Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: +2Nv0wBWzmHyhrQYAC7b0DZcNRJDB+PsEFjcY5MnPus=
Subject key identifier: B5:AC:EF:F1:9C:90:9F:10:2E:A7:4B:2B:FF:28:89:E0:D8:C3:F7:DB
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 019D382DEBF08FC676B5545B0141E060B7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 0828
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: REA2JqFaNJv7pX/Ewa0roh7igVmZeAn3MC2/1S/rLkU=)
2: RVZM-kFR80ko6aXVrtr5bZIVB6E.roa (hash: U18fR6M6ECujVh8EJIN+7p0bRY+B368ox20l60Irpyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:eb:f0:8f:c6:76:b5:54:5b:01:41:e0:60:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=b5aceff19c909f102ea74b2bff2889e0d8c3f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:9a:6e:a7:41:62:12:73:ff:dd:3c:70:41:
d0:6f:a5:c9:9a:23:d1:9b:7e:cd:72:6f:c5:db:37:
f5:76:fe:c2:d2:34:58:93:40:f9:e2:7d:0d:2f:e1:
6f:21:39:ca:9c:f7:11:2f:e4:d1:59:6e:1d:ee:2c:
f9:15:d4:7e:2c:f1:a0:81:54:3d:57:8c:b5:09:e4:
57:26:bf:15:d2:e0:1e:da:50:2b:1a:1a:f3:be:8a:
38:5c:e0:31:c2:b5:9d:bf:82:35:b4:86:a9:b4:3e:
61:98:93:ca:f8:5e:ef:72:00:c7:36:b9:58:39:14:
eb:22:df:b6:3c:99:2f:db:7e:e6:2b:2c:6d:ac:b1:
7f:11:49:f7:e2:42:da:6a:9e:9b:c7:6a:48:dc:64:
40:51:3c:72:44:f0:ad:de:06:85:50:a2:dc:7a:3c:
f7:e7:80:e7:48:dc:cb:74:f1:0d:1f:25:e8:a6:37:
18:28:c8:da:5b:ff:8f:03:87:f5:45:cd:10:7a:bc:
cf:5d:6a:aa:91:19:1e:25:e8:62:d4:aa:27:65:a0:
62:4b:6c:d5:34:50:76:7f:c3:bf:24:a6:88:06:4f:
1d:93:73:c4:0d:f0:6e:37:47:3e:e5:f2:20:59:cf:
86:f4:c9:61:ba:13:05:fb:a1:b7:09:8d:10:81:6a:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AC:EF:F1:9C:90:9F:10:2E:A7:4B:2B:FF:28:89:E0:D8:C3:F7:DB
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ff:2f:83:9f:7f:bf:c7:42:41:ab:78:12:de:ee:a5:c4:0f:
60:7c:f6:47:20:6a:ad:c7:ae:89:0b:54:df:cb:63:39:99:15:
29:68:23:4a:9c:4e:f3:f6:4b:02:ac:2b:ba:c6:cd:a5:b3:b7:
1f:77:30:17:c0:3e:51:f9:0d:a2:04:b1:7c:c0:20:0a:2a:44:
e4:7f:86:fb:96:df:38:a8:10:96:89:03:b5:4d:ec:66:20:53:
ad:3d:1a:d2:28:1f:9e:c6:60:d1:de:ae:31:f7:e8:22:e9:e5:
32:f2:f9:33:fa:71:2b:26:d4:60:4e:62:ec:be:da:20:45:ef:
b9:b7:cd:e9:a8:c1:54:76:d0:06:62:7b:8d:86:9a:af:46:35:
6c:9f:5a:ef:1e:7a:d0:7d:5a:77:4b:58:cf:c7:d2:02:db:79:
01:86:15:f0:ca:cf:10:1e:ff:ce:6d:33:a7:c6:be:96:d9:08:
64:ca:a7:f8:19:c1:e1:0b:1e:44:e4:db:68:22:2e:ec:d4:ee:
40:e1:65:f7:56:1d:67:63:3e:6f:2e:a2:20:f6:e5:83:da:85:
12:9e:54:d0:27:13:95:dc:7e:10:b3:15:9a:1d:dc:a9:76:91:
a7:d7:e1:ec:ef:62:3c:bb:2a:96:72:c1:b3:04:0b:9e:f9:c1:
0c:eb:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:56 2026 by rpki-client