Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: T4w43rYg7YRrODXK/trJ7dIhqCfdH6FC8GnGh6SD444=
Subject key identifier: D4:F9:FE:6D:46:37:41:15:EA:0D:91:60:6F:0F:0C:99:71:99:76:C3
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 019EB68EB0405E06E398EBF74D350504F276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 12:01:04 +0000
Manifest this update: Thu 11 Jun 2026 12:01:04 +0000
Manifest next update: Fri 12 Jun 2026 12:01:04 +0000
Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: 5t2wAaI47j7fR/wrNyAnTKKVzK7iEdntyJgo/esTizQ=)
2: t2J9ADUQu_2Ult3KlZNjZGs_6Lo.roa (hash: BCmk0DiD14B7xlwMbjMv/mD5SI6hO0QJQKNwSFLmHzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:b0:40:5e:06:e3:98:eb:f7:4d:35:05:04:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Jun 11 12:01:04 2026 GMT
Not After : Jun 12 12:01:04 2026 GMT
Subject: CN=d4f9fe6d46374115ea0d91606f0f0c99719976c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:2a:2a:44:48:4c:38:6a:f0:54:90:ba:f7:
03:5d:4b:ef:09:7e:3e:c9:3b:93:e4:87:20:82:28:
2e:ae:99:1a:a9:2d:5a:d1:a7:7d:28:ae:87:fd:f1:
4c:8a:f3:57:f0:29:ca:93:4f:3d:19:f8:40:e5:d4:
23:d7:d1:b1:53:2c:68:20:49:e5:55:6c:ab:ef:0c:
d4:e6:99:33:93:5f:7d:28:4e:10:fa:7e:72:9f:fb:
46:e1:5e:91:61:b9:4e:cb:a4:e5:03:93:41:ad:1b:
cb:d2:ed:7c:73:16:78:72:82:bd:aa:e7:26:ea:c9:
c1:c0:6a:e0:30:b5:7f:90:25:0f:0a:e6:8b:66:13:
0a:72:e9:c1:71:4e:f8:23:f0:05:26:1a:a6:70:4a:
b4:8c:63:12:b3:2b:14:25:c4:96:2c:47:48:5c:7e:
6b:73:13:92:18:fa:6b:18:1b:78:ce:ca:c4:b5:7b:
4d:84:e7:76:0d:bb:6e:67:11:f2:9b:68:57:34:08:
e5:b0:1a:42:77:7e:a5:16:8e:d4:a6:ec:ac:0c:93:
fe:af:53:b7:9f:3e:77:5f:10:c5:ec:58:5d:b7:e1:
8e:e1:69:03:70:f9:fd:9e:4c:81:ae:f0:48:ee:57:
5a:1f:c6:8a:a1:95:f6:4d:fe:54:9a:12:08:c4:2a:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F9:FE:6D:46:37:41:15:EA:0D:91:60:6F:0F:0C:99:71:99:76:C3
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:80:95:c3:6a:5a:83:c1:e3:de:e3:35:e6:f4:82:43:6b:2d:
fa:2d:dd:14:0e:8b:6b:2d:a8:95:7d:f2:39:c7:37:ed:91:7e:
0f:a8:05:2b:66:b9:40:3d:72:1a:24:e5:23:09:73:f2:39:04:
1f:71:25:d3:29:59:4f:17:bd:26:73:a5:61:18:0a:ea:34:e8:
8b:1f:0d:e1:d5:ec:5c:f5:3c:c4:ab:eb:0c:d2:95:eb:4c:13:
43:b4:b3:5a:76:3b:2c:f8:3c:f1:e1:fd:e4:7b:35:b0:4b:8c:
29:a4:fd:b3:4b:cb:7c:87:dd:c1:cd:7d:fc:ae:c4:93:86:1e:
da:01:ca:3b:62:de:c4:af:08:bb:8e:dc:87:30:c4:ab:b5:1e:
b3:f9:53:28:8f:fb:60:73:d4:4a:56:78:f3:6d:ff:fd:fd:8f:
7d:d1:ab:40:72:58:74:1f:8f:b9:81:7e:d7:1d:9b:9e:f9:ed:
b1:29:c4:38:9f:c0:91:38:6b:a3:0f:7b:f4:12:60:83:88:c6:
9a:2c:4f:53:e1:aa:05:7a:c3:ac:20:7a:01:ff:29:9f:7b:53:
32:26:10:81:e5:96:84:8e:6b:f4:ff:f9:f0:1b:a6:7c:96:61:
90:aa:2c:5e:f5:f7:09:de:48:8d:44:14:c0:6a:8f:8d:c2:be:
ac:a0:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:32:57 2026 by rpki-client