Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: Wf/rvRR5i384PzKqJXLvKPEgDMpkRWOKY043nqOeBvM=
Subject key identifier: BE:5B:E6:32:CA:74:F3:A0:C9:B9:1E:6E:26:2B:CB:F9:CB:00:D1:7F
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019D37BFF39D6C5A2DBC47DD30641604E394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa (hash: L6OclFsXAbkjxZSlLKINJ4WzPa71QpYW4ACfx2HTL/4=)
2: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: kxbEW5IMYWLXi46siZrSyHjtAOeR+YkAo6nXbZCJhVU=)
3: NUW_ZH_EIIHERuITZzYR2weW90Q.roa (hash: Y1z/FtrJMczt8aV1zB8hcs+HmFMUQfSmWahrrb+QcEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f3:9d:6c:5a:2d:bc:47:dd:30:64:16:04:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=be5be632ca74f3a0c9b91e6e262bcbf9cb00d17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:4a:ec:22:96:25:bc:65:62:07:e7:27:3b:
e4:2c:55:b7:5b:05:14:67:21:77:fd:ae:75:0f:34:
58:1c:6a:4c:56:f7:b5:f7:4f:1d:bd:c0:42:74:17:
3f:68:dd:e3:1f:f6:ee:5b:e9:ac:63:aa:17:b0:51:
d8:00:18:52:d0:b9:57:21:fc:c7:38:1b:95:a6:f2:
56:b1:c5:ad:54:e8:94:a9:d6:8e:e3:6c:b2:9e:a5:
ec:ad:59:75:e6:8a:21:79:63:69:94:8c:26:a4:cb:
b1:2f:7e:2b:54:f8:3e:67:c5:1c:f7:62:f0:ea:d3:
61:d0:d7:a1:70:5c:e1:b3:29:fc:06:df:33:61:9a:
76:ec:e1:09:a4:18:c5:d2:26:9c:e0:2b:0d:2a:cb:
69:ee:9b:88:43:38:ee:75:af:94:59:4d:a8:b1:8d:
c1:23:c1:d9:19:26:cf:26:20:dc:91:0b:24:5e:43:
1b:aa:56:e1:98:5a:df:57:4a:89:ec:e7:d2:88:ae:
a1:16:47:9e:8b:7b:54:33:d3:cb:89:08:52:3a:64:
60:54:c5:37:48:5a:dd:ea:b1:7a:4d:46:94:3c:95:
db:07:03:96:7b:c4:60:00:52:dc:9b:c7:61:3d:39:
7f:76:19:62:75:33:3b:22:93:f4:ed:39:8b:7a:30:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:E6:32:CA:74:F3:A0:C9:B9:1E:6E:26:2B:CB:F9:CB:00:D1:7F
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:ab:fb:7f:bd:79:6c:0d:38:d6:1f:1b:e7:ed:3b:07:3c:
0b:d7:b2:62:dc:d3:44:ea:60:a7:91:c5:be:f5:bf:a1:75:34:
a3:13:0b:68:e3:b4:db:d4:23:85:fd:26:7b:52:a7:bd:05:52:
1a:00:70:63:26:e6:59:e2:67:d4:b8:aa:97:b3:1d:6e:b1:48:
d3:3e:18:e7:a5:62:94:98:9c:3c:24:48:34:96:3e:6d:da:6b:
ba:aa:0a:a3:32:eb:de:e8:94:22:2b:d7:24:2e:9a:cb:53:e0:
3d:e3:31:97:82:07:e9:a4:80:a7:aa:11:e3:dd:d1:04:47:0f:
00:2f:eb:f3:39:18:c7:62:3e:12:5b:39:13:d7:28:0d:12:14:
17:29:68:b6:08:32:1d:0d:d8:c8:d4:47:44:88:f6:80:0c:b1:
0a:94:d2:fe:27:13:e6:0f:30:a3:10:82:5e:17:a0:03:4d:14:
51:3e:df:b7:7c:7a:0e:43:34:3a:73:3f:f6:c0:a3:0b:58:3d:
dd:3c:9f:0a:53:b6:67:ea:f0:da:09:5e:63:6d:8a:71:d3:07:
da:1e:31:0e:d0:ae:f1:ed:cf:0a:fe:5c:f4:48:98:83:da:1f:
da:77:5a:82:9d:76:67:ed:b5:71:d3:32:a2:0e:4d:3e:ae:37:
fe:9e:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client