Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: os+P6cRM39uzLijs6YKjdhOW6YXo5vcQLcPMOsob6yo=
Subject key identifier: 89:12:12:C7:B4:6C:06:BC:47:0A:F9:38:AE:77:4B:0D:D0:4D:17:66
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019D38D3B899B160F101F8B2FFB9087C6512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 15CC
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: 1T1EmzuploW8Hli3F6VvN89444c.roa (hash: 0xB4j4LlwM3o7BHqfHhrdF1w4xBf3JBcz4TO0vz2AeQ=)
2: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: RAgoR1HR405X9CV5Y00Sp6ydZaf6S2EZnISxcjx/jUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b8:99:b1:60:f1:01:f8:b2:ff:b9:08:7c:65:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=891212c7b46c06bc470af938ae774b0dd04d1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:ba:5c:05:b8:db:71:8d:1a:b3:b8:2c:1b:
6e:69:0b:88:b2:b7:9c:f0:89:31:43:58:84:03:32:
04:de:3e:8c:4d:0b:28:94:df:28:01:57:66:9c:9d:
16:85:1f:3b:76:b0:68:33:5b:ef:9e:98:3a:e3:e2:
ee:58:ba:a6:ac:7b:92:0e:55:d6:49:29:45:f8:da:
4d:20:bd:e3:ea:4d:1e:f3:2f:e5:05:d6:32:2e:96:
ab:3b:d6:c1:f5:3c:c4:42:a3:22:42:9a:f1:b9:6b:
11:eb:df:c3:23:88:1c:7e:a6:66:3b:20:a5:72:9c:
cc:37:17:4e:1f:a7:38:ee:b2:12:1e:3d:fd:5d:5f:
f3:d6:50:90:1a:3e:cf:77:19:08:dc:6d:20:fc:0a:
6e:1a:83:fa:03:83:f7:16:b0:92:c2:0a:8a:c0:7e:
dd:f7:4b:9b:67:cf:2d:35:89:b0:7c:e8:f7:b2:32:
54:a8:05:f3:4c:b5:81:ab:2f:6e:ae:bd:2a:58:90:
85:ec:b3:7b:b0:f6:61:5f:27:b7:09:cc:bc:ea:73:
dc:8b:57:39:ce:4d:b4:6b:a4:92:f1:7d:38:19:d0:
dd:53:ea:5e:18:dd:96:c8:9a:e2:bf:41:db:03:a7:
14:ca:07:44:14:58:70:04:35:61:fe:c9:3e:c4:2d:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:12:C7:B4:6C:06:BC:47:0A:F9:38:AE:77:4B:0D:D0:4D:17:66
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a8:56:c3:ab:7d:7f:a0:09:2a:04:d5:e5:c5:77:ef:5a:ef:
3e:14:4b:23:ea:0d:f0:01:53:ab:7c:23:8f:bc:13:7c:c8:3e:
1f:55:91:e6:01:ce:84:b1:92:12:6f:0b:31:07:7b:e8:75:d2:
e7:8c:ab:ca:73:cd:79:ee:ac:c1:be:08:c4:0e:e2:a0:d3:e0:
8b:64:7c:51:f8:4e:7e:eb:6e:74:e5:99:23:b9:10:14:14:d3:
45:01:82:8f:9a:39:ae:71:29:7c:10:15:c8:d3:24:24:57:25:
80:5b:d2:7c:4d:89:52:66:50:c6:59:b8:4c:26:3d:74:d2:da:
aa:51:8a:82:33:0b:41:91:56:30:d9:e8:22:dc:ef:e8:ab:bd:
bd:58:35:b4:9f:f7:4b:c8:e1:4c:7b:b8:8e:ea:0b:7f:b3:62:
ec:6e:15:ef:fd:d8:92:47:8c:d5:af:4b:39:93:21:77:58:49:
15:f6:d6:41:41:d4:b9:a5:18:b4:10:35:29:7a:e5:58:7d:6e:
75:99:36:c3:4c:f8:ca:bb:e6:7a:29:c6:1b:50:e6:bb:38:9a:
b0:ce:2e:a3:06:6a:f4:49:9b:f0:43:d2:f6:4d:19:0b:92:73:
d3:d7:e5:35:e0:67:0a:d7:24:0f:e1:0a:18:2c:1c:66:0c:5e:
73:74:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:36 2026 by rpki-client