Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: 7Ro6qxM6zNRme13KmjlA6VvYrEXC4xnN6syTseyAiA8=
Subject key identifier: FA:5A:89:0E:D4:98:F7:18:50:CF:9C:73:95:A2:CA:50:0D:4F:6B:DA
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 019D371B6EF08FE18042EF079FD7ADEAAB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: mv/bhTAaGTDIx50oWhJxiYB7CQP2HSoSfI0jOaqtmL4=)
2: z9qeSQqLtFJYAzoPoWqDQVc-rT8.roa (hash: ZbaC8gEUuwDU0zVtTrY3vbSTCq0FecXsOteKoQHF2rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6e:f0:8f:e1:80:42:ef:07:9f:d7:ad:ea:ab:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=fa5a890ed498f71850cf9c7395a2ca500d4f6bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:3f:ec:a3:15:4a:c9:2b:d0:1c:f4:49:04:
00:d8:b5:92:4c:ea:39:92:fd:b4:ea:e4:40:6e:57:
3d:e0:06:2d:7f:51:86:57:53:3e:41:77:39:91:c6:
3b:dc:f6:9c:30:42:28:1a:98:0f:01:4f:85:44:63:
2a:8f:6f:f8:07:88:8f:e2:5e:7c:9e:c0:4f:ba:23:
b7:36:6c:06:ae:02:ce:9a:73:e8:f2:64:99:f2:8e:
81:a7:ea:9d:d8:40:38:45:76:21:dc:11:e1:43:28:
b6:c7:a2:60:23:e8:8a:5c:8a:2e:5d:ae:5e:48:88:
5f:7c:c9:43:b9:5f:9c:48:25:c3:0c:a1:02:be:a7:
0c:10:09:c3:6f:58:88:66:d1:8a:9f:7b:68:79:06:
c5:84:05:31:0a:77:2f:62:fd:32:3e:a2:5d:0d:23:
b6:c8:82:6a:24:96:8d:eb:b0:8b:af:63:70:69:f7:
4f:fb:2f:22:23:04:ea:b9:fb:b7:69:86:06:41:38:
99:bb:49:0d:bd:e9:d2:4b:f3:5e:de:e6:f7:27:c1:
60:41:a7:99:0e:6f:1c:38:47:35:2f:cf:f9:86:69:
45:8e:8c:24:bd:46:70:91:ab:f7:b8:db:c8:29:58:
6b:d7:b9:bf:ba:5c:57:28:c6:03:2b:df:81:87:9f:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:89:0E:D4:98:F7:18:50:CF:9C:73:95:A2:CA:50:0D:4F:6B:DA
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:aa:87:58:a0:84:a5:7f:d6:58:04:55:07:2f:00:38:ec:
49:d3:94:40:21:5b:57:5f:32:41:1f:ec:2e:a7:fd:19:b9:3b:
99:79:1c:cd:0c:ad:0c:3a:2c:03:30:c1:e0:fb:e3:b4:27:2f:
28:a1:8e:fa:0e:dd:f1:fc:87:71:b4:69:de:55:1f:6d:ac:d5:
93:33:2a:bf:9e:b7:0c:d2:99:40:62:c9:a7:17:8d:be:0c:dc:
36:c2:e8:ca:e7:4d:f6:03:19:8f:0d:7a:61:68:a5:e4:88:de:
29:09:87:54:52:04:5c:36:bb:bb:07:a5:ff:c1:c3:b6:cb:84:
5f:12:ec:a0:53:27:01:63:92:53:80:76:27:fd:ce:5e:ac:80:
79:21:c9:8a:a6:f8:47:38:b0:dc:40:88:21:8b:78:31:9a:f0:
3a:b2:c5:84:18:3d:07:26:80:cd:1f:1a:01:db:5f:cb:c1:ed:
3e:29:e1:e2:79:d4:8f:c4:b0:a0:72:2f:94:55:94:47:3f:bb:
92:5a:56:00:70:c9:8e:eb:f8:e6:61:54:26:51:ed:c1:77:1c:
c1:61:5d:2e:8c:1c:4e:c5:43:15:99:24:80:34:51:8b:2d:5a:
2f:5d:8c:e6:18:e5:8d:e3:1d:11:f2:70:25:cf:28:d3:1d:53:
7b:7d:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:00 2026 by rpki-client