Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft
File: KACGzY28R99NOJtyhcq7ixVieuY.mft (raw, json)
Hash identifier: fn5EZSyUhE5LUnRq3uV2piZM+R+5Fm2fvdBDjpHLZS8=
Subject key identifier: FF:7B:68:1F:9B:74:6C:8C:21:D7:E6:6E:46:36:CB:EF:EE:27:81:D3
Authority key identifier: 28:00:86:CD:8D:BC:47:DF:4D:38:9B:72:85:CA:BB:8B:15:62:7A:E6
Certificate issuer: /CN=280086cd8dbc47df4d389b7285cabb8b15627ae6
Certificate serial: 019D390A1840681540E2D25C59B3746AA512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft
Manifest number: DE
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: KACGzY28R99NOJtyhcq7ixVieuY.crl (hash: Mm48HdMmTisK5gSfPgY5cZWhz24c8TrgZYjh//ex26g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:18:40:68:15:40:e2:d2:5c:59:b3:74:6a:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280086cd8dbc47df4d389b7285cabb8b15627ae6
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=ff7b681f9b746c8c21d7e66e4636cbefee2781d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:50:4f:2e:a6:9d:8c:92:5c:b2:6c:88:c3:02:
b8:f9:43:fb:53:4d:0d:0d:91:c7:fb:ef:66:27:87:
e7:7b:2b:05:c0:0c:29:36:28:ba:a3:a4:0e:70:bd:
78:a9:26:e5:74:aa:ff:98:f2:5a:ce:40:6f:c2:12:
2f:69:0b:e1:9f:8c:47:71:a6:e0:c6:fd:3f:88:69:
f0:98:55:f9:18:53:4d:05:a1:56:14:0b:22:0c:84:
f6:2e:27:81:03:2f:7b:0f:16:46:30:6f:8b:f2:32:
57:ac:5d:bf:2e:89:87:58:17:37:66:92:f2:0d:b2:
b5:9e:7f:72:e3:3f:07:a9:4b:01:19:ed:51:99:fc:
7b:e2:81:36:38:5b:b9:26:ec:3b:dd:cb:1d:d6:02:
15:0b:d7:e8:98:23:72:ac:9c:05:54:16:c2:31:fa:
dc:de:cd:5d:b7:26:e6:28:28:4c:17:a3:ec:76:5d:
97:8f:ad:e7:f1:a2:c3:a6:21:ed:75:8a:bc:e9:12:
9c:b8:ae:84:87:35:e9:71:78:25:51:36:be:4f:84:
21:ef:79:bc:05:28:8e:4d:46:8a:a1:7a:51:31:79:
ff:e7:1c:fb:82:a0:17:e2:3a:cc:f6:72:0e:f1:65:
2d:f5:47:fc:56:c1:52:ec:b7:f0:df:e6:81:be:22:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:68:1F:9B:74:6C:8C:21:D7:E6:6E:46:36:CB:EF:EE:27:81:D3
X509v3 Authority Key Identifier:
keyid:28:00:86:CD:8D:BC:47:DF:4D:38:9B:72:85:CA:BB:8B:15:62:7A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KACGzY28R99NOJtyhcq7ixVieuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4554ae-999a-4703-bfe4-ce60b6534e37/1/KACGzY28R99NOJtyhcq7ixVieuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:86:9f:61:f5:e6:dc:8d:df:ff:b7:da:f2:0c:0b:49:b8:70:
6e:2b:6c:6c:05:e0:09:d1:57:63:ec:1e:15:56:13:ad:01:28:
b1:11:a9:fa:7b:5d:76:71:aa:a8:24:87:87:a4:80:78:4d:78:
b1:3c:3b:8e:29:4a:ca:a2:f8:eb:38:55:ce:b7:f5:e1:ab:fb:
8f:f7:d3:16:cb:e2:26:ed:f5:49:23:6a:13:ff:d0:53:29:86:
ec:bd:2a:40:22:59:fc:47:b6:20:bf:c0:af:51:63:c0:81:ea:
c9:fd:df:bd:78:e1:b3:98:6d:c0:23:ec:d3:d7:6f:a4:df:dc:
1c:47:c8:8e:14:7d:b7:fe:ed:e7:c8:40:ca:9b:e2:92:68:f6:
ed:73:7e:aa:e3:5c:19:97:74:eb:57:38:b7:3c:3b:68:af:70:
a5:d8:4c:cf:49:70:15:99:fe:14:d0:84:ef:47:cc:5e:4c:5d:
70:d3:f4:dd:c9:57:8e:cb:42:24:c6:08:28:3c:a3:4d:4f:07:
d9:73:64:f4:5d:17:81:ab:17:7d:95:4e:60:7e:12:ae:b7:94:
3b:f5:78:bc:f1:a8:20:1b:bc:55:c8:52:3a:bb:ba:a6:38:c9:
6b:6a:c1:61:21:19:ad:d3:d5:7f:9b:bb:54:b7:59:8a:66:bf:
6c:63:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:03 2026 by rpki-client