Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: lKHXjtSOtMTMqwud6X0a9ssjB+SP5v2px+yoj9Brr+M=
Subject key identifier: 77:C1:AC:DE:A1:8C:EF:B3:7F:72:AF:B4:33:4C:96:3D:18:66:82:D3
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 019D37BFEEA924AFC29F476D9CBA93C14574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: GSq6MEyhs79LE/9MPnIZEBIAhfhplyMt05qu9f3+QVY=)
2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=)
3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ee:a9:24:af:c2:9f:47:6d:9c:ba:93:c1:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=77c1acdea18cefb37f72afb4334c963d186682d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:58:1d:58:fa:c3:6f:14:ce:c5:4f:d9:13:
62:57:93:77:25:c9:b5:3c:93:79:d2:91:d7:05:40:
74:a9:e2:40:eb:81:27:43:6d:29:fa:64:3a:48:fa:
07:5a:44:df:db:51:8c:f3:b4:2d:c0:7e:75:ec:03:
7d:09:a6:1a:e7:d7:4e:53:5d:9b:87:43:f6:b2:1e:
c7:1d:c6:d0:ff:b6:ab:d9:56:0f:f5:78:90:dc:ac:
70:1c:a2:b5:f3:af:71:ef:e2:5a:df:b5:89:3b:e7:
f3:69:ad:f9:40:70:16:5b:1a:4c:98:d2:b8:7b:c0:
2e:c2:16:74:46:7b:13:49:0e:03:1c:bc:53:97:31:
42:e0:74:e3:5b:e3:1b:a1:3f:59:bc:16:c7:3c:62:
b3:c3:f9:cf:66:e6:86:67:8a:01:70:87:e8:5f:2a:
85:e9:33:dd:1f:da:f0:b8:73:8d:fa:6f:4e:09:dd:
1c:f5:31:7a:c2:35:1c:b3:8d:e1:12:fd:ac:10:0e:
96:0d:3a:a0:7a:cc:4f:34:53:84:74:5e:2b:92:2c:
a0:e9:76:74:ad:e6:47:b5:83:97:84:22:fe:ab:64:
f1:90:ce:b6:f6:5b:01:fc:c2:a0:a6:73:ee:83:7d:
a0:77:e8:96:cc:4f:b1:42:fd:b5:d2:7c:45:5c:39:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:AC:DE:A1:8C:EF:B3:7F:72:AF:B4:33:4C:96:3D:18:66:82:D3
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:5c:fa:5f:bd:0f:68:a1:68:cc:05:0b:68:86:7e:07:37:
90:db:eb:3a:b9:14:ef:8b:12:4f:2d:91:ef:93:ce:ab:f6:11:
4f:7b:75:1f:57:b1:b1:38:86:69:04:a8:ed:0b:22:a1:50:9e:
09:69:b4:d1:27:da:85:fe:fd:5f:77:f6:06:a8:c0:8b:1b:89:
b3:bf:4e:cb:44:54:d7:5e:3c:8c:ee:0b:60:0b:c6:5b:75:07:
6f:98:47:94:27:89:7d:13:ae:24:c5:b3:1d:0c:12:3f:7e:dd:
5a:71:07:99:8e:44:34:75:79:52:2a:43:98:d0:e3:80:1a:73:
ad:bc:72:ca:f4:35:58:7f:5b:b9:f6:1b:22:9d:36:0f:65:c4:
bd:eb:de:cf:d2:73:3c:83:81:54:59:d1:ad:87:b2:dc:dc:ee:
2b:1f:9a:d2:fc:a0:a2:8f:32:63:a4:b3:5f:75:7b:19:40:48:
52:17:1b:70:fb:21:b8:60:2b:de:17:9e:83:b3:b2:8e:36:a8:
6e:91:b5:65:92:ee:4c:36:4f:f8:44:f3:17:1d:fd:c3:d1:cc:
f9:b8:b5:15:50:09:05:be:e3:84:a4:73:a7:9d:df:03:00:c8:
2b:5f:17:b8:ff:09:df:15:f6:ae:fb:05:fd:2d:15:1b:e8:41:
8c:cb:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:01 2026 by rpki-client