Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: JhzMLtIZGqMc67X4s7INJepyM7GX6unxrWD26NjBsPI=
Subject key identifier: 3D:69:5E:2B:80:91:FC:06:93:7C:C3:E5:53:21:BC:6D:CB:F3:A1:B4
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019D3A1C69CAF31066D17B5FE3484FDC896F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1050
Signing time: Sun 29 Mar 2026 15:00:33 +0000
Manifest this update: Sun 29 Mar 2026 15:00:33 +0000
Manifest next update: Mon 30 Mar 2026 15:00:33 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: H+U/aISe+e9x9WpSl+3z/M9cmqYzjHQ/7FYzr80JESo=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:69:ca:f3:10:66:d1:7b:5f:e3:48:4f:dc:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Mar 29 15:00:33 2026 GMT
Not After : Mar 30 15:00:33 2026 GMT
Subject: CN=3d695e2b8091fc06937cc3e55321bc6dcbf3a1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:83:98:84:96:8a:df:0c:01:fd:48:78:46:
a5:d1:4a:52:b3:7f:09:52:45:44:30:40:e3:a3:bc:
8e:fd:c2:3d:39:aa:cf:f1:96:cf:ba:d1:74:37:7f:
a2:c8:0c:67:c8:43:22:92:91:78:18:be:f4:21:ae:
f2:da:c5:b3:57:53:f9:cb:a7:87:6e:6c:72:87:2b:
e7:8d:43:6f:2f:d6:7b:bc:52:1d:55:66:07:d1:37:
12:33:23:ca:14:18:f3:9b:ad:1e:64:45:49:f0:d2:
6f:65:4c:69:32:f0:93:99:61:db:36:49:ac:91:86:
fe:83:07:ca:4b:97:2e:50:2e:23:6e:76:e4:15:f6:
d4:01:72:ee:6e:3a:c6:95:24:4b:33:7a:78:b9:55:
2d:3c:f4:fc:d7:f2:af:3f:a8:4f:40:f1:2e:b8:4f:
80:a9:40:89:0c:d0:d9:a2:7d:60:8c:be:05:84:ee:
bd:21:b0:5b:54:5a:dd:aa:b8:42:5e:35:38:30:df:
9a:7d:41:89:0b:9a:a5:e0:4d:92:f4:be:ff:81:20:
c5:5f:22:de:c3:0b:88:0e:52:76:0d:2c:2d:b9:51:
1c:50:1d:cc:2f:1b:dc:97:1e:fd:6d:36:7b:a0:46:
6b:c7:b5:07:3a:cc:05:de:13:8f:18:f2:db:0e:fd:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:5E:2B:80:91:FC:06:93:7C:C3:E5:53:21:BC:6D:CB:F3:A1:B4
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:26:dc:47:8b:2a:6f:dc:e2:b0:f0:25:1a:76:c8:81:7d:29:
82:6f:eb:4a:d4:6f:4f:3b:ab:f8:aa:d4:12:aa:0a:54:bf:cc:
a0:cc:94:8a:23:92:07:11:b1:d6:ea:96:f1:38:33:98:f7:01:
ab:f6:2d:f1:e9:5f:3b:cc:48:c4:1c:41:c6:25:cf:2b:b4:26:
e7:6a:bb:56:ca:ac:ea:2f:53:4d:b9:04:09:16:9f:74:52:18:
08:20:d7:7d:b4:f0:df:50:47:ae:73:c6:3d:36:a4:7c:8b:63:
0a:6b:8d:64:43:45:9f:5b:91:77:0a:64:cb:9a:76:6d:60:89:
f5:e9:57:8c:59:27:61:12:68:64:03:c2:fc:c3:00:bc:17:7f:
c4:c2:01:ef:0a:b8:84:f8:cd:10:94:bc:2e:ae:c6:60:05:eb:
f8:4d:1a:3c:03:94:ab:5a:0e:eb:84:c6:f3:80:10:fd:de:dd:
d3:60:f6:91:c7:d2:ea:33:f7:27:30:93:87:07:ae:60:9d:5d:
b7:b0:5a:9e:ce:06:c1:c2:92:2b:d9:ad:7f:cf:8f:19:f5:7d:
8c:ff:bd:a0:b3:2c:84:e3:c9:02:7a:67:17:fd:3f:23:a1:3d:
f2:a4:33:16:a2:2b:99:ce:5a:3e:89:2a:14:71:98:2a:53:6e:
28:86:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:47 2026 by rpki-client