Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: nzcUX12c4MDKyIhDhKn6Ev5vSO0PCjwJ4aQXSn1X754=
Subject key identifier: 8B:53:28:5C:F6:CA:94:25:AD:87:83:71:58:B9:43:09:6B:4F:04:66
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 019D382E15B051822A5EFBF60EB97F1668C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: IDhm4VuF5QFt9rrXYy+9kISpII/K9/V9ncXvNuowEFg=)
2: t2J9ADUQu_2Ult3KlZNjZGs_6Lo.roa (hash: BCmk0DiD14B7xlwMbjMv/mD5SI6hO0QJQKNwSFLmHzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:15:b0:51:82:2a:5e:fb:f6:0e:b9:7f:16:68:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=8b53285cf6ca9425ad87837158b943096b4f0466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:70:d1:10:f3:fb:8f:7f:ed:56:09:9d:2a:
ac:78:37:01:ca:6e:b2:46:c1:8a:aa:05:c6:bf:26:
02:88:15:78:41:b2:e4:f3:1a:de:0c:4a:6f:f4:7b:
2e:2b:4e:40:78:34:18:c9:79:b5:2a:fb:f9:f6:7d:
7f:64:7e:89:35:1c:3e:a8:aa:21:33:6f:88:02:4f:
17:6c:2c:34:e9:53:33:e1:4c:90:3c:5d:d4:7f:3f:
df:5b:58:c9:83:db:b1:e8:c2:1e:ba:86:ac:07:48:
70:58:4d:fd:28:60:31:4e:33:7d:e1:c7:44:55:45:
f5:18:51:fe:ff:09:d0:8a:15:32:34:2c:56:fc:dc:
63:11:9c:37:fe:9c:9b:a1:95:33:e8:b3:8c:35:ab:
0d:95:8a:f2:1d:48:79:9c:ad:4d:a7:06:dc:42:cb:
16:53:a7:d3:08:47:8c:13:1f:2a:ef:91:07:26:53:
8b:45:8e:20:cc:8a:e6:0c:6d:69:0e:af:2b:b8:06:
81:2b:8f:66:e3:65:2b:a1:46:2f:18:52:2b:53:c4:
28:8d:44:1d:4f:c7:32:7f:fd:a5:d6:e7:f0:b8:00:
f2:96:7f:56:c0:f1:b8:5a:fe:c0:02:29:4f:d3:07:
0f:fb:39:85:a0:a6:f4:9a:1b:77:21:e8:8e:9e:b1:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:28:5C:F6:CA:94:25:AD:87:83:71:58:B9:43:09:6B:4F:04:66
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a9:00:5c:c5:84:c7:0a:6b:af:71:e2:c3:1e:ae:68:c8:34:
42:ff:35:56:1b:e0:f2:d2:bb:40:3a:cf:b2:72:e7:b3:c5:44:
2e:1b:bc:31:0b:6a:60:8d:a3:18:70:c4:55:7c:c1:ec:e8:22:
7e:4d:75:f0:e7:16:fb:27:47:e3:4e:60:c2:c1:43:f7:04:fe:
53:ee:aa:12:ed:a8:22:cc:76:26:9b:46:af:53:54:77:78:5f:
74:8e:28:99:13:09:0c:68:15:ec:f9:04:45:e7:1e:a0:b7:83:
bc:c1:d9:70:62:a8:58:0f:81:8d:7f:34:8b:74:33:f8:df:98:
45:e3:0b:30:ec:6a:51:62:19:70:d4:02:8e:6b:79:73:78:67:
98:d5:b4:e7:b0:cd:42:4f:d4:76:28:0e:15:e9:cb:7a:6f:22:
22:23:e8:8d:1f:90:80:9a:8a:05:8e:63:b3:b2:15:79:ab:f3:
e4:cd:04:fb:68:e5:a8:b1:a9:aa:55:17:b1:bd:1a:60:af:31:
c0:fa:6a:2f:58:fc:94:df:e9:36:e9:0b:6b:05:2b:d1:88:a8:
45:a0:84:5e:bb:af:5d:30:88:1d:d4:da:13:f8:b3:00:ee:8d:
d4:ef:5f:18:3b:a5:ee:90:25:3d:63:4f:17:1a:89:14:fd:5e:
12:c3:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:59 2026 by rpki-client