Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: 7HGfblb9vuwsfvSJ9ajl8yGwfHoneFX+RCX0HlDufPk=
Subject key identifier: 71:7E:3D:14:56:35:D0:61:3A:15:6E:C5:41:70:D6:29:95:46:51:65
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 019D37C0E7B7A5691072973BD5B224155A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: eX59/wSXsXK5u1Tdo5FffKgvL3sn//jq+wGBawCFG8U=)
2: wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa (hash: CzTKoLpU+KVC67tkElsOnwd+vAA1NZMBJOWkm7nD350=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e7:b7:a5:69:10:72:97:3b:d5:b2:24:15:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=717e3d145635d0613a156ec54170d62995465165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:32:bf:56:da:76:5f:21:3f:1f:42:4f:a4:
08:f8:6b:d4:36:66:3b:53:ea:71:7d:93:73:01:1d:
25:18:d3:38:ea:55:24:e1:54:9e:01:c0:47:83:82:
51:9d:63:6f:39:24:e0:64:53:69:ee:ab:ff:42:ec:
b5:25:74:f3:fb:3c:0b:a1:16:cd:a9:f3:2c:4d:23:
ad:90:1c:04:03:bb:d1:86:5f:2c:45:5e:9a:42:27:
02:d6:6d:03:5a:f9:06:53:e1:92:89:1f:eb:33:4f:
0b:66:4b:e7:27:dc:c2:c2:3c:02:fa:0d:8c:6d:a7:
32:f8:87:6a:54:d0:a8:dd:39:bb:77:dd:1a:2e:51:
9a:e4:4b:68:a9:d0:d1:f2:28:cb:ea:e2:1b:d4:1d:
58:d9:29:6d:fa:c6:17:0d:5a:ee:d1:d5:11:7c:c5:
41:be:0b:85:85:a7:18:f1:d6:c0:7d:dd:0e:91:7f:
d8:b7:89:5c:f7:e3:7c:12:01:69:c4:3e:c2:ca:d4:
fd:5e:77:19:1e:3c:c3:7f:6b:a7:70:b7:03:cc:0a:
93:0e:fe:d6:72:f6:03:c1:3b:5d:32:3d:ba:2e:af:
c1:e0:41:34:8d:f1:84:d2:cc:37:1f:a1:d9:9b:84:
75:c0:a3:d3:19:a3:db:a9:49:84:33:b7:38:b2:98:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:3D:14:56:35:D0:61:3A:15:6E:C5:41:70:D6:29:95:46:51:65
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9d:08:cc:0a:d9:ae:a6:55:e8:86:a6:94:ba:5d:92:5f:34:
eb:03:c5:10:c7:31:a4:82:e0:f7:95:c6:63:b1:c9:7f:82:9b:
2e:06:91:d6:8b:a1:30:58:c2:74:d2:86:b1:14:0f:43:04:6a:
6c:24:ba:f4:97:ad:4c:40:78:6c:c0:d3:03:a4:94:c6:74:3b:
73:d3:84:80:c9:57:de:47:61:dc:b2:94:20:c6:65:b2:8a:0e:
53:1e:a4:78:ed:85:1c:67:b9:b6:2c:9f:21:0b:63:87:3f:df:
ad:5b:34:29:07:f7:38:c8:68:f0:a1:bc:0a:f7:3f:64:98:c3:
47:fe:4d:7f:de:7d:50:43:49:14:19:b9:ea:b8:f3:47:23:23:
ad:a6:0a:d5:e2:85:97:d5:a7:28:c4:81:8e:36:80:25:8e:6f:
cb:90:d9:33:98:d6:a3:bb:9c:ba:60:4e:56:ba:a4:b1:45:13:
75:bc:d5:28:4a:d5:ad:b1:43:f4:bc:87:cf:d5:37:ad:b0:3d:
32:ce:9f:f1:2f:14:58:52:e9:db:ec:08:f7:03:ae:5f:f2:81:
9b:7d:ad:74:1a:81:7d:24:d2:f8:45:c4:84:36:35:75:68:60:
46:78:e5:1a:b7:1f:19:71:70:82:ad:8b:42:04:93:a9:0e:52:
62:0d:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:04 2026 by rpki-client