Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: mM/tNaz0T9TGTQAAMYSnOfWdqVA65WeBllmC0iJADx4=
Subject key identifier: E9:CF:04:5C:5E:1E:AC:49:D3:7B:60:DA:56:7C:1A:F7:F3:53:62:AF
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 019D382E234EBC40259BD89E7A55B7A59E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 109E
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa (hash: Da6u9ERoM1g/y/tKKfNZmlBoBL9DF5Ukejxp9AtmT+E=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: LFCCqAMMG8/S6neIIZQpER09QT0bJVYVevCFvXdKIFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:23:4e:bc:40:25:9b:d8:9e:7a:55:b7:a5:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=e9cf045c5e1eac49d37b60da567c1af7f35362af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:aa:90:bb:d2:aa:23:64:ee:84:a6:0d:e4:
e2:a6:94:23:2e:52:f8:a9:25:12:43:04:f1:99:b6:
87:76:20:64:65:4c:01:ef:65:4d:42:cc:e6:a0:9b:
6f:48:bb:f6:3d:81:6c:4b:e2:43:95:e3:41:6d:0e:
55:e3:06:34:be:89:b3:67:c1:cb:9f:ca:4b:78:13:
6b:46:58:f3:d5:40:ac:3c:54:85:50:77:07:79:5c:
e5:c5:e9:31:4b:c6:5d:f6:8a:66:bd:a1:47:ad:f8:
0a:d1:aa:51:b6:e7:20:9a:cc:b8:04:66:ea:0a:a7:
2d:8e:5a:e2:fd:8d:58:c1:77:87:c9:57:fb:5f:01:
3c:f4:8e:72:83:cd:db:9a:be:7a:1c:7b:15:1a:3f:
1e:72:94:8c:2f:f1:b9:f8:8a:6f:c5:75:50:c0:23:
a5:5d:85:91:b7:5c:91:17:31:12:0e:c7:1f:02:68:
e7:7e:b4:59:5f:99:7e:75:a5:12:d3:92:c3:5c:d7:
07:3c:c3:fb:e8:d2:ed:88:3b:bd:65:4f:ce:0a:a9:
6e:37:f7:ea:fe:e6:66:49:ea:48:88:fa:9c:c0:f4:
d7:a0:63:26:e7:bf:b1:8f:b8:42:bb:4a:f8:30:ec:
30:52:db:af:e1:06:4b:37:dd:33:19:7a:e9:71:1d:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:04:5C:5E:1E:AC:49:D3:7B:60:DA:56:7C:1A:F7:F3:53:62:AF
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0c:07:31:6f:c6:00:19:37:5f:11:62:76:34:8d:ce:60:f1:
c4:ff:f3:d7:be:7e:35:8b:da:5b:a1:74:74:4b:4f:b1:db:7f:
15:b2:35:f0:e5:17:82:74:84:3c:71:da:4a:e8:75:9d:1c:1a:
71:ac:cf:56:b5:af:9e:99:d9:e2:f0:b6:ce:7d:8b:29:67:71:
66:89:f5:f1:1a:b2:50:ff:f8:db:18:1b:86:2d:3a:e0:ea:44:
b8:13:a5:1e:e3:bd:01:17:4d:60:38:eb:09:a4:69:02:9c:c4:
98:ca:6c:c7:7d:9f:27:90:03:03:e2:e5:56:45:d4:3e:b8:83:
ed:f2:54:91:84:71:0f:49:d8:9b:90:c7:0c:95:a2:a7:99:b5:
73:8d:d2:51:fc:74:39:b5:85:22:0d:2a:19:a0:f7:e8:6b:76:
84:71:ea:88:d1:4c:1e:90:cc:02:23:23:ff:e3:d3:88:d1:6a:
54:d5:f2:eb:73:4e:14:96:fa:a5:2d:4d:e1:43:80:91:65:08:
e5:39:5b:5f:4e:fc:12:d7:21:8f:65:76:c9:ae:25:54:78:dc:
2a:46:d6:96:02:51:7e:86:8f:c8:3b:be:d8:6d:2a:80:22:f7:
60:42:70:cc:4c:52:3f:6a:96:bf:d6:a2:29:2f:00:6e:10:28:
77:aa:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:32 2026 by rpki-client