Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: feS6O/vU9/lGA4iE7BqTRTztOmyjL0f6mdTFT7w3FXM=
Subject key identifier: C9:12:E4:87:75:99:B7:FD:E3:A5:B9:53:5B:04:67:00:43:B4:1D:5D
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019D382E94E2CD0CB2ADB24B24DE4D55F066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0758
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: cZNUW84gnsTzb15mk0RYrhDwdYwYsSkeBWzBV1eyMhc=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:94:e2:cd:0c:b2:ad:b2:4b:24:de:4d:55:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=c912e4877599b7fde3a5b9535b04670043b41d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:2d:fb:08:3c:30:d8:d5:11:0c:e2:1b:20:
d5:25:1c:a1:03:b7:0c:2a:40:22:0d:0a:6f:0b:81:
c9:0f:54:be:34:40:13:8d:8d:be:c4:08:7c:2f:6a:
f0:4f:49:27:80:33:b4:d4:15:2b:70:d2:b9:7f:af:
ba:a7:20:77:e6:89:af:68:53:96:12:8f:ea:57:34:
2f:3a:32:e9:25:a1:eb:3a:58:e9:5a:ba:2c:9c:43:
98:19:f3:46:55:9b:84:f9:fb:6a:6e:31:73:19:6d:
18:ce:1d:67:dd:81:72:d3:45:ee:b2:23:6c:69:ab:
b6:d0:25:eb:5f:67:d3:73:df:ba:7b:e1:c9:e7:a9:
bf:6e:6e:11:4c:9f:54:c9:29:07:f7:fc:de:be:32:
89:80:ec:2e:69:ee:c5:13:c5:2d:da:d0:35:6a:2a:
39:79:9b:5a:46:fe:db:9c:ee:6d:1b:60:7d:a3:bd:
bf:52:a8:a1:cc:8f:02:bf:18:35:32:98:f7:1e:d8:
01:90:79:7e:d0:ad:ac:52:b2:5f:b8:3e:4e:d8:20:
da:95:4b:1d:25:55:11:de:cc:94:89:25:a9:09:9a:
ae:7c:e4:e9:cd:18:96:ff:67:6e:2f:b8:c3:04:2f:
56:1e:37:6d:d7:83:87:b6:a6:7c:9b:f2:0c:69:7f:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:E4:87:75:99:B7:FD:E3:A5:B9:53:5B:04:67:00:43:B4:1D:5D
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:70:0a:da:a5:9f:7b:da:38:be:fb:44:a8:47:cc:71:27:b7:
a6:f7:78:2e:4a:36:68:b2:95:36:21:e4:8f:0b:11:24:f3:50:
be:08:39:78:d7:03:5b:ee:6c:cb:97:c2:1e:a6:f4:6a:ac:f6:
08:e2:c3:c7:fb:6f:f6:0d:16:1b:9f:5a:ec:bc:c0:55:b5:59:
49:81:14:7b:13:a0:f0:de:f9:c9:d8:6e:85:64:32:97:f0:4e:
76:d4:03:31:c8:34:f7:f7:c1:c7:ae:10:90:c4:5d:86:b8:a1:
bf:0a:29:c2:a0:b1:b9:8a:46:f2:b7:16:39:cf:f8:db:5a:81:
91:7b:b0:90:b9:bc:57:ec:03:cd:bb:9e:9a:20:77:bf:1c:f2:
10:88:c6:b9:75:b8:db:fa:60:25:34:9b:bc:59:0c:a6:48:2d:
41:df:5b:52:3c:ba:53:a4:b1:0a:84:b8:28:bc:33:0c:89:c7:
0e:d1:25:aa:bb:66:9e:e6:9c:0f:83:ab:2a:e1:94:5e:2e:ce:
69:3c:61:01:08:d0:01:09:bf:58:bc:14:c3:00:dd:5a:fb:63:
a0:5f:81:3d:07:0b:f5:b7:22:1f:e8:d1:e9:f1:8d:ac:f4:70:
00:05:4e:42:88:1d:ac:df:72:25:b3:ce:99:a4:3e:52:d1:28:
d3:d2:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:42 2026 by rpki-client