Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: rKhD5OqzMWtktLmY/dxgTBap6FRLVMU2pU55AQQ/9/A=
Subject key identifier: 1C:D5:F1:4B:9F:67:37:8D:10:4B:17:81:95:F2:0D:B2:ED:4F:A9:02
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01A08BD652A826860247443C91BD502BA3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 15:01:13 +0000
Manifest this update: Thu 10 Sep 2026 15:01:13 +0000
Manifest next update: Fri 11 Sep 2026 15:01:13 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: 984eGwgUkNWz5L5DHj98Evn5GiJolMU5KoO8hR9ga5Q=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:52:a8:26:86:02:47:44:3c:91:bd:50:2b:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Sep 10 15:01:13 2026 GMT
Not After : Sep 11 15:01:13 2026 GMT
Subject: CN=1cd5f14b9f67378d104b178195f20db2ed4fa902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:54:7e:32:5f:92:2e:9b:f2:11:b9:e5:f7:
4f:27:15:ee:ae:04:16:c5:2e:d8:84:f8:76:f1:e6:
4a:dd:17:54:92:cc:62:43:4a:0d:ae:02:e3:18:0c:
9c:89:6c:e2:a2:3f:3f:c5:e0:6f:65:7b:79:44:4e:
1b:1f:a5:87:80:e6:ee:4a:38:bd:ed:7f:0c:f5:01:
ce:fc:63:1f:36:53:e7:8b:e4:2b:16:59:22:c4:93:
ab:ee:03:d0:e7:f9:01:27:77:8d:17:d7:44:6f:76:
5f:86:b7:fb:a4:43:19:80:df:00:f6:77:61:69:7c:
ec:86:60:1c:b4:a5:a4:83:23:93:38:e4:50:1c:c3:
10:95:c6:a5:16:a1:ed:6b:d4:87:4f:32:b0:46:23:
d3:61:e2:81:ad:79:07:be:1d:d2:5e:07:79:65:1b:
ca:9d:6b:24:2a:ee:b7:3f:2b:e2:7c:74:f5:19:4b:
93:ea:40:bd:a8:35:0d:54:b8:cc:b6:5a:27:a9:d5:
4d:af:6b:95:5d:42:2f:8d:32:b3:64:9f:81:64:d8:
e3:60:2b:0d:a5:97:9b:0d:33:a5:d8:cb:7d:a4:8f:
b6:e0:e2:95:02:b6:68:9d:3e:c1:06:ee:69:dc:65:
0a:3f:93:27:83:56:3d:07:59:94:e3:1c:d6:bd:5f:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:F1:4B:9F:67:37:8D:10:4B:17:81:95:F2:0D:B2:ED:4F:A9:02
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4d:7f:ba:65:ae:a9:5d:41:d9:f9:be:8a:45:ae:fc:1e:1e:
2d:f6:17:fd:56:d6:ad:85:95:81:36:da:c9:e9:da:99:59:d3:
14:64:d8:a8:03:4f:32:db:08:8d:aa:60:d7:b4:01:88:93:54:
10:6e:e8:73:6e:e4:db:97:ba:3f:4d:2e:30:b8:9c:f5:4b:68:
5c:65:40:83:8c:c6:3d:4f:97:f4:a3:a6:fb:d3:fb:20:63:bd:
c9:ab:94:11:45:f5:06:28:d0:0f:1c:00:c8:c5:40:db:8b:d3:
cb:3f:7f:e5:06:b4:b6:d2:be:92:69:c3:f6:7e:30:f0:2c:46:
8c:b4:c9:58:d0:99:45:4c:e6:76:b3:15:75:3f:8d:9b:27:5c:
c1:23:58:41:0d:89:e6:7b:12:18:4d:d7:a4:56:88:e5:dd:ac:
db:d9:09:06:42:32:66:75:a3:9b:96:55:a1:06:16:ba:61:fb:
37:2f:8c:3c:5d:54:6d:db:cc:0c:75:de:ea:2b:2f:85:24:e0:
da:5c:cc:50:a4:82:16:35:33:0e:51:11:a8:63:17:14:b7:25:
a4:0d:5d:19:e9:76:d9:2b:6a:ce:f4:3b:f6:60:37:bc:83:e4:
d7:11:64:66:63:43:a1:b1:2e:83:a1:bb:b0:29:1d:7d:1b:1d:
5f:39:82:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1lKoJoYCR0Q8kb1QK6PWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5
Njk2NjkwHhcNMjYwOTEwMTUwMTEzWhcNMjYwOTExMTUwMTEzWjAzMTEwLwYDVQQD
EygxY2Q1ZjE0YjlmNjczNzhkMTA0YjE3ODE5NWYyMGRiMmVkNGZhOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1FUfjJfki6b8hG55fdPJxXurgQW
xS7YhPh28eZK3RdUksxiQ0oNrgLjGAyciWzioj8/xeBvZXt5RE4bH6WHgObuSji9
7X8M9QHO/GMfNlPni+QrFlkixJOr7gPQ5/kBJ3eNF9dEb3Zfhrf7pEMZgN8A9ndh
aXzshmActKWkgyOTOORQHMMQlcalFqHta9SHTzKwRiPTYeKBrXkHvh3SXgd5ZRvK
nWskKu63PyvifHT1GUuT6kC9qDUNVLjMtlonqdVNr2uVXUIvjTKzZJ+BZNjjYCsN
pZebDTOl2Mt9pI+24OKVArZonT7BBu5p3GUKP5Mng1Y9B1mU4xzWvV97qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzV8UufZzeNEEsXgZXyDbLtT6kCMB8GA1UdIwQY
MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt
OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk
LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk01/umWu
qV1B2fm+ikWu/B4eLfYX/VbWrYWVgTbayenamVnTFGTYqANPMtsIjapg17QBiJNU
EG7oc27k25e6P00uMLic9UtoXGVAg4zGPU+X9KOm+9P7IGO9yauUEUX1BijQDxwA
yMVA24vTyz9/5Qa0ttK+kmnD9n4w8CxGjLTJWNCZRUzmdrMVdT+NmydcwSNYQQ2J
5nsSGE3XpFaI5d2s29kJBkIyZnWjm5ZVoQYWumH7Ny+MPF1UbdvMDHXe6isvhSTg
2lzMUKSCFjUzDlERqGMXFLclpA1dGel22StqzvQ79mA3vIPk1xFkZmNDobEug6G7
sCkdfRsdXzmCNQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:18 2026 by rpki-client