Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: qHNfRKGBlYIu9zRuu1go+BYCU932qY7LSU9CyzvAExs=
Subject key identifier: 8C:C5:88:40:A8:FD:7F:6D:BF:71:26:66:9A:5F:35:77:C0:25:16:E7
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019D3865E613FAE7C3930776568F25EE237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 112C
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: vosqonsCYyEmtQqytPCtkcTauB4dund0ffK7ZNFzUss=)
2: zFPDIQ6oyxHzuUI5QPn3o0ndWIE.roa (hash: kZJWLecWvxb0aVQv+4P+LbA10Ay5ixM4OkGwIDMl4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e6:13:fa:e7:c3:93:07:76:56:8f:25:ee:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=8cc58840a8fd7f6dbf7126669a5f3577c02516e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:e5:e5:a8:af:87:f6:a9:5a:4b:b7:0e:3f:
5a:d0:0f:3b:72:58:b3:52:75:88:be:24:30:c5:9b:
4c:e5:fa:c9:aa:f9:1e:9b:b5:a4:48:95:bd:42:d8:
c4:e6:b4:a9:67:4a:1b:35:e2:7e:45:a9:54:e3:b1:
d4:03:7a:d6:da:3a:1b:a7:3c:f9:2f:5d:c6:84:a5:
d2:07:d8:7a:64:ec:88:73:34:b8:d5:78:db:7d:d7:
66:d0:1b:09:89:bc:c2:d7:93:65:dd:6d:6b:85:6f:
97:73:67:20:66:9e:4a:ce:18:12:2d:03:a2:24:07:
37:b2:9e:fb:fa:9c:f3:aa:40:42:4d:19:a8:ac:8c:
41:e6:2e:16:44:c9:33:f2:3b:1b:8f:da:f9:eb:14:
35:86:7d:b4:52:f1:db:e5:9a:ba:cb:91:b7:12:0b:
dc:16:fe:8a:3e:35:ad:5d:05:89:46:5d:b4:c4:ed:
46:27:09:30:c2:16:7a:a5:99:b9:16:2a:98:0c:da:
b7:c6:69:21:d5:9a:be:61:a4:cd:43:57:92:20:1e:
44:7f:92:52:7f:df:5f:9d:66:0b:a4:21:da:9f:17:
04:12:64:18:d3:ef:47:f8:53:9f:91:ae:6e:98:a4:
46:f7:6f:c6:7e:ff:2b:f1:52:db:6d:de:e7:d4:c6:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:88:40:A8:FD:7F:6D:BF:71:26:66:9A:5F:35:77:C0:25:16:E7
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:10:2f:9e:7f:cb:24:da:5c:f7:05:6f:41:5c:1a:a7:95:4b:
b7:55:41:cf:f4:7e:93:a0:ae:94:34:d9:74:a6:05:5a:63:d8:
ac:5a:ae:72:72:07:5d:9e:e1:95:eb:ba:db:f7:fb:94:04:46:
db:49:0c:40:16:c6:60:15:8a:8e:f4:e7:3c:fb:0b:ac:ff:54:
56:eb:2f:38:de:44:2c:f1:9b:ac:40:34:ac:6f:7a:b8:96:73:
10:4b:e8:29:42:50:95:12:5b:f2:82:b5:d9:bc:87:68:9e:dd:
8f:81:f8:a7:ec:c5:bf:59:15:37:3e:bb:91:33:0c:15:45:e9:
8b:fd:f7:21:6c:af:23:fc:ed:ce:9e:e3:dd:2d:65:a1:24:3c:
ab:94:23:4e:b3:9a:5c:cb:28:a3:e5:5f:2f:e6:a4:72:e2:d1:
9f:79:43:63:d3:24:99:0b:fb:22:68:a0:35:c1:cf:9d:11:03:
38:94:50:37:26:9e:f3:36:f2:78:66:a6:a4:50:a5:9c:e7:4b:
6e:f7:4c:7d:ee:17:62:32:c4:55:c2:cc:19:d6:d9:4d:0e:1c:
dc:de:a1:fe:af:23:99:31:b1:7d:24:cc:c6:38:93:14:81:85:
da:cf:97:b3:16:0d:3e:3c:c7:87:20:e7:3b:5b:0c:f1:a4:d6:
35:9e:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client