Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: tpC9YF7eot/GsYK1QhuvrlHSmcCGucgG3CbxKKk5vEI=
Subject key identifier: 65:B7:A4:27:D9:C5:05:39:6F:3F:05:82:51:0C:A9:76:D5:57:62:76
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 019D382E7A8C12017FA871021DC7FDF79E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 0C3F
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: 2jXva7qz6YwIjY4VckerT7ZWp2z/ekXdIoSMixYS/ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7a:8c:12:01:7f:a8:71:02:1d:c7:fd:f7:9e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=65b7a427d9c505396f3f0582510ca976d5576276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:a0:da:c5:2a:33:c9:c4:96:36:20:85:60:
a2:04:0c:14:dc:4a:cd:38:e0:e9:7c:11:3a:77:c8:
c3:30:e8:09:ef:e6:b8:85:10:2c:5a:af:9e:b5:83:
0a:10:6b:7e:3f:67:36:69:58:c3:a6:f2:33:fb:08:
dc:4e:87:20:a2:7d:02:2a:68:0b:e4:56:e3:af:63:
90:71:2f:ff:52:61:7d:42:35:e1:e5:18:89:a4:23:
10:98:e6:98:3e:9a:f8:21:6c:98:f5:53:61:ce:f2:
89:00:e3:50:98:ec:49:76:f1:35:79:fb:c5:69:ec:
13:b4:0e:7a:8e:02:95:11:29:da:75:55:c8:e3:76:
57:bf:ac:bc:f3:8f:eb:aa:56:c6:bd:14:2a:45:33:
0b:4e:ec:36:8f:08:70:b7:1b:68:01:5c:5f:2d:d7:
5d:59:ac:41:ba:83:44:39:28:63:49:bf:fb:97:c2:
3b:07:31:6e:aa:c0:4f:17:04:df:7a:80:f5:01:17:
1a:6b:21:69:0d:fa:11:52:9e:5f:21:7f:4a:cd:b6:
3e:64:6b:58:b1:30:35:aa:fb:66:3a:eb:60:55:1a:
1b:d0:9a:7e:36:3d:81:66:f3:b4:71:54:3e:60:92:
d0:1f:d3:a9:ce:c9:20:c3:02:cc:be:e6:7e:dd:a0:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:A4:27:D9:C5:05:39:6F:3F:05:82:51:0C:A9:76:D5:57:62:76
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:df:17:2c:ac:1e:a8:3c:6a:5c:2f:f5:e1:a0:5e:c1:82:
a3:16:e3:8c:03:04:e7:e1:89:e9:4f:5c:1e:1d:a7:ee:4f:b9:
24:00:9d:ea:3b:20:90:48:a8:1f:45:71:88:b8:90:b4:2c:78:
ec:bc:e0:8c:13:f9:55:eb:e1:16:12:71:26:26:22:d1:b6:e0:
03:7c:da:a8:05:36:5f:3e:4a:f7:3e:1f:d5:12:e0:57:06:9f:
7c:72:58:1e:01:f2:14:45:ec:6f:0f:47:30:fb:17:04:ec:32:
46:e7:c2:8c:c1:ee:e0:81:69:6d:d0:f5:00:66:37:eb:fc:1f:
61:60:54:df:34:e1:13:ac:0e:1b:e5:06:23:f4:61:90:0a:ee:
37:cf:5f:4e:7a:f2:f5:29:10:6c:f1:33:11:8d:f1:81:dd:13:
43:bc:31:c8:1d:58:22:0f:f4:48:4f:ea:35:eb:dd:cc:55:79:
e6:48:cd:3c:34:cc:dc:0c:79:0d:f5:0a:be:ad:f1:22:f4:34:
2c:f3:40:d0:6d:ec:cb:e5:d0:ca:03:db:ba:60:54:88:aa:6b:
7e:bc:eb:08:0c:c8:bc:07:32:09:c7:6c:b6:2c:04:5f:16:cb:
02:04:8e:e7:69:e7:ab:aa:3f:93:80:98:cb:d7:2a:51:68:82:
53:28:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:02 2026 by rpki-client