Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: DcAYCt/4Y4+OAhnju+p7RhpZb3hx0tFIgIFbYstr6Fo=
Subject key identifier: CE:6C:56:53:C1:3A:6C:EA:5B:DF:5A:7D:25:7B:8E:3F:14:2A:DC:47
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01A194688071B97FAABFE27F8A4B2AAAAF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1AD0
Signing time: Sun 01 Nov 2026 00:00:38 +0000
Manifest this update: Sun 01 Nov 2026 00:00:38 +0000
Manifest next update: Mon 02 Nov 2026 00:00:38 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: BFOub6N0rgBAVBwd1eNZm5KMu6aHYNkjU6Fb52LfBgk=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:68:80:71:b9:7f:aa:bf:e2:7f:8a:4b:2a:aa:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Nov 1 00:00:38 2026 GMT
Not After : Nov 2 00:00:38 2026 GMT
Subject: CN=ce6c5653c13a6cea5bdf5a7d257b8e3f142adc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:22:59:44:40:b7:e3:b8:9c:b3:c2:09:5d:
a5:6b:74:5f:c2:0c:28:cc:f0:db:8a:28:f5:d5:14:
59:e2:fa:d4:e3:72:eb:c1:c8:9b:f2:f5:93:fe:eb:
57:a3:11:d6:f1:79:ac:04:ca:70:2b:49:5a:ee:28:
82:1b:29:c0:e3:ed:90:44:53:43:05:db:24:3c:93:
2a:80:e4:74:bb:30:60:9d:60:70:84:d2:63:65:a2:
72:02:8b:d0:a3:c9:38:7d:f1:47:61:08:82:21:04:
8d:c7:9a:be:ec:56:09:06:b9:a1:8f:db:03:ff:4e:
49:8c:af:c9:d1:46:64:56:e3:1b:ad:f2:ef:70:70:
72:ef:b2:34:ac:f0:fd:d0:3e:70:0d:71:f8:7f:a8:
04:15:43:97:91:c8:1f:af:df:66:1c:99:9c:f2:1c:
7b:b4:58:a3:7c:7c:59:74:11:c7:a9:6a:00:71:5b:
5b:2e:e2:61:da:fc:b6:f8:87:36:b5:03:da:23:91:
fc:e6:45:6f:37:5c:9f:21:df:ef:56:a8:e7:4e:2b:
0c:6c:ec:c3:51:87:20:2e:a9:06:f4:87:e2:05:f2:
fd:6d:63:95:a0:ca:20:37:62:fd:01:0b:d1:6b:96:
f2:16:0f:96:2e:25:33:f6:74:83:b8:5d:5c:87:34:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:56:53:C1:3A:6C:EA:5B:DF:5A:7D:25:7B:8E:3F:14:2A:DC:47
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:91:cb:76:7b:d2:3c:eb:7e:73:0f:ef:fe:3a:bb:36:be:
fd:ba:a2:2e:bd:50:33:bb:10:5a:4f:b4:ef:a1:f2:a3:76:17:
86:49:bf:d2:e4:5b:5e:86:e2:6f:97:e0:87:c0:59:28:aa:a9:
27:f8:05:52:df:67:03:00:6a:9f:3c:43:60:7b:55:b2:a0:7b:
d3:b9:36:30:62:f1:a7:8f:76:e8:cb:0a:31:9b:df:30:f7:a5:
48:cc:9e:2c:28:43:9a:99:35:ea:84:88:ec:b3:ce:f8:92:a0:
eb:5a:4d:b1:c2:65:7c:69:68:af:ac:2e:b3:70:0e:2f:14:77:
d1:79:b2:78:b2:2f:04:16:b0:04:39:03:29:9d:23:32:c5:a4:
71:24:98:55:fb:f2:31:8d:e6:cc:b9:d7:86:04:73:b7:43:90:
1c:3a:8c:0e:1b:bd:9f:77:8d:95:78:94:22:f1:df:fa:94:e1:
1a:3c:b5:f0:5b:79:fa:72:f1:d2:a6:a8:58:90:29:16:2f:c1:
e9:c4:c1:c0:43:62:9f:a5:7e:d3:4c:8c:2c:f1:69:e1:5b:fe:
d2:c3:af:0b:aa:65:4f:a0:ea:6e:12:0f:20:14:70:9e:ea:fe:
6a:36:97:08:88:98:8a:7e:25:ec:95:4e:76:86:69:64:62:ff:
df:7d:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:52:33 2026 by rpki-client