Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: Jtd51WDTqbk34vTk4YGBvYoqef1tU6/zLb6JkAwIR8o=
Subject key identifier: C3:5F:18:AB:B6:1A:43:1B:5B:3C:3E:6F:A6:E2:B1:97:A5:6C:A1:A2
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019D37531259F0D6A3580BCE9B8A64B9F68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0C41
Signing time: Sun 29 Mar 2026 02:01:24 +0000
Manifest this update: Sun 29 Mar 2026 02:01:24 +0000
Manifest next update: Mon 30 Mar 2026 02:01:24 +0000
Files and hashes: 1: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: VMjSTbR6wMATaxVj0ZwSkHSCxyDvXyXSA9ADjBmb6/Y=)
2: Uo2zXb7xDJEIiCoeCYCC8PrL42A.roa (hash: oMrnSqWlYTSclklmzzYM7d3FpGFOzhG3FJDIuAEG0Rc=)
3: vQiZmPMf9IeoKABnozsDY-6d9UQ.roa (hash: 8GXH0TKZLcFAfjc4jnVxVr7204I+TJn5VFuiHQHtpKY=)
4: wbqmfwWmA_mTuxJMrgbcccVRq0o.roa (hash: ikwWrG/vEk9wIu3LnAsVyDpQOVfL5PBtwTAaO84nGNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:12:59:f0:d6:a3:58:0b:ce:9b:8a:64:b9:f6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Mar 29 02:01:24 2026 GMT
Not After : Mar 30 02:01:24 2026 GMT
Subject: CN=c35f18abb61a431b5b3c3e6fa6e2b197a56ca1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:e9:6a:26:ca:7f:33:9f:9a:e0:0d:53:74:
be:a0:11:05:9d:5e:7f:b5:28:cd:08:28:f5:e3:35:
a1:ec:89:83:7a:56:e1:53:4e:0e:49:6e:46:53:7f:
a1:87:95:a2:9c:42:da:c4:86:5c:2f:97:bc:e7:c6:
0b:0c:f6:8a:fd:15:1d:3d:67:46:6e:fc:23:c0:bb:
e8:0f:7f:81:04:ad:68:e2:ea:e4:b5:f6:7d:f9:be:
bc:b8:be:34:6e:be:1d:51:93:95:3c:47:6e:c3:f6:
64:ed:e4:22:b1:e7:09:cb:84:fc:f4:7f:38:0b:2e:
83:30:d8:e9:19:74:8d:4f:2f:bf:84:59:aa:4a:cd:
c6:f6:eb:0d:c9:8c:2d:66:ac:f7:d2:fe:43:6f:4f:
78:32:85:4f:77:a9:ec:3e:df:38:9d:e5:63:5b:b2:
22:b7:44:e8:5f:a6:23:29:ea:60:58:e1:bf:3f:81:
84:3b:08:95:73:ba:a7:ab:07:f3:41:fa:3f:ae:ba:
ef:6c:38:9b:e6:25:59:06:f2:47:6a:49:a5:88:fe:
2e:e8:12:47:e8:0c:99:c5:7a:92:05:1b:87:a8:37:
18:55:42:64:25:0b:be:79:28:9e:9e:01:1a:96:14:
6d:60:84:5a:8d:3a:a0:08:28:c4:f6:f2:a6:1b:25:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:18:AB:B6:1A:43:1B:5B:3C:3E:6F:A6:E2:B1:97:A5:6C:A1:A2
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:aa:3a:63:66:f9:52:a6:42:aa:99:a8:c0:92:df:dd:1a:11:
57:22:6c:2d:c8:ab:65:0b:60:4e:43:35:12:75:b7:3a:5a:da:
8c:83:a1:21:c9:9c:35:61:be:5c:fa:a0:88:0f:28:7d:de:e1:
3d:f8:1a:ec:1a:94:78:80:18:0e:f2:a0:8a:4c:3c:05:10:b1:
10:b0:4c:a1:bd:23:2b:60:fc:f9:e5:62:35:9d:54:1c:52:15:
fc:e0:f4:70:21:53:18:05:5d:c7:8a:54:d7:ff:35:42:0c:f7:
15:b9:c7:8f:20:38:50:e7:ba:e5:69:08:a8:2f:40:21:f0:84:
aa:1b:0c:67:0c:22:c5:aa:74:51:14:b0:25:0f:a9:2c:dd:59:
2d:44:47:10:10:2b:b5:47:fa:66:3c:cc:02:a9:e9:7f:40:76:
8e:d8:50:72:e7:9f:28:a9:9e:1e:82:28:9e:77:3c:16:90:60:
67:90:20:67:d2:57:9c:5a:bd:e2:ae:03:09:3e:c8:90:84:c9:
64:37:5e:9e:53:65:9a:d5:34:a7:8f:af:7e:0e:51:14:94:d4:
ea:7f:89:df:7d:d6:7d:31:e6:cf:f6:17:6e:09:0a:47:24:97:
c4:39:9a:f9:f4:80:78:79:ef:ca:85:f8:0b:af:5c:9e:1f:30:
76:4e:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client