Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: SJ0vwTaWK4IRaWm0Aghtxh/XXaby6qO8eUXf3GW3Riw=
Subject key identifier: E7:13:49:7E:65:EA:77:15:0A:E4:23:D6:CC:1E:97:89:95:0E:84:F8
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019CE4477775DABEDC819B69E1893AC0AC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1866
Signing time: Thu 12 Mar 2026 23:00:14 +0000
Manifest this update: Thu 12 Mar 2026 23:00:14 +0000
Manifest next update: Fri 13 Mar 2026 23:00:14 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: y805mT6XJjo72OXtabuV9/a+ZOz5sbWpzJaxhRcV5kE=)
3: p0olYKK_67ffAzfvQRoSSz8TiKA.asa (hash: JDzRWVmjvJMNN1HKwXLWsrOkuN3FQ3v+/s9RaitfV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:77:75:da:be:dc:81:9b:69:e1:89:3a:c0:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Mar 12 23:00:14 2026 GMT
Not After : Mar 13 23:00:14 2026 GMT
Subject: CN=e713497e65ea77150ae423d6cc1e9789950e84f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ad:ef:4c:db:73:e4:17:e8:bf:36:85:23:6f:
d8:ee:96:f9:23:e6:b1:e6:e9:5a:bd:8e:2b:80:e8:
88:bf:f6:a4:9e:db:e2:e4:56:ad:35:76:6f:e3:cd:
f4:0b:05:ce:36:0d:02:66:f4:99:ba:99:7f:3f:55:
34:21:41:46:5f:f3:4a:37:a5:12:8e:4b:f5:b9:57:
f3:48:ab:77:ea:f9:2f:e9:8a:03:81:fc:b5:69:d7:
2d:90:c3:32:79:09:12:58:bc:d7:74:6e:d1:ca:bc:
dc:0a:1a:be:4f:83:f6:17:32:60:5b:f3:ba:b7:89:
9e:23:b0:ba:37:5a:ba:9b:72:55:12:1d:59:f9:ab:
8d:c0:50:b6:0a:04:e1:7b:67:5b:2a:39:ee:21:43:
17:2e:c6:44:b4:e6:b7:b4:42:23:3b:d9:50:76:bc:
72:8a:73:da:59:e0:bf:51:3b:bc:1a:94:fd:95:13:
df:01:49:b0:9e:70:64:6c:33:f7:05:82:50:2a:9d:
10:99:28:3d:01:fa:dc:2f:9a:6f:2d:c9:f1:c9:17:
bb:7a:6a:b9:25:96:f0:a9:c7:3e:ac:5f:d8:ac:ce:
b2:12:a8:9d:2c:e2:07:80:7d:3a:f9:6e:b3:3d:7f:
a3:5c:c0:b2:26:ba:97:f4:bf:69:d9:2f:b8:05:71:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:49:7E:65:EA:77:15:0A:E4:23:D6:CC:1E:97:89:95:0E:84:F8
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6e:30:19:e3:b1:83:36:81:0b:f6:78:00:a2:3c:e3:82:73:
bd:d9:11:74:23:09:88:8e:8d:f9:c0:25:c9:4b:f0:0f:cd:38:
21:23:4a:d8:c6:fc:c2:9e:80:ef:ef:53:5e:7c:56:80:8f:11:
89:e3:ae:77:5b:51:b2:99:19:43:d8:8c:87:60:32:1f:0a:05:
2a:23:1a:d5:6e:07:95:00:08:75:4f:2e:36:1b:49:65:8f:f9:
49:01:62:45:6d:77:b9:42:6c:32:8f:6b:85:18:87:d5:eb:87:
6f:e4:20:56:fb:3f:53:a3:d9:c3:e9:2f:b9:f7:17:85:cb:f9:
bc:9d:3e:16:64:d6:26:9a:4b:2c:64:92:20:56:c1:57:04:1c:
63:a1:58:26:54:b5:1f:3b:ae:31:26:37:cb:33:ec:dc:4e:c4:
c9:49:f0:e4:20:2f:b8:22:f8:6d:aa:e9:39:90:33:59:5b:a9:
38:4b:be:42:42:c1:17:87:df:23:0e:d3:74:cd:98:c6:d3:95:
ff:b4:15:17:f6:37:7c:c1:cf:b2:fc:fb:69:60:8b:73:c3:c4:
22:24:db:02:10:65:42:10:d1:06:3c:0e:90:68:88:3c:77:ca:
1b:bf:91:1c:02:0c:8b:bc:2e:c2:7c:0b:0c:19:0b:a1:06:8a:
fa:9b:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:20 2026 by rpki-client