Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: PMu4LfqdhUqEIMJz1bpJVR00A8VTAcvcmTYKb2/E3p4=
Subject key identifier: C2:0B:BF:78:86:BE:4D:2D:31:42:20:01:EB:9F:5E:A9:A4:6A:AD:F2
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019D382E218AC3500CAA875FF68CBFA18E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: JOMToSpYVVmlxKeYF1eTT22STIM9NFLr7Pi3HhxPzgY=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:21:8a:c3:50:0c:aa:87:5f:f6:8c:bf:a1:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=c20bbf7886be4d2d31422001eb9f5ea9a46aadf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:b6:85:24:4a:9e:48:83:53:37:89:10:02:
a8:81:9b:17:2d:df:e2:e7:21:a6:7c:fa:b8:54:c4:
ab:12:79:43:14:21:79:7f:82:f6:3b:d9:21:12:49:
26:58:a1:61:23:b6:0e:82:4f:a2:19:31:68:ec:d1:
f8:fd:11:aa:2a:a1:53:dc:35:6e:21:b1:cd:cf:fd:
e7:f1:92:40:f9:c3:f9:7b:36:40:5a:e2:db:b7:de:
94:c9:e4:f2:fd:cc:88:9d:44:ef:91:b2:29:d7:ea:
44:54:19:da:6d:ad:bc:f6:9a:7e:36:3c:d6:cf:4c:
b1:7f:99:b2:be:5b:c8:1f:7b:ba:fa:30:4c:9b:d9:
b0:ab:46:e7:92:4a:f6:16:36:bb:15:3b:f7:ac:68:
8b:bf:92:11:94:e8:91:3e:15:98:1c:f5:48:5a:f7:
03:3c:57:2a:20:2b:19:80:37:01:e5:be:00:c4:e4:
3f:5a:cd:5e:0c:99:cf:fa:12:6c:03:7c:aa:ea:3e:
be:ad:01:8c:24:40:f6:80:03:a0:b9:73:18:83:fb:
31:62:0c:44:8a:25:62:44:52:1e:38:08:46:cb:65:
6a:8a:96:ec:42:c2:ca:04:e4:1a:18:23:54:e4:6c:
6a:af:99:84:7c:9e:45:ca:c0:4c:fb:1e:48:85:da:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:BF:78:86:BE:4D:2D:31:42:20:01:EB:9F:5E:A9:A4:6A:AD:F2
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d4:fb:b1:92:ca:2b:24:9e:2d:60:d9:a2:8e:d4:e3:07:83:
bf:53:30:8b:80:57:f1:fc:35:2a:19:82:48:a8:23:59:8f:1b:
95:37:ae:15:ed:08:48:f9:01:80:52:bd:8d:ae:3b:2f:7d:e2:
0c:4c:93:cf:a3:b6:d6:ec:eb:2c:74:13:a4:45:46:65:63:19:
75:50:22:00:a5:e0:bb:d5:a6:f0:50:4f:75:3c:17:2a:d5:7f:
a7:d2:8e:42:8b:9b:b5:9f:e3:01:11:b4:69:49:8b:32:af:ee:
d3:39:d9:54:c7:1c:42:e6:e2:78:5a:80:c0:e2:0d:98:bd:04:
c9:72:c7:ba:7d:09:c9:61:29:04:16:5a:b0:b9:b0:9e:28:6e:
a9:ed:e6:61:e8:be:59:ef:e9:62:25:7c:18:29:48:4f:15:86:
21:ae:99:b9:91:a9:22:7f:19:16:06:95:cd:a9:b6:ef:8d:41:
5f:b4:37:fe:0a:88:f1:c1:cf:60:c1:27:94:56:9a:ee:46:11:
7f:8f:d2:08:ae:92:a7:4e:9f:26:7a:4c:92:9f:7b:78:69:bd:
0f:01:a4:4d:30:c0:30:32:36:75:4b:fb:ab:be:d2:f4:20:bf:
1c:73:9b:58:f4:08:8f:04:3f:40:b6:97:9f:70:a1:79:89:ae:
34:4d:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:05 2026 by rpki-client