Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: R4knWQxlo7iXVmzel3We4UyIFqT/6b1v854MK1gZOBM=
Subject key identifier: F8:FC:D7:79:3E:5D:46:C8:F9:D9:DD:4F:7C:92:B5:9B:E0:B2:99:F1
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01A10F27CA0CE146DC27337B4F05D2A03344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1A8B
Signing time: Tue 06 Oct 2026 03:00:28 +0000
Manifest this update: Tue 06 Oct 2026 03:00:28 +0000
Manifest next update: Wed 07 Oct 2026 03:00:28 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: mBtJ7Nstqekm8vqdJoR9Tua0nShed0fVZZl2QWdRzcc=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:ca:0c:e1:46:dc:27:33:7b:4f:05:d2:a0:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Oct 6 03:00:28 2026 GMT
Not After : Oct 7 03:00:28 2026 GMT
Subject: CN=f8fcd7793e5d46c8f9d9dd4f7c92b59be0b299f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:70:60:3a:72:82:0d:1f:a1:85:d0:1e:3c:
59:67:4f:0d:d2:a9:ec:26:56:40:93:bd:51:1c:7e:
12:b9:48:06:dc:86:ea:ac:84:36:24:6c:17:fa:93:
01:ae:31:66:bf:48:43:94:27:38:20:15:0e:e5:f1:
3e:70:f5:90:68:13:ef:f9:b3:eb:b4:18:23:8c:37:
fe:83:ce:31:bf:ce:0b:26:c3:55:69:5c:aa:83:8c:
71:97:50:0a:fb:3a:9d:97:81:86:4f:e5:0b:c8:99:
7d:30:09:6c:e0:8b:29:64:4b:9a:78:eb:8e:d7:6d:
c0:6c:50:b8:cc:5e:31:6d:4c:ff:af:0f:33:0b:f3:
ac:08:02:03:3f:41:3d:89:36:da:46:e6:3d:25:08:
8c:c0:b0:cd:d1:01:13:16:45:ff:a9:06:67:10:7e:
b9:49:0e:62:7c:3c:38:ae:a6:23:01:b0:ff:5b:9b:
20:bd:58:5d:bf:bb:57:23:1e:87:de:f2:1e:4d:d9:
33:bb:ec:52:10:98:ea:3b:c2:b2:aa:3d:73:7f:3c:
4d:a8:37:bf:1b:0e:6a:0a:ce:ab:d9:5d:64:9d:e2:
fa:a0:55:4e:ee:34:b4:e8:18:48:47:f9:b3:78:4c:
9f:a7:5e:e1:1f:98:84:6d:c2:d1:7e:91:72:66:67:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:D7:79:3E:5D:46:C8:F9:D9:DD:4F:7C:92:B5:9B:E0:B2:99:F1
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:58:dc:f6:42:b7:90:f1:71:a3:db:84:77:4b:3c:77:de:
d7:7e:72:f0:64:3b:c1:5c:d8:53:fd:ec:28:9a:03:8a:13:f2:
57:83:7a:bd:79:2e:9c:ac:e2:6a:21:81:d5:7b:a5:9b:4c:24:
8c:02:d0:b9:9e:fe:7e:db:38:3e:a7:8b:4a:0c:ca:36:57:24:
f7:be:5b:83:8f:57:eb:6c:42:4e:6f:2b:3e:5c:94:ba:17:94:
21:f9:b0:a0:14:58:ff:42:1a:61:af:76:e7:d5:6d:c9:89:69:
ca:e2:5b:30:23:00:84:4b:49:e3:9e:cb:67:44:88:47:63:18:
2a:3a:a5:70:ee:86:2d:be:a9:b6:33:08:e2:eb:c8:64:05:5a:
c2:dd:d3:e5:23:88:87:a8:3c:0c:a0:94:de:fe:2b:d9:21:1c:
26:00:fa:61:88:3f:52:53:a8:33:16:5d:90:78:fb:0d:77:85:
64:5c:dd:43:c6:16:d4:32:bb:05:47:29:d9:25:05:56:bd:fa:
de:5a:9a:86:93:be:ec:3e:f9:b1:f7:11:97:f6:6a:c0:55:27:
a6:d4:ae:b6:dd:29:b8:c0:de:07:e6:cc:0f:8f:3c:aa:34:0e:
10:76:f5:dd:6f:8a:37:17:7d:8f:32:db:3c:cd:ea:2c:b8:01:
6b:c8:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:52:30 2026 by rpki-client