Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: DhrPNaGBl2ALI8ngpmqJ/ZFlX5e4Dy7HyjdYhzXtmVs=
Subject key identifier: C9:26:1A:54:F9:37:0C:68:1F:21:68:DA:A8:F7:37:01:1C:E4:B1:DC
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019D382E5B3374EB3DA24CD2CAFACDCB71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: 3+qQOW9HD0GZasFIl8tmf6k93N8q7Tm5C8Hb9gMugR8=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5b:33:74:eb:3d:a2:4c:d2:ca:fa:cd:cb:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=c9261a54f9370c681f2168daa8f737011ce4b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:25:91:7f:d6:da:bb:58:16:cc:32:2a:58:
ae:10:1f:c3:73:0c:ac:76:4c:57:0d:ee:66:95:bc:
e7:14:f6:fc:33:73:46:52:c3:9d:39:60:50:3f:3e:
8d:83:4e:2d:08:39:a7:73:a8:c2:c8:87:8f:ea:ae:
3e:02:75:fa:4e:84:4b:e8:bf:09:23:28:46:b1:6d:
8f:9e:c4:16:ab:79:9f:70:0d:ef:4f:2e:bd:57:3c:
59:f5:1b:d6:5a:bf:ae:14:44:23:92:14:45:83:9c:
7c:2f:bd:8a:ec:88:1d:d5:14:6a:bb:83:e2:f8:6c:
1c:d8:c0:b5:71:93:dc:06:ec:cd:0e:d8:b4:0e:81:
f8:7c:70:cf:72:21:f5:fa:bf:05:f9:ac:cb:24:b4:
15:99:68:60:d7:33:ad:54:17:d6:72:e0:61:9b:bb:
5f:15:59:98:14:03:33:2f:1a:ea:79:ac:bd:6c:7b:
9c:92:8c:ab:37:b3:19:b6:c2:72:44:2c:b8:1f:54:
0c:86:2e:5c:4d:84:b6:23:54:f5:0c:f5:ee:9f:b5:
4c:f5:fb:22:92:8d:6a:eb:ca:72:2e:e8:38:33:20:
0d:b1:b9:c4:51:e2:e9:46:0d:61:ce:97:fc:44:b8:
83:13:51:a1:4d:55:0c:40:0b:40:3e:62:ac:25:15:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:26:1A:54:F9:37:0C:68:1F:21:68:DA:A8:F7:37:01:1C:E4:B1:DC
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:14:96:f5:49:e2:f1:66:bc:0f:39:e8:db:4a:82:48:1a:20:
81:a7:bd:49:51:49:82:6c:13:b7:37:f7:d8:ab:6b:14:62:ff:
bb:80:0a:3a:ad:0f:f0:da:ee:24:5c:b9:6f:a2:14:ef:e6:d4:
c1:ca:b9:9d:3c:15:96:08:4d:01:fd:8a:b3:af:a8:48:57:0e:
a7:66:13:16:9d:33:6c:f8:fd:50:15:05:55:0b:dd:4a:54:4f:
0d:cf:0d:2b:44:66:3a:13:0c:c6:2d:1d:dd:44:21:35:4a:62:
c5:c8:ea:34:d2:8e:91:e5:dc:99:90:72:40:7f:82:11:1f:a0:
87:08:64:d7:80:c0:46:8e:f9:e0:2f:93:0c:db:3d:f0:c6:ca:
f3:b8:d3:c7:7d:c8:7c:95:5b:2e:07:30:5e:76:f6:cc:af:b8:
1d:3c:b8:c0:af:3b:08:fe:06:ef:62:e0:b3:fd:6b:4c:ca:63:
ea:25:b1:33:1c:98:f1:19:e8:34:cc:62:ec:2b:fb:56:62:9a:
fa:5e:fd:45:f3:12:be:73:c6:6d:34:9a:08:f9:5b:6c:9b:64:
2b:9d:89:f5:58:d3:03:27:fc:19:34:64:27:bd:32:6e:d4:48:
37:6c:77:ba:c8:76:c9:ea:5b:d5:31:97:02:ee:f8:ef:cd:6b:
2b:e0:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:22 2026 by rpki-client