Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: M+54jIZ3KOFm4FZmfPkhxmE/A7Gome0ZdBikxN3JCag=
Subject key identifier: 35:E0:91:07:60:D6:F7:E0:CC:0B:C2:2C:DC:05:7B:46:0F:45:36:78
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 019D39E5A16C6E33BC4D2CF3B2CC5CB96A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 178E
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: FqnRssijocC480M56yHbxPdDABU2rYEdE9mOHa2/4n8=)
2: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (hash: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a1:6c:6e:33:bc:4d:2c:f3:b2:cc:5c:b9:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=35e0910760d6f7e0cc0bc22cdc057b460f453678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:ee:a1:6e:ce:94:5a:3c:06:05:99:68:71:
5b:7a:79:8b:5e:48:e3:57:45:0e:1b:11:94:17:41:
e9:47:15:a0:a1:77:38:5f:eb:32:1b:0b:47:72:7d:
26:29:24:bb:a5:8b:b2:ae:52:09:b8:64:38:b4:65:
70:ab:6b:07:6d:79:09:4d:4d:b7:b3:8e:b5:4f:62:
38:98:05:e1:a3:90:fa:54:59:01:84:8e:7a:ce:11:
b0:40:7d:6c:83:54:fa:53:e8:6c:fe:e1:d9:9d:35:
13:12:30:25:7d:fc:a8:36:9a:40:49:ec:14:c3:c8:
05:11:fb:45:74:3c:84:07:d6:50:c8:fa:ed:4c:ce:
32:22:a9:89:ee:29:b1:f4:9c:fc:dc:58:0a:5d:6a:
d5:b0:fa:f2:31:5c:58:30:9a:05:f8:82:3d:c4:21:
63:f7:3b:87:62:f5:43:20:4b:6d:b7:de:ea:30:30:
2d:38:34:bd:77:53:e2:45:c4:ca:e3:18:24:e3:ae:
75:ad:c6:b3:88:c0:c6:2d:04:fa:e5:28:47:89:8c:
d0:b9:be:ab:f9:aa:c2:4c:6b:88:ee:6c:71:7d:cc:
58:90:88:6f:a5:1a:41:2a:7d:88:bd:7d:f1:e8:37:
7a:4c:f4:94:2f:91:a9:e9:39:38:c9:f5:9f:31:e4:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:91:07:60:D6:F7:E0:CC:0B:C2:2C:DC:05:7B:46:0F:45:36:78
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:44:da:07:c2:c8:84:8d:45:ec:8f:8a:c1:b0:13:48:9a:19:
a8:75:29:67:52:99:01:92:3a:f4:fd:4c:67:43:31:e9:b5:ee:
16:1d:16:b1:3a:db:24:68:df:e9:57:2d:c4:da:d1:c0:ee:67:
bf:21:c0:15:33:f6:61:65:a0:17:9f:0a:f7:34:91:ac:dd:a4:
0a:a8:44:76:a6:8e:8b:1c:5f:86:8a:53:16:d6:ef:02:ab:d3:
ac:88:36:e3:98:0b:a7:16:ed:27:9d:f5:bf:fa:e5:ee:5e:12:
33:fe:43:3e:eb:b9:80:75:ec:4e:12:2c:15:af:6a:50:20:b5:
c4:37:50:13:0d:43:7e:33:12:00:c0:11:ae:09:8e:56:d0:35:
36:9d:ea:99:f3:b9:93:78:9d:60:c0:c1:39:68:a2:3b:ef:05:
21:a8:6c:6e:e1:76:79:be:22:a0:fe:7d:2e:0b:23:14:db:d9:
3b:3f:1a:94:2d:5f:17:2f:c6:fa:29:ff:97:fa:5c:a5:02:53:
83:9e:6f:aa:f6:99:26:f5:a0:20:37:99:6b:44:23:ac:98:64:
33:1a:ad:e2:38:fb:ae:f3:ac:cc:87:5b:2a:8b:2f:ec:00:0e:
54:30:4f:c7:10:6d:ff:09:50:9d:48:91:34:17:ee:40:4e:ec:
f5:ce:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:49 2026 by rpki-client