Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: fCNDg2G5Jp6KNnMJshA8jzavO7KJD4W+7ttObuEAaUw=
Subject key identifier: BF:B3:B7:58:88:A0:B3:9C:DF:D2:09:93:CA:F0:23:7F:ED:29:7D:B8
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019CEA80EE147BF407C42A673991D67F124A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0E66
Signing time: Sat 14 Mar 2026 04:00:43 +0000
Manifest this update: Sat 14 Mar 2026 04:00:43 +0000
Manifest next update: Sun 15 Mar 2026 04:00:43 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: WH/k+EPQPplXUh8RX4TMy41GktN66AkB4+gDtVX9Fnk=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:80:ee:14:7b:f4:07:c4:2a:67:39:91:d6:7f:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Mar 14 04:00:43 2026 GMT
Not After : Mar 15 04:00:43 2026 GMT
Subject: CN=bfb3b75888a0b39cdfd20993caf0237fed297db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:53:d7:2c:78:8f:91:35:a1:49:d8:06:f9:
49:6f:10:c9:07:fb:cc:91:a1:dc:c7:51:6a:e4:95:
fa:07:5c:f9:03:54:13:47:a4:92:66:65:89:f3:2a:
c3:fe:4d:fb:6c:92:b5:95:ed:ca:43:71:08:32:7c:
36:34:90:4c:ee:af:e2:e1:8c:6c:76:cd:73:08:9f:
61:88:d2:c7:d4:6f:00:f6:cf:bc:eb:57:6c:1f:67:
2e:6e:5f:f5:09:44:a6:1e:84:6e:65:18:4b:84:64:
2d:d0:bb:15:e7:1d:e9:9d:ae:4a:b1:28:9f:76:c8:
69:46:b6:c5:99:38:c4:bf:66:5d:cf:2f:63:85:22:
7a:6f:a6:d8:a2:3d:93:84:66:2f:02:42:28:20:37:
35:68:e0:91:32:2d:da:1b:d0:af:1a:e5:9c:f8:03:
7e:17:04:9d:80:1f:66:9b:55:fc:02:ae:a6:93:68:
d1:b2:3f:17:a3:12:2a:7a:a0:34:ca:7b:4b:b3:47:
fd:54:6f:25:32:26:d8:b7:a3:00:3d:1c:ac:99:df:
6e:4d:70:80:03:1d:14:e8:2b:f2:54:eb:a5:8f:01:
cd:0b:61:f1:42:7c:d4:1a:38:ab:bd:58:b6:c7:d8:
25:81:2b:1d:63:02:3a:28:61:5c:e1:99:c5:2c:6b:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:B7:58:88:A0:B3:9C:DF:D2:09:93:CA:F0:23:7F:ED:29:7D:B8
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:27:df:95:f8:57:f7:63:86:39:08:7e:50:2d:f7:64:d9:3d:
45:0b:d3:1c:df:1b:71:2e:2a:e0:f7:1e:c7:74:08:e4:1f:62:
60:ce:75:a0:22:8a:93:eb:77:07:a7:41:38:3a:36:9b:bf:ab:
bf:17:ea:a5:b5:8f:1a:c8:dd:f7:79:86:4f:3b:2d:0a:db:74:
b3:65:62:0d:e1:bf:5d:74:6c:85:ef:05:4d:29:46:3b:04:d5:
3c:c7:88:79:37:d5:d9:ea:e3:79:a2:4f:81:17:ba:ad:40:6d:
14:9b:4c:9a:43:1b:3c:1a:60:61:93:e6:30:20:11:8a:fc:6b:
85:8d:ce:95:7a:dc:0e:dd:a3:0e:96:4c:80:b9:97:ba:3a:0d:
bb:6e:92:3a:04:ff:7d:96:ee:e4:f7:e1:23:5a:85:6e:f6:fb:
26:58:ab:41:c2:28:b1:79:3a:bb:00:93:cc:8b:48:8c:c6:bf:
7d:9a:5f:76:2f:a3:1a:54:8e:8f:fe:4e:e2:7c:69:57:cb:80:
f2:e3:ef:34:7f:2e:c4:2d:80:79:60:e8:77:00:30:e1:7b:0a:
01:28:1c:78:e9:67:c5:45:dd:8e:7c:95:f7:be:f0:3f:87:11:
f6:62:7a:d4:30:51:9d:b6:0e:8e:3c:0a:9a:9f:29:a7:37:64:
c6:3d:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:22:12 2026 by rpki-client