Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: 5yQZOmKXyvkXV00Lsp12fVOpI21ptSHX3R8bEoHruTc=
Subject key identifier: 2C:29:3B:25:5D:AB:A7:00:32:2A:C1:8A:6C:80:42:83:F2:20:4D:6C
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019D2AA92894E7C87664F040814B940E410D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:00:22 +0000
Manifest this update: Thu 26 Mar 2026 15:00:22 +0000
Manifest next update: Fri 27 Mar 2026 15:00:22 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: 2thRVCoremEYZBxIkMaZDE+vD6BWo7Kqy4cxn8C2OJU=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:28:94:e7:c8:76:64:f0:40:81:4b:94:0e:41:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Mar 26 15:00:22 2026 GMT
Not After : Mar 27 15:00:22 2026 GMT
Subject: CN=2c293b255daba700322ac18a6c804283f2204d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:7c:1b:46:c6:82:3c:30:a1:dd:c4:80:b9:
13:98:14:2b:44:f5:e1:cb:2e:98:9f:27:a0:4f:8f:
df:f2:45:65:f8:d5:9e:69:2a:a8:7e:51:50:58:09:
d5:ec:91:d3:1d:66:8a:42:4d:da:3e:0c:a5:a8:77:
03:1b:22:6f:f5:7d:47:72:d9:89:b0:61:fe:39:38:
fc:09:06:c9:a7:e2:88:3f:ff:02:63:1d:d4:37:33:
a8:8e:34:c4:cf:3e:2c:8e:0e:44:47:df:f6:5a:d6:
2f:45:c4:53:8e:a8:73:4d:32:66:bb:2c:c8:25:97:
6f:0f:f8:97:9f:49:74:ab:8d:0b:50:3f:01:0b:30:
b9:72:a6:2b:47:e5:be:5d:b8:80:d8:a1:14:a6:3d:
67:2b:3c:9b:2b:6e:68:59:23:e6:a7:70:b0:be:5d:
90:fd:b0:b1:62:99:cf:bc:5f:b7:34:ae:18:e9:e5:
cb:15:35:65:55:02:ee:0e:68:34:10:38:b6:1f:84:
44:b2:d9:4f:7b:8f:c8:7e:eb:e4:35:73:93:24:6c:
7d:1b:bd:c7:1c:fe:62:bf:38:ad:48:dc:ee:d4:75:
46:51:72:2c:89:77:61:31:3c:73:fd:fb:18:9c:c9:
78:22:e4:91:75:f9:d0:1d:9c:74:50:a5:37:9f:b7:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:29:3B:25:5D:AB:A7:00:32:2A:C1:8A:6C:80:42:83:F2:20:4D:6C
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2d:c6:ca:09:3e:9e:99:ca:34:18:4e:2f:8a:83:a8:9f:f8:
00:e0:b2:95:99:9e:6e:b4:61:a0:e0:2f:e3:df:48:72:d1:e8:
42:dd:df:e4:e1:ae:9a:f4:7e:0d:f6:cf:0c:ec:04:84:0e:73:
98:d4:5f:6b:9a:b2:94:39:63:97:43:6d:ac:be:1f:ae:1a:66:
f4:2a:5b:0a:05:8f:48:0b:d7:12:b8:91:2b:55:03:5c:0a:cf:
89:e5:1a:50:b9:d4:a7:3f:0f:90:09:40:09:0e:ef:5c:89:26:
41:05:8e:50:ca:90:8b:0b:71:80:bc:e5:de:bd:44:34:b0:15:
a7:66:9a:0a:21:ef:32:5b:b4:3b:e7:bd:6b:e3:56:02:e6:30:
ec:1b:af:3b:60:d9:2a:1c:0c:70:be:98:50:d1:f0:e2:b4:aa:
1a:83:b4:af:c1:86:af:d7:a6:f6:0a:f1:c3:c6:41:f7:29:41:
c4:ad:ff:5a:be:8d:6a:ab:47:60:0a:5d:25:ec:fb:01:57:65:
fe:ca:d7:7d:10:96:9e:be:b5:ae:5c:86:60:47:55:40:ac:9c:
8b:e8:34:7e:2a:08:9e:f8:d9:db:23:b1:12:ae:63:78:44:4a:
2a:94:eb:6e:29:12:89:f9:40:80:25:fd:09:57:9b:cb:67:c1:
db:96:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:18 2026 by rpki-client