Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: w18cQXeXb4V/0SsyBMQqg51ePNnRPMdx7olEXiyWZD0=
Subject key identifier: B3:F5:8A:68:63:E5:81:C6:5F:02:CB:8C:13:F3:CB:55:7C:D3:D5:D5
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019D26CD7BC436E4213DA01F48B8954F6613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1046
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: u/Mk0ftAD5lkaaKPYLRBAeSDqO6lDxNuNacWpyCG61I=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7b:c4:36:e4:21:3d:a0:1f:48:b8:95:4f:66:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=b3f58a6863e581c65f02cb8c13f3cb557cd3d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:3e:36:04:7b:97:5f:c5:ee:b2:7f:12:18:
ee:77:4a:cc:da:ca:4a:09:67:85:d2:c5:2d:d7:9c:
94:06:9e:4f:4e:c9:24:9b:30:4b:0c:4f:39:d8:e9:
b2:fe:e9:8f:4f:d5:24:ef:04:46:a2:34:59:f7:d3:
05:e3:7d:ca:c4:04:66:7a:ce:85:a3:6a:b2:1c:fc:
cc:7f:4d:d7:61:d9:53:0f:8a:9c:56:cc:40:f7:bb:
bb:c2:35:75:7c:a6:44:26:41:4a:72:f7:f4:92:f3:
d9:44:8f:bb:40:33:2e:2c:7e:ca:c7:e7:12:fb:82:
54:ad:d7:b9:d3:36:c9:c1:7e:ec:14:b9:fb:90:8c:
e6:6d:7d:ef:69:df:a2:1a:37:c6:8f:ec:b5:df:8b:
e6:8f:41:20:3e:c9:d5:4f:ac:5d:9e:5c:20:12:0a:
05:f8:c6:cc:31:67:fa:9e:6a:bb:53:01:44:b4:a9:
b9:0e:9d:1f:a7:95:33:a0:3b:31:f2:00:5f:16:6e:
ad:8d:bd:35:3d:be:f6:53:b1:ba:0a:44:ac:d2:53:
a5:b9:77:bc:4e:eb:ec:0c:6e:ac:66:5e:6a:fa:1b:
39:24:03:08:ff:05:61:ee:4c:c6:d0:f9:79:e7:a7:
c5:3d:af:8d:91:34:f8:e3:8c:40:23:4c:90:21:e3:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:8A:68:63:E5:81:C6:5F:02:CB:8C:13:F3:CB:55:7C:D3:D5:D5
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9e:e4:98:42:86:c0:10:6b:d9:04:13:3a:0b:5d:27:8a:1e:
fb:df:a6:26:f4:e4:95:db:a8:1e:15:4d:98:2b:50:94:cc:a4:
ea:a5:02:21:04:93:06:ef:75:cd:5a:31:f9:be:a5:ef:0b:28:
e0:c5:b8:b2:c9:e4:fc:1b:a8:51:aa:f7:6f:d7:91:42:df:a7:
17:de:21:a4:4b:e5:d9:c4:77:f6:87:a9:0c:94:a1:a3:f6:8c:
4d:bb:d7:92:0b:e1:0b:18:ae:ba:45:54:b8:84:66:9f:f5:fd:
21:e8:2e:92:a2:b4:85:af:54:d0:53:2e:d0:df:10:2c:41:d3:
02:b4:b7:2d:3c:6c:16:c1:2c:6b:5d:cf:e9:e0:7c:85:a0:e3:
43:bb:ac:9d:54:3f:b6:b6:e1:51:f8:ad:3b:b6:88:3a:65:4f:
a9:e0:a6:d6:e9:2d:ea:53:19:27:87:8b:4b:e9:56:88:73:58:
4b:7d:d2:f5:29:fc:5b:b3:f6:48:be:54:78:8c:ec:c5:0a:1c:
6b:01:b5:f3:6e:6b:52:6d:9c:c0:36:40:b1:9c:4e:4c:59:f9:
9d:75:62:2b:80:f0:aa:c8:79:e7:2e:c7:93:74:05:93:d1:5a:
ad:4c:48:8f:37:0f:3e:7d:04:2f:24:e9:39:e7:3e:fc:b7:52:
04:2e:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:26 2026 by rpki-client