Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
File: kgm43V6nJYkIN4Zh8rqe-JrToLE.mft (raw, json)
Hash identifier: +4XJhuIUQXJonugYA5NgLe4Sa0cxnE2Xyc9SxAkDuHs=
Subject key identifier: C0:27:2E:A7:FA:13:37:B2:1B:C8:24:6E:96:DD:5E:C1:06:A7:DD:6B
Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Certificate serial: 019D37F71ABEBF61F4C442552504ED6C18F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
Manifest number: 0402
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: F6o9j4Ie6b4y0wHKIVuz_fNCXFg.roa (hash: +0BcBPAOax0BdntxWWSdx/T51z6sfm76K1uE6tYz2Uk=)
2: kgm43V6nJYkIN4Zh8rqe-JrToLE.crl (hash: NJ8QLearvstKna4gKqUiN8d69s8WFn1yN00h+Ob+d44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1a:be:bf:61:f4:c4:42:55:25:04:ed:6c:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=c0272ea7fa1337b21bc8246e96dd5ec106a7dd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:39:76:67:b8:9c:ee:1f:b5:03:eb:33:50:
02:cb:21:47:3f:b3:39:8e:8c:90:03:78:72:e5:93:
15:93:7e:54:81:dd:53:be:8b:2a:37:14:db:6b:37:
a0:2d:88:66:0a:bf:23:a2:43:d7:4b:0d:9a:7e:b4:
5f:1e:d1:0d:02:dc:ea:43:b8:bd:42:35:eb:47:2f:
e8:1a:0e:34:cf:30:e3:83:1b:cc:26:05:be:54:9a:
3c:44:fe:4d:56:15:b9:e9:dc:2b:b2:48:47:65:67:
3c:a2:d7:a3:40:c1:35:84:59:77:63:f5:fa:66:e3:
dd:3f:6f:a2:32:2d:4a:ef:ea:99:54:4c:08:d9:22:
42:ab:68:ee:bf:44:e7:04:02:78:89:b1:08:97:be:
f0:19:d9:f3:fe:9b:4b:24:b6:31:b5:6c:bc:14:db:
8f:b0:01:8c:e7:fb:80:41:29:ba:89:29:fa:2a:2c:
04:34:e8:1d:a8:3e:95:85:ad:59:d1:c1:5b:c4:3c:
3a:25:a2:db:95:19:8a:3a:80:e5:d2:5d:9a:7d:49:
da:30:36:8e:99:1c:5a:f0:70:c5:4c:26:b4:d5:ab:
e3:26:9d:b1:74:0f:c6:2a:f6:bf:1f:85:a5:02:62:
55:fd:43:6e:31:c0:7d:36:5f:cd:5d:bf:f3:35:dd:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:2E:A7:FA:13:37:B2:1B:C8:24:6E:96:DD:5E:C1:06:A7:DD:6B
X509v3 Authority Key Identifier:
keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:78:ca:2e:20:82:da:92:eb:cc:b1:4d:53:12:07:e8:2e:
fd:55:95:9c:fa:c2:53:f4:cc:f3:f7:b6:be:2b:38:0e:47:fa:
c6:18:29:b1:a2:dc:69:30:3c:74:a4:36:e5:87:fe:35:66:ea:
d5:57:02:de:55:18:66:e8:17:c9:ff:81:09:ca:f1:9a:0f:6f:
33:f5:82:ae:77:e4:e1:d4:22:11:25:a0:17:51:84:67:37:d0:
af:25:ed:99:4f:6c:3d:30:b4:15:fe:7f:87:d9:95:28:09:0b:
7a:f6:38:bd:14:61:71:77:05:77:2c:15:21:8e:f9:ab:d7:99:
10:2e:29:8c:ae:d0:a6:8a:5a:a0:79:5f:17:77:9d:c9:67:e5:
4b:79:22:83:ac:36:3f:19:ec:83:f7:d5:2f:44:1f:3b:41:8e:
bd:f3:82:4f:54:16:02:18:a0:d0:0b:63:ae:58:f8:f8:30:99:
6a:05:29:42:24:ca:64:ce:af:0b:17:5a:58:f6:19:10:a5:72:
47:e3:2a:3b:43:71:ec:2d:7a:86:e2:b0:7c:f9:35:f1:fe:3a:
cc:35:57:bd:92:b7:4a:9c:8a:85:46:e1:10:0e:9c:a4:21:88:
f1:5f:d0:e3:8c:4c:8f:dc:b6:cc:38:73:75:ed:53:2f:af:c1:
cc:ea:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client