Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: WjrgXfZ8e3qxACdWD/6IN7gREXq0cNZGe5JJIiBLAU4=
Subject key identifier: 30:09:15:A7:5C:29:81:C7:82:31:D1:11:7E:D6:DE:5F:FF:20:1C:6B
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 019D3752AE137CFDCDA2368D072614AC6064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 085E
Signing time: Sun 29 Mar 2026 02:00:58 +0000
Manifest this update: Sun 29 Mar 2026 02:00:58 +0000
Manifest next update: Mon 30 Mar 2026 02:00:58 +0000
Files and hashes: 1: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: 8KdEO8myix6rfq8+sYm0y0/Q0cToGCeRkIoHSpdmqSg=)
2: m6f0KblgDdn2oDmiijUoJd1_umI.roa (hash: QlWp9v6ktsMkYvji1hdedyPM7rbbm0wOY1KKEhtnmFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ae:13:7c:fd:cd:a2:36:8d:07:26:14:ac:60:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Mar 29 02:00:58 2026 GMT
Not After : Mar 30 02:00:58 2026 GMT
Subject: CN=300915a75c2981c78231d1117ed6de5fff201c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:81:42:54:a5:a6:a3:25:73:5b:5a:2e:b9:
15:57:68:ba:ad:d7:8d:4c:2e:dc:74:28:47:da:6b:
cb:a9:6d:ef:49:45:49:29:b9:54:59:09:77:09:57:
ee:1d:bf:69:ba:95:f9:34:ca:9c:fc:02:ec:05:bd:
57:1d:71:c0:db:54:ee:69:52:55:76:47:c6:9e:49:
f0:f9:4d:66:59:60:cb:bb:02:7b:21:8b:ab:0b:7c:
39:7f:2c:34:d3:8f:2a:76:b5:75:03:f1:89:8a:28:
73:da:e4:9f:99:96:55:25:68:e1:f9:82:aa:d6:f9:
ad:aa:d2:39:e3:6c:d2:11:9b:3f:36:d7:bf:ef:02:
c3:c3:48:87:84:14:d3:6d:00:90:09:c4:81:90:c1:
63:19:47:91:86:ab:dc:11:f6:e9:de:2b:93:be:99:
b5:00:09:12:d6:35:1e:e1:f3:a2:5e:a4:63:99:18:
27:be:2f:d0:71:2c:d4:a9:de:3c:da:fc:8d:a0:54:
76:10:5f:7b:c9:7a:88:6c:35:02:c6:1a:0a:8e:62:
47:88:67:18:1a:41:7b:96:02:50:42:6c:1a:d1:e5:
59:33:f6:fc:18:94:71:8f:39:8b:f6:e8:42:f8:3f:
f3:e2:60:bf:38:a1:bd:c5:81:26:00:b2:be:d0:36:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:15:A7:5C:29:81:C7:82:31:D1:11:7E:D6:DE:5F:FF:20:1C:6B
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2d:31:58:a9:94:a4:bb:fc:0f:51:49:6f:a8:96:66:df:8a:
2f:8c:68:58:04:b7:21:b1:0c:76:26:fc:a0:4d:73:d2:78:fc:
0f:b4:14:e3:87:b7:47:6b:6e:b3:f2:4d:cb:2e:68:4c:2f:57:
25:b6:6b:f3:b3:91:3f:c6:8e:f8:72:cc:d7:15:17:38:3b:db:
de:20:e6:bb:c3:02:a3:ed:3d:2f:c2:4d:3d:9d:d1:c6:e6:3c:
31:c4:5b:ac:bb:93:18:b6:26:54:0f:46:82:c6:0f:57:9f:44:
87:10:62:a7:70:4a:bb:e8:52:b9:4d:fe:09:79:6a:c8:82:46:
7b:fa:bc:f6:c7:13:50:f0:1f:f0:8a:da:7d:f9:5b:30:ff:1c:
c9:20:e6:fb:72:a8:58:59:42:e9:ec:30:e6:91:36:4f:a0:ed:
5c:87:e0:e9:68:75:43:22:bf:77:7f:e0:42:a5:16:fe:4f:f8:
b7:40:7e:c5:06:e2:3e:ba:ab:b0:1c:72:96:c3:58:7e:24:e4:
07:c3:27:e3:5c:f5:06:9a:55:35:ac:91:99:63:d5:9c:cd:1a:
4f:20:1d:2a:1f:37:97:45:09:56:d2:ce:90:ac:c5:f3:5e:99:
ef:3f:e0:07:38:5e:7f:71:32:00:bf:1e:14:a1:5c:1d:bb:83:
98:56:34:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uq4TfP3NojaNByYUrGBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTcwNzg4OTc5NGNlYTA2MjJiZDQ5MjFkNmJkYmRkNTZl
ZjBiMDYwHhcNMjYwMzI5MDIwMDU4WhcNMjYwMzMwMDIwMDU4WjAzMTEwLwYDVQQD
EygzMDA5MTVhNzVjMjk4MWM3ODIzMWQxMTE3ZWQ2ZGU1ZmZmMjAxYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8KBQlSlpqMlc1taLrkVV2i6rdeN
TC7cdChH2mvLqW3vSUVJKblUWQl3CVfuHb9pupX5NMqc/ALsBb1XHXHA21TuaVJV
dkfGnknw+U1mWWDLuwJ7IYurC3w5fyw0048qdrV1A/GJiihz2uSfmZZVJWjh+YKq
1vmtqtI542zSEZs/Nte/7wLDw0iHhBTTbQCQCcSBkMFjGUeRhqvcEfbp3iuTvpm1
AAkS1jUe4fOiXqRjmRgnvi/QcSzUqd482vyNoFR2EF97yXqIbDUCxhoKjmJHiGcY
GkF7lgJQQmwa0eVZM/b8GJRxjzmL9uhC+D/z4mC/OKG9xYEmALK+0Da0DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAJFadcKYHHgjHREX7W3l//IBxrMB8GA1UdIwQY
MBaAFCsXB4iXlM6gYivUkh1r291W7wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMt
ZGNiNWI5ZTg4ZTlhLzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMtZGNiNWI5ZTg4ZTlh
LzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC0xWKmU
pLv8D1FJb6iWZt+KL4xoWAS3IbEMdib8oE1z0nj8D7QU44e3R2tus/JNyy5oTC9X
JbZr87ORP8aO+HLM1xUXODvb3iDmu8MCo+09L8JNPZ3RxuY8McRbrLuTGLYmVA9G
gsYPV59EhxBip3BKu+hSuU3+CXlqyIJGe/q89scTUPAf8IrafflbMP8cySDm+3Ko
WFlC6eww5pE2T6DtXIfg6Wh1QyK/d3/gQqUW/k/4t0B+xQbiPrqrsBxylsNYfiTk
B8Mn41z1BppVNayRmWPVnM0aTyAdKh83l0UJVtLOkKzF816Z7z/gBzhef3EyAL8e
FKFcHbuDmFY0oA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:31 2026 by rpki-client