Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: TljGKfnSEN0ZExNFAJVdNqvGn81yHOAy3k8ruaYVu2Q=
Subject key identifier: 1F:CC:50:2D:12:F8:C2:78:69:D9:35:A9:A9:8C:36:32:43:03:14:86
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019D284D4F1866E76E87CE9F5B0539A0FADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 055B
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: xKlv8uI3QgITK9xE7WFgPm4afhssGBhzTk9wXf3bqn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4f:18:66:e7:6e:87:ce:9f:5b:05:39:a0:fa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=1fcc502d12f8c27869d935a9a98c363243031486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:9d:4b:1d:34:a6:20:fb:44:90:7c:8e:40:
6f:d6:06:93:04:be:57:dc:03:eb:7a:e7:65:ed:6d:
ee:db:24:52:06:00:0f:79:bc:bd:fd:f2:c0:06:9e:
8a:b1:17:5f:68:c2:3a:5f:42:6c:b0:e4:b7:20:11:
7b:e9:5d:dc:18:b9:99:13:ea:aa:94:0b:a7:bf:c1:
45:38:60:a7:5e:f7:da:49:64:31:b4:d1:19:37:37:
ad:ab:19:e8:1e:83:ce:f8:1c:58:b8:87:02:23:e9:
da:ef:1a:ef:4f:8b:b0:93:e6:54:55:b6:39:b2:01:
7b:da:32:9a:cc:bf:cf:6f:e5:3d:90:65:ca:92:55:
c7:13:3d:55:79:47:e6:e8:9a:63:e2:55:c7:72:90:
7c:7c:50:a2:48:a0:1f:81:e9:82:3f:f0:06:81:71:
14:93:e3:8b:71:fb:6b:21:e7:54:2a:3a:a1:cd:f9:
9b:55:c8:60:5c:ae:81:99:89:95:23:23:f5:71:33:
9f:12:55:ca:92:a8:a0:8d:8b:7c:b5:1b:28:ee:7d:
05:f8:a3:8e:c9:91:bc:52:05:b3:24:f1:74:0e:ce:
9d:d7:86:62:b2:22:a3:56:23:66:3e:6c:1c:7b:24:
af:ac:b5:36:d6:ff:c6:b1:a4:5e:e6:7b:99:68:d4:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:50:2D:12:F8:C2:78:69:D9:35:A9:A9:8C:36:32:43:03:14:86
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f0:52:ce:fa:c8:bc:25:5a:35:0f:e6:3d:3b:bf:19:f0:7a:
10:7d:70:43:fc:cb:46:ea:aa:45:1c:56:76:07:77:e9:52:95:
84:14:93:ae:5c:4e:fb:af:28:cd:64:9a:b8:47:d5:41:d7:9b:
d1:a3:c8:65:4e:53:27:01:f1:8b:94:66:a6:e7:3e:af:f9:45:
12:33:b7:e4:55:ea:ef:ea:87:b3:f4:0e:36:c8:5c:d7:30:cd:
30:04:93:2c:01:9b:d5:06:88:5e:a5:4f:e7:d5:09:f8:2b:fd:
f7:7f:3c:e1:37:c4:6a:98:16:6c:e9:02:fa:f4:c4:0f:ef:63:
a0:73:9d:3a:0f:a7:20:3a:0e:c8:df:a6:14:a1:32:f1:52:ad:
ce:52:6c:e3:e2:88:da:c5:72:b6:ae:26:3c:8d:5e:70:ce:b9:
51:da:7b:82:08:a2:e9:8e:8f:c3:d1:e1:89:1d:5b:d6:77:2d:
b6:6b:7f:1e:4c:b8:1e:6a:e5:6a:46:ae:cb:2e:e5:bb:f7:08:
d9:3b:5f:45:c9:e8:ff:61:2a:2e:41:ff:fd:d1:69:52:35:b5:
da:95:d2:e7:cf:cd:13:47:48:96:12:35:ad:31:75:85:60:7a:
44:94:e1:75:9e:bc:42:92:e2:28:08:f1:52:d1:5f:8c:9d:cb:
28:f6:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:19 2026 by rpki-client