Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
File: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft (raw, json)
Hash identifier: udIvanUFc8epZwtDTnOzHwt7Xx0tul1WsAfcrM50Y50=
Subject key identifier: CF:FC:A4:41:33:C9:45:F0:C6:ED:D7:8F:A0:29:2C:A4:AE:76:D8:29
Authority key identifier: 90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39
Certificate issuer: /CN=907d02304a8a0630afe6a985e4dc09007851f839
Certificate serial: 019D37F73F75449A01BDD6A8B1AD4D5DFF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
Manifest number: 0208
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl (hash: +Ezn4AIaDpoAEVkwlwdXFBQZD/2A+8+u9s+7kg2kBWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3f:75:44:9a:01:bd:d6:a8:b1:ad:4d:5d:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907d02304a8a0630afe6a985e4dc09007851f839
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=cffca44133c945f0c6edd78fa0292ca4ae76d829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:24:cb:e3:96:3f:fe:f4:98:fd:4b:e4:71:
6f:34:ce:7d:2a:2e:d1:6a:ad:4d:8f:b1:dc:73:75:
96:96:70:2a:7c:d4:a4:85:0c:7a:12:8b:f5:bd:32:
7e:13:2c:7a:42:e7:14:71:59:1e:b9:c9:0d:0f:b2:
42:67:11:52:89:b2:db:7a:6f:8e:07:70:b0:b8:be:
c7:ed:cc:a8:7a:11:b7:99:e7:61:cf:c1:26:5f:7b:
f8:16:5b:6e:f1:5c:9f:c2:d6:8f:da:b9:7e:b1:d1:
b0:dd:87:a7:28:49:45:45:0a:a5:a0:21:0b:4a:57:
10:17:91:ed:ca:e5:f5:a4:19:ae:cb:be:f3:e3:f2:
70:27:9b:f8:47:96:89:04:f8:84:9d:4f:3e:9f:66:
cc:44:14:a2:b4:b8:80:f5:64:df:c7:85:94:dd:7a:
a5:a6:e2:8a:8c:a2:18:f7:07:ef:6d:fc:45:c3:6f:
2a:a8:56:4a:8e:fd:41:e4:27:f8:6c:9f:66:77:e3:
e7:81:69:d0:cb:24:c4:54:4f:8d:7a:d6:58:33:c8:
fa:cd:41:8c:7f:12:96:f3:23:87:2c:92:08:b3:2b:
6a:cc:be:8e:8a:d9:56:74:78:06:6f:8c:58:f7:57:
ea:c0:b6:b3:6e:d0:98:d0:ff:f5:6f:23:bb:03:74:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:A4:41:33:C9:45:F0:C6:ED:D7:8F:A0:29:2C:A4:AE:76:D8:29
X509v3 Authority Key Identifier:
keyid:90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:31:f7:bc:72:d6:be:02:55:19:4d:6e:41:83:16:97:50:ce:
ed:d2:0e:12:28:62:26:86:28:87:8e:13:25:22:c7:94:3d:33:
ea:6c:3a:0d:6c:53:ca:17:0c:af:0f:e1:65:e4:93:40:4e:cf:
78:79:2c:cf:21:b4:f9:4e:44:1b:8d:0d:cb:c5:33:29:ab:19:
47:7a:78:47:75:8f:6b:3c:db:59:65:c7:8b:18:96:d3:b5:65:
d5:a5:3a:7e:72:29:9f:b1:35:ef:0b:4e:f9:bb:4a:36:3a:0e:
3e:36:b9:4e:e7:8c:8d:e6:2c:16:a5:da:1b:79:06:c6:3e:e4:
f7:4f:ea:aa:78:d8:ba:88:c8:13:7b:79:9c:40:0b:e4:dd:62:
62:02:1f:30:23:22:f0:58:d1:f6:63:24:32:27:2e:1d:48:de:
7e:31:22:86:90:1f:7a:ad:e5:a8:4c:33:95:c7:63:e3:c6:07:
74:7d:3b:ee:fc:88:e2:b6:5a:3f:cd:c4:87:e0:74:e0:4e:06:
4f:fa:81:a7:a7:87:8f:96:b1:c8:46:0c:f5:99:48:f9:7a:f6:
ff:73:42:de:bc:ce:7e:01:08:fa:b9:5f:c6:f9:0b:e3:c2:27:
ab:62:a9:7f:42:2a:e1:d9:88:8b:7c:91:86:96:79:f7:d9:cc:
e6:15:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:13 2026 by rpki-client