Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: 57thtAcaWyqmh/rjBmNjl3Z0AWC7kaxeTKBsRVuDHzc=
Subject key identifier: D9:FA:F9:93:F1:E8:01:AB:12:FC:97:9B:8D:33:44:03:5D:E2:A6:64
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019CE2C77BF73017F72EB42D3151D1B90BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 1459
Signing time: Thu 12 Mar 2026 16:00:50 +0000
Manifest this update: Thu 12 Mar 2026 16:00:50 +0000
Manifest next update: Fri 13 Mar 2026 16:00:50 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: UM5HRx1YfalZfM3tuggdKH1fk+nE3ZrgpuNai84mAYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:7b:f7:30:17:f7:2e:b4:2d:31:51:d1:b9:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Mar 12 16:00:50 2026 GMT
Not After : Mar 13 16:00:50 2026 GMT
Subject: CN=d9faf993f1e801ab12fc979b8d3344035de2a664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:7b:9d:05:16:26:8a:32:1e:02:75:88:d8:
2c:2e:26:66:db:ce:f8:8b:16:e4:f6:8c:e5:90:3e:
ae:b4:b4:55:23:2e:49:f5:0c:c5:da:22:9a:b2:c3:
3a:dd:e4:32:4b:23:3f:66:41:56:a4:2e:05:11:d7:
b8:b8:34:f7:5e:95:a2:48:51:72:ff:7b:32:de:2b:
1b:9e:bc:8c:dc:08:33:4d:4c:a9:19:fc:e2:2e:10:
6c:38:bf:cd:2f:45:24:3c:df:fe:a7:ff:4d:02:8a:
5d:91:9a:d4:ab:46:e5:97:00:5a:9c:a3:64:f1:b9:
29:db:8a:c5:c9:dd:14:f0:a7:7c:49:4b:b1:1f:f1:
1a:5d:31:84:27:2c:ca:fb:32:90:8f:9b:3f:0a:29:
bf:74:a5:71:22:e7:d6:76:b8:37:7c:47:a0:7c:a5:
0e:14:35:62:e4:3b:4d:61:e1:cf:f7:3f:55:43:90:
eb:31:8f:d3:2b:f9:0b:bc:6f:2a:21:15:ae:b7:7b:
35:c8:f1:6c:97:c4:61:33:98:b3:bc:df:51:71:3e:
9e:b0:d9:ab:61:d4:f6:c4:fb:52:3a:8e:87:fb:69:
82:76:e8:21:1e:a4:4d:f6:1f:e0:96:c4:23:32:76:
9d:95:68:e0:60:97:ff:b7:5e:5c:38:ca:51:82:c0:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:F9:93:F1:E8:01:AB:12:FC:97:9B:8D:33:44:03:5D:E2:A6:64
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:fd:64:63:10:66:9f:26:2c:7a:c0:43:e7:2e:20:6a:28:
e5:8d:fe:29:f5:eb:db:6b:7a:50:05:c9:33:01:48:2b:b2:6e:
e9:83:07:50:a3:b2:7f:74:a2:96:a7:98:c0:b3:a3:0e:b7:df:
35:7d:7c:e5:f8:ed:4a:dc:7c:8b:eb:74:a8:7b:fe:c5:99:aa:
b8:08:b7:e0:e4:4e:f9:cc:16:dd:fe:74:27:08:b6:a9:3b:9d:
dd:95:23:41:2b:bc:96:e2:84:36:66:e4:d4:27:1d:fc:52:1d:
1d:cc:4a:72:f4:57:e7:a0:66:4f:3d:9b:b9:96:ba:1f:f1:db:
9c:57:a1:cf:ab:65:da:51:56:70:0b:08:96:e3:4d:02:2f:0a:
08:52:7f:dc:49:89:67:12:5a:b8:cd:a0:28:63:b2:d2:ea:e4:
6b:c5:86:47:1d:02:a7:71:95:4b:77:8a:8d:5d:6d:69:3e:83:
65:73:02:ee:27:ab:17:ce:c5:c9:91:58:1d:a8:ee:f3:9d:da:
2f:2d:99:11:0e:0b:47:f6:4b:53:76:db:e6:62:56:f7:ad:b1:
68:90:15:a5:6e:17:85:40:10:44:7c:24:35:4f:36:c3:d7:c6:
80:fd:40:d8:a2:2a:81:09:aa:03:3f:bd:65:97:39:5b:74:8f:
69:90:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:35:16 2026 by rpki-client