Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: Jv45AL5X21leP7UJ6iAwUCOSluHvtt4CjxQqpp4z93A=
Subject key identifier: C2:BF:8E:5F:E5:E7:99:B4:0C:15:87:75:2E:36:EB:43:72:00:8D:E4
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 019D37C104B0B7430357BB2737CF4F1BF859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 172A
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: HW-WD3YmA183Eg5SjeKZRN7F6vo.roa (hash: qS+dps2UAxlaxbw7uwyr1mlazMmXktC7iMhFMsxdPKo=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: QP8jSd7HiTj+qCoLdKNvYjxobsyHcxU/9GVz5oR37k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:04:b0:b7:43:03:57:bb:27:37:cf:4f:1b:f8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=c2bf8e5fe5e799b40c1587752e36eb4372008de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:fd:70:4f:33:2f:d8:d1:84:4f:94:5d:92:
90:11:e4:b5:d0:cd:8a:84:1a:8d:bb:88:1a:26:8b:
ec:3a:05:8d:99:e4:e8:a7:78:ff:31:be:67:38:18:
9f:f9:b0:11:c7:7c:10:d5:d0:0e:4b:5e:b8:8e:2e:
79:e3:05:82:a2:c5:8c:e0:cb:db:a4:b3:60:b2:1a:
45:c4:52:e8:3b:ba:c9:8f:b9:58:a6:fa:50:b4:c7:
5b:ad:48:0b:f5:68:ec:55:81:56:dc:53:4c:16:4b:
7d:84:57:a0:d8:75:69:e1:da:0c:00:82:5f:a3:41:
d5:f2:16:36:ab:18:4e:85:25:27:6e:e1:1e:24:3f:
15:c0:88:c0:4a:44:ef:a5:6b:a6:0a:14:d7:0e:87:
ec:0b:14:f8:a5:80:b0:da:5b:4e:ec:df:76:57:82:
5e:81:45:f0:f5:22:ca:e8:1b:35:87:54:23:9e:d5:
3f:f3:b9:2f:b9:f5:0c:95:71:be:fc:e6:4b:5a:a6:
56:a9:63:05:2f:3e:86:5e:bf:0a:6d:fa:32:3b:28:
98:0e:7b:09:ca:3b:2f:31:00:e3:05:f4:14:d0:3c:
3b:4e:41:38:57:ba:e6:45:9f:93:8a:1b:9b:99:10:
4c:3b:b7:99:ca:25:b0:47:f9:b8:28:2a:07:83:36:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:8E:5F:E5:E7:99:B4:0C:15:87:75:2E:36:EB:43:72:00:8D:E4
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2c:70:19:b2:11:c0:34:20:8c:32:16:46:00:80:38:9d:ce:
15:08:b4:b1:9a:87:a9:04:fc:01:d3:90:e8:89:e7:55:24:d6:
6c:99:f1:eb:98:06:bc:5d:80:c3:b6:3a:21:66:94:0d:bf:3c:
71:e5:1b:9b:93:ca:c2:b1:e9:d3:c7:33:e5:32:88:3e:2a:4e:
6f:93:8a:aa:0e:7c:48:b3:ef:2f:27:f2:75:26:ce:4d:7f:3f:
bc:c6:7c:0c:11:69:c2:06:4e:1d:f9:2d:f1:ec:cd:01:cb:8a:
69:3a:24:fb:ef:b7:9f:e2:ef:e2:ec:d1:4f:25:82:94:84:5d:
b1:b8:e8:d8:38:8a:3e:95:94:79:61:ff:57:31:15:2b:a3:03:
a2:09:a8:51:fa:29:9e:03:b2:27:c5:06:41:bc:56:91:89:e3:
8c:e2:7c:7c:99:bd:d9:d0:b1:07:37:a3:60:c4:19:89:71:eb:
17:07:11:60:e7:1e:1a:95:14:f8:3e:06:8f:4d:ff:0f:dd:e8:
57:05:49:21:fa:17:ee:35:c4:9e:2d:5a:ec:1e:9c:39:fb:ce:
6f:d1:d0:0e:d5:96:c7:3e:b5:77:9e:0f:b4:ee:0f:80:07:59:
48:b1:9f:dd:e9:f1:0e:97:5a:ef:5f:aa:dd:7b:f3:b7:63:a8:
f5:3a:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client