Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: gf2gRlFcv5bXxkuO8u+5LV4obn6rusAPzOMlkMXEFb0=
Subject key identifier: 17:A1:66:5B:5F:D0:A1:D6:05:CC:9C:1E:54:0F:76:63:43:36:80:25
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019D3865BA3CAE37AA79D276245966EDF3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: NJKlgbTEt2Uc6q67KLS17j0a7/HRAVt1FEGSiNk7LkA=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ba:3c:ae:37:aa:79:d2:76:24:59:66:ed:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=17a1665b5fd0a1d605cc9c1e540f766343368025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:e4:b3:25:21:63:82:e0:99:01:df:50:93:
21:4b:ce:df:f2:5a:c9:39:a2:96:11:ad:70:81:fd:
f1:45:ab:17:9e:0d:90:00:d0:68:77:35:92:96:1a:
e9:c0:23:95:40:ed:da:52:bf:07:08:9e:7c:79:29:
d9:f5:53:93:8b:40:68:ea:f0:54:82:f8:37:20:15:
e4:53:d3:6b:ea:29:51:16:6c:a9:ce:21:b5:c4:67:
c5:6b:31:4a:98:57:10:5b:18:6a:7e:3a:89:29:29:
67:65:26:34:cc:03:0c:2f:3f:7d:1a:52:12:92:5e:
ce:b6:20:b1:35:7a:ba:ca:ba:ab:cf:4f:42:8a:b2:
58:18:3f:95:8e:80:c9:af:54:51:7b:95:41:55:40:
a2:5a:82:ca:ab:0f:a4:d1:4c:6f:96:15:e8:54:33:
41:cc:69:fd:a2:ff:5e:c2:06:cb:23:05:3c:ee:aa:
00:d1:11:11:ec:15:a7:2d:11:f3:51:4f:70:61:71:
c5:fa:1e:0b:5f:ad:2c:f5:0e:ad:25:ee:b4:dc:15:
2d:dd:65:8d:03:4e:15:54:f2:90:38:82:01:1a:72:
92:3f:ed:cc:b2:a8:37:d4:e5:94:be:ae:74:e5:e1:
9d:b9:f6:92:ff:1a:9b:21:82:bb:dd:ac:00:ef:c7:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:66:5B:5F:D0:A1:D6:05:CC:9C:1E:54:0F:76:63:43:36:80:25
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b7:33:b4:25:2f:ec:82:33:80:4c:60:d5:9a:e8:9f:59:34:
64:c5:5d:5b:66:0f:75:16:35:6b:bc:c0:34:0d:3b:9c:10:d9:
13:e9:6a:63:bd:10:29:22:51:c2:73:2a:b3:8f:01:98:6a:f1:
aa:cf:54:41:39:eb:25:33:62:73:a2:c5:17:04:7b:4a:ac:2d:
3e:b3:50:d6:42:7a:73:8f:a6:59:28:55:32:d7:87:0d:48:2f:
8c:26:f8:e5:8c:01:80:34:9b:05:65:15:1e:61:f1:fe:8d:62:
fe:8f:a6:1e:98:33:d6:78:7d:29:3c:ba:6a:1f:62:1e:55:8f:
dc:32:3c:e8:54:13:65:c5:75:5f:db:04:da:81:d3:0d:50:ef:
78:21:d5:1c:31:87:9d:b7:dc:4f:b6:5b:41:e6:de:23:a8:72:
6a:ac:29:8f:cf:63:0c:a2:97:4f:f0:27:1d:b3:ae:00:d8:ef:
bd:88:c2:6e:71:78:f2:39:53:b4:c3:e5:46:88:2b:a1:e3:6d:
96:12:1a:9b:06:74:fd:23:71:79:82:c2:d3:2e:a4:22:c4:68:
dc:60:9f:e1:13:ef:e6:43:b2:33:b2:ce:b2:c0:c2:7b:8c:ec:
92:23:04:4f:08:09:96:92:0d:1c:a3:26:28:61:80:4a:97:00:
44:44:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:27 2026 by rpki-client