Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: nTDDmHfmm2hQOWRyj74wVcerC4J5zl6LfDiKd7w3NLs=
Subject key identifier: EA:C4:7B:11:51:48:0B:73:91:92:30:56:F2:73:63:2A:41:A8:88:A3
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 019CE36CD508CBE977C1C5C57A2DF3E6423C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 0B59
Signing time: Thu 12 Mar 2026 19:01:26 +0000
Manifest this update: Thu 12 Mar 2026 19:01:26 +0000
Manifest next update: Fri 13 Mar 2026 19:01:26 +0000
Files and hashes: 1: Ru4RlUs3xLqI4i2LlHQz9-A7VwY.roa (hash: DVQde1db5OGzpAw+ZFDgqxFZ7/Y4TU4NFBnhQeqaz0U=)
2: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (hash: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: 2U/R+xB1zZGuHDIz8DtydtvHIt2Q2IttTAoFi9fuL9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:d5:08:cb:e9:77:c1:c5:c5:7a:2d:f3:e6:42:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Mar 12 19:01:26 2026 GMT
Not After : Mar 13 19:01:26 2026 GMT
Subject: CN=eac47b1151480b7391923056f273632a41a888a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:45:08:21:f6:1f:61:c5:8c:15:e2:6b:6a:
e5:b8:bb:bd:2f:4e:b2:ff:d7:6b:61:eb:8e:6d:f4:
65:0d:a8:3c:b7:43:34:4f:a4:d9:03:45:a7:2b:68:
81:b4:e2:50:fb:df:b6:14:98:3d:a4:02:0a:a2:bc:
92:9b:bd:c9:ba:41:53:46:02:04:c4:77:37:ac:98:
c1:cc:54:4f:98:ac:6d:98:11:bb:a9:ba:41:16:e0:
fc:48:82:f6:09:0d:e7:09:1c:05:c4:4e:36:5b:da:
39:5c:df:02:a7:ce:ab:ca:61:ae:c8:3f:57:66:8f:
de:7e:43:b5:d0:76:51:3e:74:93:17:f7:ed:1d:55:
a9:1d:01:bf:f3:49:ba:4b:20:4a:ca:30:2a:f9:ee:
bb:53:a3:b6:95:20:88:2c:a5:b4:b1:31:0a:23:5c:
c2:3c:87:8c:42:82:73:29:94:4d:59:a7:f6:3c:01:
a9:95:47:37:26:08:86:c8:ac:2b:18:0e:04:b1:a6:
08:9a:45:69:17:ba:78:46:eb:c8:94:ff:80:3f:bc:
e6:52:92:8c:8e:4d:09:ac:d2:83:f0:69:da:73:0d:
a1:78:da:99:2d:7a:38:22:3c:37:67:8c:11:6b:6a:
4e:69:17:9d:57:a5:29:d7:0e:ed:0d:c6:ba:00:54:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C4:7B:11:51:48:0B:73:91:92:30:56:F2:73:63:2A:41:A8:88:A3
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1b:7a:55:1e:cf:93:4e:64:44:b9:c4:98:b8:35:9c:d6:ef:
61:b6:35:96:ff:42:07:02:15:fd:f2:71:4a:eb:bf:59:75:85:
4a:e3:f4:4d:e3:0a:f7:85:fd:a1:e7:ff:10:65:5e:9f:0a:f8:
f3:ee:6b:69:53:95:dc:80:37:02:2c:09:ce:a9:d6:c7:3c:fa:
bd:d5:8b:c1:09:48:5e:5e:6f:c4:e6:89:c1:fa:0b:ad:8b:d3:
d4:60:bc:fe:95:45:b4:10:57:d8:a2:91:77:62:4c:6d:ee:28:
53:7f:40:8e:6e:9e:03:f2:72:fe:ce:e7:51:e5:c1:c5:a9:76:
98:7b:2f:2a:3e:e6:f5:f3:f1:0b:60:6d:76:94:df:6a:ae:61:
64:f8:b9:dd:ab:f6:ce:58:23:7e:7c:b7:07:a2:a5:9f:45:a4:
a6:30:9f:d9:79:49:d8:bd:b3:db:6e:2f:f0:24:93:c7:d1:11:
9a:86:09:cb:74:dc:cc:97:cf:3a:5d:21:af:de:63:87:e3:45:
d2:e6:a5:41:18:15:1f:39:33:0d:92:33:84:fa:b9:1f:e8:ec:
4e:2d:48:67:58:69:4b:32:e6:a7:d8:45:a3:29:bb:0e:2c:30:
88:3c:b9:01:bb:d4:f4:58:cc:ec:d3:c0:b6:a8:57:5d:e5:35:
d1:0c:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:15:30 2026 by rpki-client