Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft (raw, json)
Hash identifier: 2EB7uKyzvCdv8TW1d1CFk6XxJPrQmDNVoK22FNOwnw0=
Subject key identifier: 1F:D4:8C:85:16:F2:60:2A:25:24:4D:B8:19:68:69:68:2B:1D:DB:CB
Authority key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Certificate issuer: /CN=91d2767aa910e957dc5358025026e6c370570a2d
Certificate serial: 019D37C0A7EA4E31915E84E4E85A7391BC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
Manifest number: 02B0
Signing time: Sun 29 Mar 2026 04:01:05 +0000
Manifest this update: Sun 29 Mar 2026 04:01:05 +0000
Manifest next update: Mon 30 Mar 2026 04:01:05 +0000
Files and hashes: 1: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl (hash: aoARXAC/hxxREEIKfuaeZEmmSUVa2Zb9EYdR69o0Asw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a7:ea:4e:31:91:5e:84:e4:e8:5a:73:91:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d2767aa910e957dc5358025026e6c370570a2d
Validity
Not Before: Mar 29 04:01:05 2026 GMT
Not After : Mar 30 04:01:05 2026 GMT
Subject: CN=1fd48c8516f2602a25244db8196869682b1ddbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:25:14:ca:e8:9f:97:91:3c:83:8a:7f:7b:
ea:f8:0e:35:28:7a:cb:fa:b1:e5:84:a2:97:25:23:
0d:e8:1a:09:ec:92:a7:e0:b8:86:eb:14:2e:2a:c8:
e4:a6:37:f5:15:30:11:d1:f8:f2:45:40:e1:ba:3a:
67:58:09:77:43:eb:c7:8b:0b:87:27:bd:07:93:b6:
bc:bf:99:03:67:bc:f8:ca:3c:2b:0d:8c:34:6f:af:
ec:af:af:12:fe:da:4d:cf:0d:b4:b0:a9:f5:a6:71:
8e:d4:fb:aa:d4:55:ec:c7:81:b6:89:bb:15:ab:26:
71:04:50:88:c7:fd:12:cf:49:8c:07:3e:8c:57:ef:
ce:f3:15:22:ce:a7:b0:8a:5a:fc:be:76:9d:cc:2d:
b4:14:fb:02:14:4b:05:68:2a:f1:40:04:9b:fb:54:
10:62:25:5a:28:72:07:72:de:d7:c3:1f:05:c5:27:
07:18:01:25:2c:c1:be:fd:c8:5d:e5:24:e3:cf:c2:
22:2e:99:06:41:8d:6a:5c:74:8f:b3:c0:e3:3b:6f:
ba:e9:2d:c7:4d:0b:b4:f8:d4:38:38:bb:07:9d:d9:
e9:97:e5:0c:9f:06:92:d3:0d:54:62:3a:91:c1:6a:
97:1f:80:2b:20:bc:05:a9:08:dc:1e:49:ca:22:19:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:8C:85:16:F2:60:2A:25:24:4D:B8:19:68:69:68:2B:1D:DB:CB
X509v3 Authority Key Identifier:
keyid:91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:14:d1:b2:4b:45:fc:a0:85:72:d6:e4:02:e6:80:dd:31:
91:bd:40:d1:1a:bd:76:9f:f9:d8:b0:a7:cc:74:99:b2:2c:07:
d2:6e:8d:d5:57:53:75:99:8e:60:c2:4c:44:e0:32:e9:08:8e:
69:d2:61:2c:d4:b6:ad:81:90:f7:b7:58:a0:0e:8d:58:4b:d4:
99:76:7f:b3:68:63:ff:39:47:13:93:2e:cd:13:97:36:26:28:
ef:c7:e9:5c:54:6f:cf:6f:61:91:e4:e2:79:26:ef:4c:5d:33:
c0:dd:cf:d9:56:68:73:4d:77:bf:12:9e:eb:27:c1:ef:0f:61:
c4:a7:8f:01:03:f9:d1:55:7c:59:9d:9f:e5:4b:cc:40:e8:b8:
a8:d8:be:e1:ad:9e:8e:d8:f0:05:a0:9c:33:65:32:89:69:59:
e1:9e:a3:9c:83:72:96:1b:7a:a1:ab:65:b7:79:57:a2:22:52:
25:51:68:7e:05:15:33:36:e5:bf:2e:b8:6c:40:46:ec:ce:1f:
36:56:94:6a:5b:a4:40:53:ac:5f:6f:47:05:43:a5:d4:b2:30:
7a:2d:fc:df:79:d8:2d:a5:73:2b:cc:3e:68:42:a1:1d:35:18:
b3:6c:65:98:b1:2f:cb:93:ee:ca:a6:66:48:e8:8f:43:f6:e0:
31:07:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client