Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: KDcJP/3HqBav11uMMdrLoSZ0COUotK5O2B8Gsu4qQmo=
Subject key identifier: 42:39:C7:E5:FA:A3:8E:94:B0:0A:81:C5:A4:00:4E:08:3E:A2:C5:37
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019E314E34D17DE70C3F4158E8C6D59448BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 15:01:09 +0000
Manifest this update: Sat 16 May 2026 15:01:09 +0000
Manifest next update: Sun 17 May 2026 15:01:09 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: DYUOO7o7be9wdHrV3uqfmfijlnGaJPPfZ5qXazynKLs=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:34:d1:7d:e7:0c:3f:41:58:e8:c6:d5:94:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: May 16 15:01:09 2026 GMT
Not After : May 17 15:01:09 2026 GMT
Subject: CN=4239c7e5faa38e94b00a81c5a4004e083ea2c537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:18:22:97:63:96:a7:f7:36:e2:a0:06:8f:
bb:8a:b3:6c:36:ab:7a:bf:c6:87:8a:04:49:ff:83:
d4:61:b0:13:a4:b3:79:28:c5:1a:2e:6b:81:a9:70:
87:d7:a5:f8:8a:2c:7b:a0:23:a6:8d:8a:e9:74:34:
9e:2e:5f:f4:af:cc:b2:f1:db:38:e2:55:34:fb:58:
5f:29:02:5e:49:12:95:44:1b:e9:89:af:77:8e:44:
6e:3d:9b:d1:30:c6:34:b0:6a:cc:27:86:38:7a:3b:
26:7f:3a:09:6d:af:a6:58:5b:21:e5:a7:2d:d4:26:
ea:38:c3:17:97:78:ae:29:01:ad:cb:e2:91:c6:4f:
92:b9:80:7f:72:5f:8e:27:4c:86:00:49:bd:b8:e3:
30:a8:5f:3d:7f:d1:58:6e:fa:7b:ee:a8:1a:4c:98:
9a:71:d2:37:14:2a:95:1a:c1:d2:ab:18:08:d5:93:
40:52:d8:d5:23:ad:cd:ca:e0:c3:10:80:46:ad:1b:
f6:ef:58:47:f9:9a:1c:be:b3:95:e0:c8:ee:df:66:
93:21:9f:59:d5:74:66:93:13:e3:a1:fe:da:86:4c:
f9:95:bd:0b:0a:9c:22:7d:5d:61:10:a8:ff:56:73:
72:8f:b2:c8:d3:27:52:46:f4:d3:d5:52:f5:d1:b0:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:39:C7:E5:FA:A3:8E:94:B0:0A:81:C5:A4:00:4E:08:3E:A2:C5:37
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f2:15:74:c2:af:ab:c7:96:b5:8b:59:fa:83:7f:e5:37:68:
e4:e1:55:ee:36:8e:69:ba:78:85:63:3f:47:5e:8c:82:d2:75:
eb:19:3b:67:8c:04:63:03:8d:0e:6d:72:9b:33:bd:47:23:3a:
10:d4:c0:f6:4b:31:4a:2d:35:4f:5d:62:4d:a2:9a:68:3e:f3:
17:1d:9a:f1:5e:90:dd:b1:b1:b2:34:aa:bd:58:3f:ad:2b:6e:
13:7b:af:99:27:42:08:b4:12:51:fb:9d:47:c9:fb:31:c6:76:
01:af:51:92:0a:07:0e:0a:2e:ec:fa:aa:d7:a0:b8:b0:cd:62:
da:af:8a:0c:cd:ab:8c:d2:f9:bb:ea:bc:66:01:bf:ce:b1:1d:
92:79:a1:99:6b:df:9f:ae:8c:7b:1c:e4:3e:80:cf:a6:7b:5b:
d4:e1:05:6d:ca:ed:3b:8a:bc:14:28:86:8f:64:18:f5:8c:e7:
52:4b:e0:6c:22:73:5c:e1:e3:8b:22:e2:25:07:83:ae:6f:81:
d5:80:4f:0b:2f:58:21:43:c4:36:dd:61:26:66:8d:45:f3:ad:
f9:0c:cd:d0:a5:af:4f:da:c7:8e:23:f6:d6:93:bd:c9:01:49:
44:ee:23:e9:65:5c:27:8b:15:cf:c7:74:3e:0e:15:c0:ee:6b:
73:ec:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:31 2026 by rpki-client