Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: vkIzk9Q3G/gylQxWojGpQxURlN9/k2ECikSUT3Sd5e0=
Subject key identifier: 0D:24:76:F4:78:A9:A2:12:4D:06:53:A6:CA:A4:B4:50:BF:B9:C3:4F
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 019D382DCA82CE71714E40C572E537500C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: CJIDLkg7oSfR6rMum725NqvidiYxz9hpB2AQseTm7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ca:82:ce:71:71:4e:40:c5:72:e5:37:50:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=0d2476f478a9a2124d0653a6caa4b450bfb9c34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:e9:d0:23:a9:88:c6:e2:05:44:25:91:de:
33:85:c2:9b:ce:0b:76:ef:e5:ed:cb:e3:19:af:a2:
2b:5d:a6:f8:8b:56:92:c1:25:79:ca:bc:63:e2:19:
05:3a:52:6a:96:86:e2:49:93:17:f1:a2:2d:db:42:
dd:0a:a4:93:08:e9:9a:c4:14:71:98:89:83:34:4d:
7f:ae:53:7f:67:74:e3:f2:71:a9:57:27:53:d0:cc:
ba:72:48:13:75:4b:04:36:e1:8a:7d:e7:dd:18:57:
aa:43:1f:db:52:c8:46:c6:05:07:85:5d:e3:bd:a0:
0e:3d:46:ae:b4:ea:94:a9:b5:e1:05:4c:23:d2:2a:
b5:a1:2d:99:d3:be:45:f3:a8:c8:0d:a9:2e:2b:43:
27:f3:5a:d9:82:b9:85:30:ef:b7:a7:84:47:bb:57:
53:15:da:fe:0a:14:62:c0:fc:35:5d:3b:9b:85:fb:
61:61:2c:cc:a7:c1:fa:03:f8:70:39:12:c2:9f:d6:
3c:2d:ef:54:2a:3b:49:91:d6:3d:51:a1:6d:5e:1a:
05:0c:1b:44:b1:8a:a0:36:f0:76:16:a4:35:4e:52:
d7:9c:25:8e:02:e9:73:89:5f:bf:8b:cc:d4:29:16:
0a:bf:bd:78:03:8c:16:b9:34:01:a1:da:9b:0a:11:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:76:F4:78:A9:A2:12:4D:06:53:A6:CA:A4:B4:50:BF:B9:C3:4F
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:25:ec:95:f3:96:c5:81:7c:d4:a8:47:66:6e:3d:27:8f:
ff:a1:b0:b0:9c:8c:84:c4:fe:a4:08:4e:ca:07:ba:07:12:e9:
71:bc:eb:b7:cb:e4:72:2c:7f:48:ea:a2:68:fc:b8:af:bc:94:
ca:23:6c:46:a0:34:7f:08:ce:f6:28:0d:fe:93:f1:ec:a2:52:
e3:60:aa:b8:f8:9e:b9:fe:df:c2:31:0c:a3:25:8f:92:e0:95:
1e:62:41:4a:29:1d:e1:8f:c7:7b:37:45:59:28:7d:85:c1:8d:
e7:2f:d1:83:a4:0c:c1:ab:9b:bb:a2:50:48:71:c6:59:5d:34:
00:43:c2:e4:c1:fc:69:17:38:e8:c4:7e:7e:cd:0a:02:7d:12:
34:e0:70:0a:22:29:60:f5:b6:81:8f:21:1c:ab:92:e6:c4:71:
66:b4:0d:16:50:bf:8c:99:db:47:88:97:a8:2e:b5:f1:b6:8b:
be:69:f4:7d:da:55:a7:16:75:71:8d:ea:46:de:e2:d3:f0:9f:
e8:c6:6d:fe:8d:1a:9b:99:e3:86:62:0c:38:f0:93:a6:22:8f:
14:4c:5d:ce:15:92:5c:89:d6:8b:f8:5e:f8:71:d6:f9:48:81:
b1:a8:76:49:5d:32:35:87:7e:95:99:2c:f1:92:4c:32:64:a3:
85:65:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:49 2026 by rpki-client