Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: MDEC7XdyY8MDXq4JQ9+FEj3FSI4dM/HlnDDkFkrPU+0=
Subject key identifier: D5:6D:98:82:E3:CA:11:E3:A8:40:8B:86:33:3C:AD:71:82:6C:C3:D0
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 019D389BA755E2CEE93CC68C9ACC30F0BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 103B
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: bIy3fcKYobrTJa/sT0OU2HxNaSzcqhPm+65tIw48ch8=)
2: NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa (hash: C+90WWb/JQ7zrn55n+w4S16JKtkV7Mdgc4eSRqUFD2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a7:55:e2:ce:e9:3c:c6:8c:9a:cc:30:f0:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=d56d9882e3ca11e3a8408b86333cad71826cc3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:cd:46:8d:ee:8e:0c:99:f2:15:8c:6b:df:
4d:4d:e1:1b:8c:f0:88:e8:4e:87:45:0f:90:ce:d9:
1c:23:79:7f:75:31:7b:2f:03:40:50:3e:af:9c:e4:
46:61:96:f8:de:25:4b:b4:aa:20:de:06:fe:75:c7:
9c:ef:78:5d:78:23:b0:dc:12:60:1f:0a:93:c2:4d:
e7:2c:c5:d3:ad:92:4e:df:60:b7:54:a1:ec:6f:88:
ae:12:d0:d3:c4:46:15:59:c7:70:39:1b:4a:41:ac:
3a:e8:ac:cb:bd:04:7b:a3:a6:bd:1a:50:69:34:43:
0e:c1:e5:0d:c0:93:4d:25:71:f2:66:c2:b0:b4:1d:
6e:42:63:70:9f:58:ca:e6:06:7b:37:0c:ac:84:c1:
99:42:a0:0a:46:a1:75:ce:b2:d7:85:46:32:7c:c8:
12:ed:f8:8c:40:cd:8d:d2:74:8b:00:91:c9:e0:11:
bc:68:22:42:40:6e:af:29:be:49:fa:35:97:02:de:
14:37:10:4f:1b:b0:26:5e:be:1c:70:89:17:a1:2d:
97:4c:fe:b8:40:b1:08:1d:d9:0b:cb:6b:b4:75:02:
1c:1d:82:b1:47:b8:af:01:41:fe:7c:2a:7d:60:6d:
c2:b5:65:50:46:a4:79:03:f4:fe:f6:0e:e5:72:39:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:98:82:E3:CA:11:E3:A8:40:8B:86:33:3C:AD:71:82:6C:C3:D0
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:e0:0a:ae:45:3b:3f:99:76:fd:a6:13:cd:f2:e0:3a:8b:
4e:e5:d5:8a:c5:e7:fb:84:e2:4a:51:40:13:20:29:99:57:b8:
b8:5d:5e:d6:79:5c:18:07:ad:93:1e:4d:9f:86:17:80:8f:75:
39:87:58:ef:a6:bf:68:57:3b:68:b7:4a:a1:cb:cd:7a:d1:b2:
0a:4b:f6:0c:3d:1c:86:2c:27:8f:08:98:6b:b9:ce:2d:90:8e:
68:af:7c:94:a1:51:0c:cf:6b:3e:97:ff:25:a6:f1:7e:8f:6f:
cd:e7:50:00:cd:a7:62:4a:85:dd:85:94:d1:8b:03:e2:2b:de:
35:1e:6b:ec:41:d8:59:ea:1e:43:4f:0a:bb:52:65:44:cf:06:
6e:7a:9b:e2:65:bd:3f:79:6f:f2:7f:60:92:18:96:d1:b8:cb:
35:81:54:38:89:1e:1e:97:6a:5d:dd:90:01:19:ca:4a:9a:ae:
80:fa:78:d0:b5:b1:87:39:74:73:5f:0d:5c:35:95:20:07:47:
68:c7:55:fb:73:3b:2c:f9:f9:03:36:a7:20:aa:40:98:57:d9:
96:3c:a0:b4:fe:5b:dd:97:31:9a:fb:db:ac:92:55:08:c3:49:
8f:52:6c:ce:1e:b5:75:05:d1:54:94:44:75:e6:03:41:72:c6:
26:d8:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:27 2026 by rpki-client