Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: dwFruxnOr8P+qlkWiaxNs3YRgWZPxrvaGeGKILUvMoY=
Subject key identifier: 00:ED:0B:65:2D:35:F2:85:1C:87:05:E9:11:23:78:5F:DD:4A:5F:4E
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 019D38D3E0AC7DFDDA77F0C4213035858282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 09:01:42 +0000
Manifest this update: Sun 29 Mar 2026 09:01:42 +0000
Manifest next update: Mon 30 Mar 2026 09:01:42 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: nISW/AWXsN3hPyoSstIbEPkb+oKSYAHKO7F6UqVkkk0=)
2: Xp-6MgKL7FDxA8beZ_B2_voMBOA.roa (hash: RTnZFx7lRZDDt83YmwGHtedrtI7DlR7GynWDCNcROwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:e0:ac:7d:fd:da:77:f0:c4:21:30:35:85:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Mar 29 09:01:42 2026 GMT
Not After : Mar 30 09:01:42 2026 GMT
Subject: CN=00ed0b652d35f2851c8705e91123785fdd4a5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:58:fd:c7:c6:3d:27:c1:cc:fa:5b:57:19:
9a:21:41:5a:01:32:11:75:39:8a:a7:46:52:34:d4:
f4:bc:06:68:14:ff:d7:9f:b1:1e:58:3a:d8:fa:4f:
f3:c1:ff:14:82:d9:6d:bf:2a:e1:47:36:e1:9c:c0:
04:28:04:7a:de:10:56:3b:58:36:c8:84:ac:54:b3:
62:89:b1:14:dc:28:0f:3a:79:79:a3:ae:9b:44:ed:
ea:2d:b2:2a:62:78:69:83:ee:8f:52:93:3d:61:5f:
7c:5e:b9:82:f8:7a:d6:9f:3c:23:6c:54:64:87:ff:
68:df:19:b5:09:bb:4f:85:5f:36:f7:59:b3:b7:1b:
15:a2:ec:56:15:6e:37:54:8e:c4:30:83:99:7e:7c:
c3:ab:28:8d:de:18:a5:72:eb:57:52:ea:1e:d0:b2:
0f:58:3e:c9:db:96:41:83:9b:c8:72:0d:10:2a:fd:
9c:55:ee:8d:0b:d9:81:fe:6d:af:9b:fe:b4:5b:76:
a7:f2:ed:a8:79:cc:ce:2d:e4:4b:df:9b:f2:e0:0f:
c2:1b:b2:ec:8a:ed:1e:18:f1:f8:6e:af:87:44:e2:
a6:52:6d:bb:03:a1:e3:85:96:60:92:de:64:89:7b:
f3:07:9b:1d:c4:e0:75:b5:1a:62:18:3d:66:11:4f:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:0B:65:2D:35:F2:85:1C:87:05:E9:11:23:78:5F:DD:4A:5F:4E
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:c0:cd:ce:93:ac:3d:d5:e0:fd:0f:ea:fe:58:91:bf:1c:
e1:e4:7c:e3:8e:4a:69:af:77:95:cf:70:77:7d:7e:3f:d0:2b:
6a:df:17:9b:12:74:20:b6:76:7e:52:c3:f9:31:d3:6f:81:2b:
b6:f9:66:f7:77:c7:39:e9:86:71:f9:09:1c:bd:e9:55:9c:71:
1f:e9:5b:e2:a5:cf:46:24:4d:94:9f:79:9e:8c:78:22:36:f2:
a9:dc:08:cf:e9:a4:c5:d7:4d:1d:a8:2e:84:5f:ec:d7:b3:4c:
7c:2b:5f:0f:b9:0e:ac:13:a3:86:d4:da:b3:4a:87:0f:14:90:
c1:91:06:cf:60:a4:4f:48:90:98:85:b7:e9:41:69:33:89:34:
12:37:71:b0:0f:c2:30:9c:44:6e:cd:3d:2a:08:b5:e8:6b:be:
fe:0e:84:f2:49:6f:fb:82:ff:8d:fe:50:4d:d6:a0:a4:a0:a0:
1d:8a:59:aa:9d:8a:e0:38:f1:62:e1:ce:05:91:3b:f9:9c:b6:
12:5d:7e:c9:62:59:d5:e2:ba:ae:51:00:c2:b4:1b:36:6c:81:
10:9c:6a:19:e6:01:98:be:0a:b8:1b:67:8c:9a:c1:0e:e9:1f:
82:b0:7f:e5:04:c2:bd:f9:f5:94:48:53:cf:7d:95:c2:96:2d:
a0:46:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:16 2026 by rpki-client