Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: g67praU2ENem5eu9L8frGrHq3wq6XuBbYezYgSfCmsI=
Subject key identifier: CB:79:AB:15:52:2F:AD:81:FB:E1:CB:E5:67:0E:B5:42:A7:86:43:01
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019CE2FE04D1AE24D07E9CB54017668464FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1862
Signing time: Thu 12 Mar 2026 17:00:24 +0000
Manifest this update: Thu 12 Mar 2026 17:00:24 +0000
Manifest next update: Fri 13 Mar 2026 17:00:24 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: qvD/PcFcqdxY588/giqRnvCr0uyyRq6jUUkL1L92J5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:04:d1:ae:24:d0:7e:9c:b5:40:17:66:84:64:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Mar 12 17:00:24 2026 GMT
Not After : Mar 13 17:00:24 2026 GMT
Subject: CN=cb79ab15522fad81fbe1cbe5670eb542a7864301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:3e:6d:f2:83:6e:cf:72:26:cd:ce:92:6c:
af:89:c3:da:83:9b:bd:7d:de:87:77:88:b6:f8:28:
c0:42:96:1e:26:22:dc:9a:8d:34:5d:cf:9b:3d:84:
9f:ec:82:0b:a2:59:2d:76:8e:29:01:28:af:b1:9e:
95:38:24:a9:b7:e3:1d:86:05:a4:b6:2b:1f:f2:4d:
e2:e1:f6:98:19:1c:1a:4e:e2:09:83:f6:75:c0:b5:
34:dd:68:97:75:d6:c1:a9:3a:e4:7d:59:d5:38:42:
cc:f7:84:ee:e0:86:5f:46:e4:0d:d1:9d:ff:29:f5:
98:e2:f6:8f:3f:18:ef:13:26:c4:32:8b:f4:43:61:
5e:c1:6e:bb:52:c4:65:d8:64:ea:77:b6:e5:b6:3a:
71:e0:1e:3f:70:83:21:84:97:39:7a:67:b6:44:8f:
db:9e:fd:4a:ae:c6:8d:35:fd:5f:c2:d1:46:62:74:
52:cc:e6:ee:4c:f9:a0:c4:29:98:80:dd:a3:a5:27:
64:86:cf:90:ba:d4:54:0c:95:71:e5:65:f6:49:59:
1f:d9:45:99:eb:f7:69:af:2a:2c:79:db:fe:bc:fa:
6c:66:30:a1:14:7d:eb:46:4c:0b:c4:45:70:01:66:
ea:c2:f4:c6:7c:05:8e:7b:d4:dc:e3:4e:70:99:df:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:AB:15:52:2F:AD:81:FB:E1:CB:E5:67:0E:B5:42:A7:86:43:01
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ef:c7:28:6b:24:30:12:b0:c3:66:51:6a:ef:d9:5f:13:fe:
66:29:86:50:2f:06:bc:11:f2:4c:44:5b:92:85:0d:00:ac:52:
78:94:d4:de:c1:11:9b:5d:4f:2d:3a:f8:a0:99:30:11:d3:2c:
92:84:a3:86:9d:73:4d:e1:e6:f1:26:5b:68:8e:64:61:08:37:
9a:6b:a9:02:67:d8:c2:30:cc:1b:fb:7e:d4:cf:58:d5:a6:e6:
64:ac:69:b8:7e:a4:29:30:4d:53:42:80:04:42:39:ca:86:2f:
a3:2a:a6:93:c2:01:37:42:92:6c:cb:99:45:ca:a7:11:6e:30:
1e:d0:32:17:42:f5:c4:b7:22:c7:73:d3:b3:6b:e1:e7:de:ef:
1d:42:90:91:85:55:ef:41:8a:a8:de:23:60:ad:f0:34:d6:a0:
83:70:af:11:40:0e:e0:a9:b8:d4:70:da:3d:3f:85:77:6f:8c:
b9:dd:bd:df:ff:b2:0b:e8:62:f3:2c:b0:f6:e3:5c:3f:66:90:
87:bd:7b:7f:2c:76:16:c5:ab:d1:f7:dc:01:42:37:65:67:f5:
7f:70:0b:c0:33:84:b3:82:c3:81:ca:40:be:3d:ae:99:59:4f:
20:52:c1:09:8d:fa:32:dd:94:27:82:0c:5f:db:9c:5d:34:04:
71:e2:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:03:31 2026 by rpki-client