Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: WIZqbW59yHFQgoD7DeBVFlzxBf9MyPQqd4wkmheqYBc=
Subject key identifier: 7E:DD:FA:85:7F:A5:F3:F3:EC:68:4F:B3:56:D4:54:AC:9A:32:14:4F
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 019D38D377271C6C2E1BE370DF60694E057B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: ecnxu9GO63MVGEGj+b2eopCp0T/Rf3DOpnV1/3rqpM8=)
2: Pgbn6hrf4EkvsSBtNvev-Bd5nHU.roa (hash: 3rY+o6/gK4Ian4zoARE3q3IlKhQ6YIhyFaECvqjHp7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:77:27:1c:6c:2e:1b:e3:70:df:60:69:4e:05:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=7eddfa857fa5f3f3ec684fb356d454ac9a32144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:ed:34:49:20:fa:c8:34:8d:d2:b3:c8:7a:
57:69:c0:2a:15:6d:df:10:b1:b3:f1:5d:c6:36:d8:
ba:e4:d4:2d:15:05:45:c6:1c:4b:c4:f2:e2:57:b3:
c2:8d:c3:b9:dd:b4:01:8d:28:0b:88:80:5c:b2:5b:
ec:f6:de:c1:a1:d4:24:bf:a3:bb:5b:7b:af:9e:bf:
e9:ff:2f:c1:7c:25:67:97:c7:a5:81:8d:7f:ef:53:
9f:f2:b8:15:90:18:1e:e5:f1:2c:a8:87:36:00:9c:
76:42:47:47:85:7d:23:9a:ee:0a:d6:38:49:9f:a6:
99:8e:21:ac:32:a1:da:81:e8:a4:61:37:cf:f0:9d:
d3:fb:fa:37:94:27:d9:68:e0:d0:40:7a:4f:0d:db:
b7:24:e6:b7:bd:32:24:e8:2f:24:55:b1:bf:50:da:
30:d4:c1:48:00:45:04:8d:68:3d:4d:09:42:19:58:
9b:67:d7:b2:62:e9:9c:d0:4a:dc:11:fb:ee:80:95:
46:0a:01:d7:6e:a4:6b:74:52:38:d8:7c:8e:78:0a:
3e:fb:67:79:c5:7c:73:f7:e3:e4:06:b0:d0:30:79:
b0:bd:e7:95:8c:18:b1:9f:25:1c:3d:b5:7e:6e:b1:
9c:66:ea:12:73:da:d8:a8:7d:96:e8:8d:f9:26:91:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:FA:85:7F:A5:F3:F3:EC:68:4F:B3:56:D4:54:AC:9A:32:14:4F
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:97:13:8a:a1:1e:ff:a7:7e:ad:4f:ef:3b:5a:f0:61:fe:
ea:98:8c:4a:45:87:6a:f8:17:0a:72:fd:04:db:fe:fc:c9:cd:
75:f5:e8:32:01:75:76:92:f7:e9:7b:91:95:f4:63:97:b5:0d:
8f:5d:f0:ce:ac:38:a6:18:ad:05:82:3e:34:1d:14:f4:f2:c2:
6c:f8:6e:1c:7e:1a:3b:13:e3:32:41:2e:10:ef:c9:dd:03:ab:
88:fd:41:21:81:12:71:9d:f0:e9:6f:37:7a:7b:ef:b0:98:36:
86:97:ec:91:48:c6:c0:95:33:0e:c3:8d:05:5f:4f:58:cc:18:
33:85:1d:74:d3:0b:a5:79:59:cf:f8:65:42:10:ee:ae:59:ca:
8f:88:d6:68:76:d7:f5:d1:ac:a4:6c:4c:3f:84:7f:5e:4c:b0:
3a:c2:25:cf:13:b8:38:e2:ee:97:8b:6b:ca:32:3e:16:21:38:
6f:41:fe:ce:63:03:fd:b4:3f:1d:57:0e:21:09:46:e4:33:a2:
c5:8a:35:66:fa:db:85:4c:ac:bc:81:a9:d8:f6:e8:3b:a4:19:
0b:fa:85:14:95:0c:9f:c9:ac:00:dd:d3:9e:50:98:b2:2e:2e:
f5:38:b3:ff:8e:0f:cb:24:de:03:6b:01:c7:f1:44:56:c0:30:
88:18:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:24 2026 by rpki-client