzAm4KuDV33JPj/7FQcAZdxHrU
RBAsR5CONFQYGzFAzg8vIRSsyMumk57B9gCWX4eMrDCyi2J25vhSt3PV6nR8CGRU
bPelpJakBnEThe6+DiY46j3OMo8YL/fXxVytbNn8k+uXSOFeu/IEIIoChfzxRxeI
vlE5QnBL1H5Aqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:57 2026 by rpki-client