Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: nQ7Maz083RIwsdYdPLLBSBzZnEDp+h04x7P+TzlFi6s=
Subject key identifier: 59:96:40:14:E1:4B:4B:BF:07:5E:73:79:DD:18:3C:4B:DE:FF:13:92
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 019D2772A327E1EFF32444FE96B6B5A003AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 1691
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: QpLkcZPBU2X/obkAHZn5OWrtGM2OyKTtC4aQutsylYc=)
2: Va7ccuyr1gwIPxh57e6tKLedSCw.roa (hash: Href7Vt90sb2zBKLkX06zqhinA47HJQXH9/GsT7Lagw=)
3: lyFAZNxDoVB_4-IZx9taISL-h1Y.roa (hash: kzhZQdnTTMEyyH8y5o2LcLLVtV/D0+7gimOZT6GoW+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a3:27:e1:ef:f3:24:44:fe:96:b6:b5:a0:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=59964014e14b4bbf075e7379dd183c4bdeff1392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:12:9d:a5:ba:a2:3a:43:72:68:f7:b7:9a:
82:a1:db:64:07:7f:49:c0:8f:95:a2:66:54:45:e2:
cb:9c:15:40:97:1f:ae:44:b3:f8:36:8c:0e:54:e3:
4d:d5:ad:42:d1:ee:84:44:e9:4b:a4:b1:08:31:00:
6b:65:8f:21:39:fe:5d:ef:75:fb:f5:02:6c:fe:a2:
ff:98:6a:a7:b8:51:d1:b4:20:bc:f1:39:df:d5:28:
9b:3c:af:1f:f1:9e:ee:88:0b:a0:92:47:7c:00:81:
89:74:bb:d0:1c:29:a0:f7:71:ac:c4:66:05:65:0a:
58:2c:98:ce:53:62:4a:8f:a8:64:d3:1e:54:10:62:
9e:2f:84:e8:aa:0c:4a:ae:14:44:b8:50:5f:7e:ac:
eb:90:7a:09:28:00:46:06:cc:2c:8b:c3:ec:d1:22:
0b:1f:91:ff:58:83:05:7e:34:60:62:ca:45:71:d0:
6a:ed:ad:2f:27:78:ca:af:e4:f6:ff:5c:29:1e:09:
2b:46:e0:d8:2b:5c:58:de:00:a0:41:16:a4:0b:af:
c9:60:4f:c7:99:3f:b3:19:32:ec:d6:fb:35:e9:8a:
8a:a9:65:80:ab:b0:88:6b:b3:80:50:29:5a:13:d7:
42:af:25:81:1c:38:78:52:1e:3e:6e:8f:52:75:fc:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:40:14:E1:4B:4B:BF:07:5E:73:79:DD:18:3C:4B:DE:FF:13:92
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:40:d7:fa:47:87:0e:75:d8:0c:70:f4:df:1e:b5:70:4d:
de:e7:d3:7b:78:6c:77:7c:52:c5:d2:47:02:90:d6:77:4f:45:
ac:a1:1c:a7:25:8a:aa:29:ee:4a:0e:45:09:93:83:e5:38:e8:
8f:39:0c:9c:05:8b:e5:47:4d:53:0d:01:2e:a2:f4:50:38:8b:
95:48:b0:f2:52:58:cb:bf:42:6a:c8:2d:0e:08:4b:a6:17:36:
ec:94:5a:de:03:57:6b:96:d3:44:08:dc:7a:d0:52:4e:a9:84:
f1:73:50:96:40:eb:f5:7f:3f:9b:27:9b:44:44:d4:b9:a5:5a:
5d:ab:fe:ab:e8:f1:ac:2c:b0:2f:7a:81:56:3c:bf:35:ee:b4:
ec:d3:46:74:f2:45:8f:e3:23:44:52:a8:4c:17:b2:84:c1:c9:
f8:28:25:eb:93:f2:a2:c5:74:ef:bb:fb:2f:01:39:0c:a7:f5:
0d:60:f0:2c:bd:5e:06:85:a8:c0:24:38:c8:a0:d6:44:68:64:
75:1a:8c:5d:da:b7:98:90:93:58:26:3e:d2:ad:1a:ae:d1:43:
7b:d6:66:a4:fa:4d:98:5d:3a:55:f2:05:b1:75:b3:a6:19:da:
63:86:b9:12:91:26:12:61:21:d8:0e:37:e1:26:ef:eb:45:64:
05:1b:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:32 2026 by rpki-client