Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File: ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier: 4HdvWIWVMqjhDboVSpGEHWfRaPD61fFZU1k3SbUZHEU=
Subject key identifier: 51:60:C2:90:0D:87:49:7A:9F:48:AE:32:2F:E9:A4:D7:D8:BA:B1:78
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer: /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial: 019D27DFF680F9152B824A6C804D099209BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number: 0303
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: CeTMYCn7puR+dZ6j9mc0qyrV3LkHxwLRulpGgPfmjVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f6:80:f9:15:2b:82:4a:6c:80:4d:09:92:09:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=5160c2900d87497a9f48ae322fe9a4d7d8bab178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:a3:be:3e:37:8e:67:47:8f:de:65:de:3f:
26:89:dd:d9:80:17:e4:d5:65:cf:9e:ad:4a:01:55:
ec:f7:18:f1:c4:21:d7:b6:3f:b5:90:3b:5f:90:28:
84:83:e7:ee:16:e1:a1:35:f2:c4:a1:f4:5f:04:b3:
e9:40:3f:d5:98:22:fb:a3:ae:0f:c1:e0:de:23:41:
d4:10:0f:89:c0:27:89:f7:9c:2e:d6:b0:b3:73:2d:
2e:13:93:91:2f:b7:7c:73:ce:6d:76:1b:10:7d:f8:
d5:21:f2:20:d9:31:63:da:eb:f7:ea:4c:0f:06:47:
2d:ce:d1:c8:ac:da:2b:06:7a:b6:34:13:29:6c:8d:
68:b7:34:08:70:a5:c3:e8:86:f0:f4:99:1f:8a:1b:
90:c6:11:d7:85:94:4e:60:a2:52:dc:0c:2d:df:e2:
76:3a:f4:a1:30:fd:6a:1b:4c:cb:1a:ce:71:92:03:
30:c2:86:9b:eb:25:6e:4a:e0:c4:f1:a7:7f:94:7e:
b4:50:4b:ee:62:88:03:85:36:f3:60:d3:9e:7e:58:
e1:9e:e4:33:95:5d:15:95:e3:57:b6:8d:25:2e:6b:
a9:6c:71:5d:1e:c0:d3:d9:f9:f5:4f:62:97:01:f0:
57:c6:cc:e0:f8:7e:8e:54:34:49:17:18:b5:49:39:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:C2:90:0D:87:49:7A:9F:48:AE:32:2F:E9:A4:D7:D8:BA:B1:78
X509v3 Authority Key Identifier:
keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:ba:b5:b6:49:89:07:eb:04:55:3c:11:74:89:f5:e8:ed:
b1:73:06:12:8b:d0:99:4f:8a:66:2f:a8:35:4c:2b:e8:3c:31:
84:4d:62:86:1d:2b:7a:db:14:d6:c2:ea:58:35:71:19:bd:ea:
38:99:ba:47:93:2d:f9:00:b0:be:3e:5f:1a:a6:5d:d8:d4:4f:
83:4b:0a:8e:dd:4b:4d:05:a8:54:d2:4e:a1:7f:be:13:24:95:
ea:db:2c:36:cf:1b:e9:44:60:0b:87:e8:fb:5d:10:f0:be:b0:
55:7a:c2:30:b6:78:49:35:16:81:30:99:3e:5d:03:b8:9a:be:
74:64:20:0f:2e:76:3e:64:0b:85:97:f8:66:94:42:a8:b0:cb:
ef:8e:21:9d:f7:26:a2:db:09:e7:8c:54:72:70:cf:79:d9:9b:
46:bf:6b:b4:5f:8a:98:ea:75:19:c1:53:e9:62:d6:96:46:a9:
3d:e3:31:ce:aa:6f:92:24:97:bc:14:cc:fe:32:79:d7:b8:11:
cb:ab:88:92:3b:81:52:8c:f8:0d:14:d4:44:80:91:aa:e3:9a:
0c:df:93:1e:79:5c:a9:e2:01:bf:b7:2f:62:00:14:f1:f1:da:
d6:30:ea:44:ae:c3:89:30:4d:f5:ec:92:37:d9:1a:93:89:26:
a9:b2:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:26 2026 by rpki-client