Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: dyuNtlA8hsVuxSaF51RY2LDtkhuSsFyt9MQYEUFEhvk=
Subject key identifier: 0C:AC:0A:2B:AD:11:6B:DF:E3:11:84:9B:AA:B0:63:13:30:7C:CC:17
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019D3940885039CDAC3C3A47473FF80BD347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1553
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: KBbD/aAoyRqs6WeT9Lw5btiPY0Ce00B+mwjx5fOH7lk=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:88:50:39:cd:ac:3c:3a:47:47:3f:f8:0b:d3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=0cac0a2bad116bdfe311849baab06313307ccc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:ec:56:3d:fb:91:08:29:bd:09:29:62:cf:
ef:ed:3d:58:26:99:a5:95:af:b5:c2:95:63:21:f1:
97:95:07:7e:f4:8a:a7:a8:00:42:8c:49:8f:09:be:
2c:d6:b7:9d:6b:61:33:f0:1f:b4:c2:86:f8:15:78:
1a:3e:df:df:0a:91:37:b4:83:3c:60:db:bf:c8:a9:
b1:ae:5d:25:65:36:ca:f0:39:ef:4f:e8:1f:ec:4d:
3e:49:4b:86:da:4b:92:a3:51:63:3e:ae:f0:28:7b:
05:87:3b:68:f5:4f:04:d5:03:03:ca:41:15:79:d0:
cb:e4:77:38:8e:e3:b9:63:b9:21:14:4f:1c:d1:07:
36:15:95:b7:4a:77:33:ad:38:a2:af:ce:51:02:65:
62:22:2a:21:51:07:11:28:4a:8c:ff:e2:f5:20:cd:
4d:96:0a:68:f4:54:06:2d:0f:79:a2:19:52:4e:6c:
32:56:b2:43:c9:b5:d0:e0:59:ec:76:25:0a:ad:12:
68:e0:bd:6b:a6:f1:5f:fa:3d:bf:b6:38:32:f1:3c:
d8:de:e0:67:e2:65:82:e0:59:15:ba:12:60:18:c6:
33:9c:05:31:a4:f9:48:7e:5e:ee:fa:ac:62:94:7b:
b5:2d:fa:a4:75:22:c4:df:65:d0:44:a6:06:d8:32:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:0A:2B:AD:11:6B:DF:E3:11:84:9B:AA:B0:63:13:30:7C:CC:17
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:f7:fd:2f:e8:e4:b8:57:b3:4f:ad:48:d2:22:d9:9e:05:
f9:45:dc:a1:a6:4b:cd:7c:3f:5f:bd:4c:72:ef:e6:1f:bc:48:
21:a4:75:b5:04:61:f1:a3:e4:ca:2f:82:9a:f1:11:de:a2:34:
d7:63:40:9c:5d:b4:83:54:8b:5a:7a:d5:33:0e:3e:6f:18:84:
2d:f4:82:86:c0:ab:55:80:ef:d8:fe:43:31:71:55:9b:39:cd:
54:b5:c3:b4:44:08:28:a8:9a:73:c4:85:42:2e:09:84:f8:59:
37:27:e4:bf:9a:e2:aa:5e:87:c0:92:8b:3b:0a:5c:35:cd:f5:
62:7d:96:d9:32:b9:dc:e7:e3:76:90:f5:d6:93:b1:0c:05:c2:
bf:42:a0:34:85:0b:46:ab:38:6b:f5:a8:ba:34:06:b1:da:b6:
4f:93:38:d1:4c:51:7f:25:dc:e9:b7:9a:66:e6:3b:e7:42:ea:
4e:07:63:5e:ef:d4:05:98:4c:f0:69:ef:15:c0:6e:59:6a:56:
5e:77:8e:6d:6c:d0:8c:38:7e:18:0c:cc:8f:22:6c:72:85:02:
3c:61:3e:26:37:e9:b2:11:5e:9f:37:72:4e:24:9f:bd:d2:a1:
88:07:bd:8d:3f:c9:d5:01:1b:be:fe:e8:8a:7c:6a:ab:c3:95:
32:db:65:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QIhQOc2sPDpHRz/4C9NHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjYwMzI5MTEwMDIzWhcNMjYwMzMwMTEwMDIzWjAzMTEwLwYDVQQD
EygwY2FjMGEyYmFkMTE2YmRmZTMxMTg0OWJhYWIwNjMxMzMwN2NjYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTHsVj37kQgpvQkpYs/v7T1YJpml
la+1wpVjIfGXlQd+9IqnqABCjEmPCb4s1reda2Ez8B+0wob4FXgaPt/fCpE3tIM8
YNu/yKmxrl0lZTbK8DnvT+gf7E0+SUuG2kuSo1FjPq7wKHsFhzto9U8E1QMDykEV
edDL5Hc4juO5Y7khFE8c0Qc2FZW3SnczrTiir85RAmViIiohUQcRKEqM/+L1IM1N
lgpo9FQGLQ95ohlSTmwyVrJDybXQ4FnsdiUKrRJo4L1rpvFf+j2/tjgy8TzY3uBn
4mWC4FkVuhJgGMYznAUxpPlIfl7u+qxilHu1LfqkdSLE32XQRKYG2DJzhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAysCiutEWvf4xGEm6qwYxMwfMwXMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOf3/S/o
5LhXs0+tSNIi2Z4F+UXcoaZLzXw/X71Mcu/mH7xIIaR1tQRh8aPkyi+CmvER3qI0
12NAnF20g1SLWnrVMw4+bxiELfSChsCrVYDv2P5DMXFVmznNVLXDtEQIKKiac8SF
Qi4JhPhZNyfkv5riql6HwJKLOwpcNc31Yn2W2TK53OfjdpD11pOxDAXCv0KgNIUL
Rqs4a/WoujQGsdq2T5M40UxRfyXc6beaZuY750LqTgdjXu/UBZhM8GnvFcBuWWpW
XneObWzQjDh+GAzMjyJscoUCPGE+JjfpshFenzdyTiSfvdKhiAe9jT/J1QEbvv7o
inxqq8OVMttlnA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:47 2026 by rpki-client