Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: Ce9vRe9U4V/4mtCQiP0ytMLSCUgmMts3xzfwN4NXvBY=
Subject key identifier: 3E:5E:6C:5D:C4:C6:A0:8A:99:A8:0F:19:1E:60:89:30:D8:77:F6:DA
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019D389BB08C10E758651E1182E059B31455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0EE7
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: Ej1NGALUAyZGkeedSA07ESoqQtI.roa (hash: bVGUYeTkungmGZQJc78ekhzyESu4jsfHGMMaJDPhxpU=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: loRBrsgkKKcbuAhuoghKvU0UGbxD7w9xVXggy8+hvv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b0:8c:10:e7:58:65:1e:11:82:e0:59:b3:14:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=3e5e6c5dc4c6a08a99a80f191e608930d877f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:c2:f7:48:d6:c0:a4:3a:83:ec:44:65:38:
ab:e9:f1:9c:52:2f:22:10:7a:71:38:43:5a:b5:0c:
cb:22:e6:4d:79:dd:f8:87:1e:35:d8:70:64:a1:41:
31:43:1e:b8:84:0f:15:18:87:bc:88:d2:77:fe:87:
58:03:1b:d4:d8:18:f6:6f:ab:84:93:8f:7a:e9:4a:
7e:23:60:96:d5:10:af:a2:43:42:dc:66:aa:ea:51:
bb:99:51:54:aa:dd:14:5b:ab:91:e6:e5:4f:58:4d:
65:f2:74:23:33:69:a1:5b:9e:54:6d:20:29:64:30:
cd:32:8a:23:8e:32:cd:16:e6:7b:85:36:c6:63:25:
9d:23:89:05:68:fa:a6:a1:48:02:96:47:37:cc:3e:
ca:33:e5:f4:c9:54:7a:73:b1:30:98:13:33:f6:51:
f7:5b:2d:9d:56:00:67:3e:16:6b:16:83:ba:a8:d9:
fe:7e:31:4c:20:21:2d:fe:34:98:5a:f3:58:4e:e4:
02:3f:97:fc:64:f1:42:30:cf:03:59:10:0b:8c:b1:
93:49:72:51:36:30:23:48:7a:dd:4f:64:bf:62:01:
73:f7:a7:30:05:3c:de:c9:d5:0e:d3:1a:5a:54:e6:
11:64:a3:f9:10:d4:6f:60:5c:58:80:08:90:d5:a6:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:6C:5D:C4:C6:A0:8A:99:A8:0F:19:1E:60:89:30:D8:77:F6:DA
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:25:22:f4:f4:53:d1:4d:3e:23:6c:07:11:7a:45:c7:2a:
00:16:1b:38:d6:6e:da:11:fd:ca:73:9a:f5:5e:ce:a8:fb:6f:
af:d1:0d:11:6d:86:27:7a:3f:b8:06:18:d8:41:a2:82:ad:73:
31:f8:4d:9d:b5:a3:4f:1d:c8:26:d3:4c:e2:06:08:9e:de:c4:
f2:47:a3:97:98:cc:b0:9e:b4:cf:a6:db:e7:8a:4e:d9:f1:e5:
22:fa:61:11:f3:f9:e5:f9:7f:8e:22:f7:d9:de:07:5b:ac:c5:
18:b5:69:09:72:a5:b4:93:b9:71:3a:bf:96:67:e5:d1:da:94:
58:92:a9:cc:42:1e:85:c4:eb:6b:29:b8:1a:0d:0c:c3:5c:c6:
94:d4:5a:6d:70:22:54:8d:d4:fa:e2:f0:bf:52:4a:6f:95:6f:
c4:64:ae:57:8d:fc:bd:a2:8a:f0:d4:39:8f:38:3f:fe:9d:b4:
cf:d4:43:8f:a8:f2:61:5e:87:26:70:fe:a3:b0:17:aa:ee:7d:
d5:64:15:69:74:fc:9f:6c:1f:c7:a9:dc:da:be:e8:7d:1b:2f:
e1:b8:ae:8d:82:98:0e:59:92:c3:24:e0:c5:73:18:35:1d:a6:
e2:12:9a:a3:ce:de:56:28:42:24:9f:03:8a:1f:b1:7c:3a:42:
f6:88:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:56 2026 by rpki-client