Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: lQClT/+WtJ69BnICJLU9uuqag1MjYkMWzr/YcAgLzhs=
Subject key identifier: 59:50:48:32:AF:65:75:C7:64:E7:BF:7C:E2:25:50:7D:B5:7E:3B:6F
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 019D371B321AA678A91291B63738C2E54ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 01:00:22 +0000
Manifest this update: Sun 29 Mar 2026 01:00:22 +0000
Manifest next update: Mon 30 Mar 2026 01:00:22 +0000
Files and hashes: 1: eUG_AmjvEk2Uh9jdu3zrIDZcE_M.roa (hash: crSLoIhk/emALC03/EeOK1gvgnibfibC83SpQwGH7wc=)
2: hAHPjweyfzEmZctOAqBgVej6D9Y.roa (hash: hZD266S3QeLuF8KPvtFtT0P+a47oHHfhQQOsd40VTSc=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: ZDocWUdXziLZDS28E+23sahoTCRQNPtk6aX0QKARCeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:32:1a:a6:78:a9:12:91:b6:37:38:c2:e5:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Mar 29 01:00:22 2026 GMT
Not After : Mar 30 01:00:22 2026 GMT
Subject: CN=59504832af6575c764e7bf7ce225507db57e3b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:e3:b6:87:1e:02:c4:98:72:04:60:ac:0b:
6b:7d:a7:70:1f:9f:d0:7d:dc:1c:e5:26:9b:b2:59:
81:46:ee:c2:d2:76:fa:4d:4b:53:fa:03:5a:c7:50:
d1:53:6c:2b:f0:ab:46:8e:98:10:43:27:af:0c:bd:
d7:80:5f:db:38:83:22:7c:6b:4a:3f:b4:22:db:50:
d4:1b:3d:b1:0f:21:f1:ad:73:0d:2e:09:e3:42:ee:
ad:88:79:b4:54:65:eb:bd:05:20:e5:5a:f0:45:ce:
cd:32:ae:0d:56:2c:81:11:7c:b9:63:ba:97:05:c6:
62:44:d1:e9:7f:db:64:3b:2b:60:8c:88:6e:28:9c:
f6:a7:6c:cb:c9:a1:7a:48:c1:43:e8:da:f9:b7:ae:
d5:98:7c:09:f4:f4:03:64:df:e7:b6:6d:c6:d4:ec:
f2:16:64:88:30:48:5c:0e:a3:99:e7:87:f5:da:60:
84:61:ec:3b:4d:fb:90:9e:5a:d4:8d:20:28:bd:ab:
6e:a5:52:e4:02:56:3b:af:5b:9f:22:d8:f6:cf:e4:
07:7c:0f:70:50:81:dc:63:6e:54:a9:c5:97:4a:e4:
78:9f:af:79:77:8d:43:44:7b:62:82:fd:f7:ab:67:
a6:44:ef:a9:0a:30:b4:0b:ba:06:8f:1b:49:59:0a:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:48:32:AF:65:75:C7:64:E7:BF:7C:E2:25:50:7D:B5:7E:3B:6F
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:b8:9e:86:e5:49:cd:2a:04:61:8b:d7:d0:cb:9a:41:14:
19:35:3b:2f:ef:65:a8:5f:19:fc:19:9d:48:d8:e0:1a:f7:1e:
26:85:a2:66:32:b9:2a:5e:53:c7:c6:15:1c:09:3f:57:72:88:
30:95:01:c7:69:78:f7:51:6b:42:e1:46:e7:11:19:bd:59:aa:
eb:34:77:21:63:06:e3:66:99:b1:7f:25:fe:72:c6:de:27:72:
cc:2a:b7:57:73:50:ac:6e:26:64:e8:32:44:48:d6:78:c6:4d:
3c:60:bb:55:c9:fe:88:33:47:31:da:fa:19:6d:6f:e8:a9:62:
cf:35:e7:f1:4d:bb:73:39:de:c9:0a:c1:5c:de:d6:8c:f4:41:
93:6a:ba:98:53:85:43:5f:76:1d:d6:8f:00:52:9c:5f:fd:32:
f0:58:b2:d3:b5:aa:9d:4d:e0:10:3a:05:01:67:98:2e:0f:4e:
b9:41:8d:ec:0a:52:ed:43:05:ef:50:62:a1:02:60:27:3b:28:
fe:5a:17:5a:1d:31:0a:b1:77:b7:00:40:10:a1:d0:d1:b6:fe:
f4:0d:5a:73:be:b2:2c:54:a3:0a:be:85:00:a5:03:f6:e9:c7:
3c:ea:30:13:3e:e4:af:8b:d4:ce:15:63:b2:b0:4c:7b:e5:68:
0a:57:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:40 2026 by rpki-client