Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: Aml6jv9Vc8LN3rTefArFbCLYcdBVnTSyYCpkmaGxI0k=
Subject key identifier: C5:C0:4D:E3:83:22:15:6C:25:A7:48:4B:75:02:44:1C:EA:E2:D9:5D
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 019D27721E3EDC69E40046631ACF183BADD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 1640
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: CPc40Evoeo0Spfhyr9zsSYNpYYWkg/UYGDimJvuHlPo=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1e:3e:dc:69:e4:00:46:63:1a:cf:18:3b:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=c5c04de38322156c25a7484b7502441ceae2d95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:10:e6:c3:c4:a7:d8:05:a3:fa:b4:f9:06:
f8:f3:5a:d7:77:aa:31:c1:6a:d5:cd:46:ba:50:5a:
80:17:ec:27:f7:e9:69:8b:49:8b:b2:dd:93:3a:6b:
ea:ef:60:bf:f2:f3:96:a6:4c:1a:aa:34:30:ac:16:
80:f0:19:b5:a4:0f:36:46:ad:ef:bd:ec:8a:c4:69:
91:7f:75:de:f3:10:cc:36:f7:68:48:98:5c:9c:2d:
42:e1:66:36:fe:c0:df:e9:39:fb:05:56:c5:4f:ee:
9d:2d:dc:28:fc:cc:a0:0d:f3:c7:4d:99:a2:26:37:
f1:fb:34:f3:e2:14:0a:c6:38:72:9e:30:68:55:0f:
92:34:11:a5:eb:1d:48:c1:59:c2:89:6b:30:be:eb:
e8:67:e4:0b:ad:fa:c8:00:8b:fc:30:b5:f4:37:66:
74:b5:f7:2e:8f:92:ac:fa:5b:4d:54:f3:50:15:53:
fa:4e:6e:0a:a2:cf:90:0a:d3:d7:de:22:56:69:fc:
4b:ad:aa:45:fd:48:17:d0:98:66:cf:36:d0:19:4d:
bd:0e:e6:31:40:f1:cf:fa:ad:36:bf:b4:f7:18:6d:
42:51:57:bc:a5:88:48:8d:ef:be:fb:2b:23:b3:22:
61:b4:42:5c:b5:fc:0f:d3:cd:08:b1:9d:b1:68:89:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C0:4D:E3:83:22:15:6C:25:A7:48:4B:75:02:44:1C:EA:E2:D9:5D
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:27:1f:d0:ab:10:d1:6f:e4:5b:b9:05:8a:29:6b:12:a7:f5:
fc:72:98:af:b3:14:5a:b5:1a:48:29:94:61:06:6e:12:79:08:
5d:9e:00:d0:70:51:63:72:13:a4:fd:f2:63:08:73:0e:2f:36:
f9:34:7c:20:f4:db:7f:df:7f:d0:f7:db:56:c2:b4:2b:9a:b9:
6f:40:20:95:93:f5:35:70:65:68:65:9d:83:96:e5:f6:61:45:
e4:fa:c1:78:f0:ed:3d:dd:f7:46:2b:84:26:85:ca:7e:73:14:
86:8c:b4:20:52:c7:73:0f:bc:b5:c2:d1:19:eb:45:7b:d7:6e:
2b:9b:70:25:2e:e0:57:de:d0:00:b7:98:23:0c:2b:37:60:d0:
6e:b4:58:a5:d1:06:fa:37:22:0b:49:de:f8:02:32:cc:8b:c2:
99:49:7d:97:2f:b3:00:ee:4a:4f:a8:d9:ff:3c:f3:73:74:c8:
af:5f:03:63:7e:ff:f1:5f:f3:96:2d:41:a9:c2:2c:6e:ac:02:
5f:d7:7b:93:fb:98:c7:f1:76:d9:ab:83:22:67:ff:1c:a4:47:
32:a5:f1:4e:b0:01:6f:ca:1d:14:76:61:1d:ef:bd:1d:9e:7c:
01:4e:81:3f:6c:25:33:8f:21:84:8b:56:75:86:fb:61:02:1b:
50:09:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:45 2026 by rpki-client