Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: BTq3zwnYoU35vHWiHppKmxQyZGD85T7t3/OxzmGgzmc=
Subject key identifier: 2F:41:55:A3:58:48:AA:B6:12:F8:96:D6:16:F7:E9:7D:0F:77:27:82
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 019D28F22BC274982073CAAC3EF865688F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 11B5
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: JAqOCCIs02l732TLQ6m37qMp+z43xiux9sbzyzRi0wQ=)
2: Wrhjb1hAMnvMEFNhZPfM1B86lVE.roa (hash: Gv1vEyePcq9xp58SSBlXaTFRs6qrhv7RxJOEp83e6n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2b:c2:74:98:20:73:ca:ac:3e:f8:65:68:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=2f4155a35848aab612f896d616f7e97d0f772782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:50:27:3c:ed:bc:81:19:2b:ad:00:96:09:
22:0d:d9:64:92:0b:8e:7a:48:f4:a3:ea:84:48:27:
33:8e:b3:70:3a:9e:da:55:9e:a6:96:e8:92:1b:c3:
33:b1:87:74:73:30:a7:bf:43:16:56:07:58:b0:ab:
10:38:fe:9e:b3:51:27:fc:22:10:f1:95:f6:62:74:
be:74:c5:f3:62:78:87:5d:ab:01:cb:21:03:ff:21:
e8:46:29:63:47:7d:fa:51:28:df:e9:53:2a:e5:e8:
39:6d:a9:4d:fa:bc:90:a1:8d:55:ef:2a:a8:f7:28:
56:71:ca:29:cc:c6:bf:41:23:b7:8c:1c:f0:47:71:
4b:00:d5:d5:06:11:7c:86:a0:e1:2a:f6:79:00:ce:
40:90:cc:81:38:4c:b3:9d:e9:da:a6:73:c5:19:9b:
95:9b:fe:36:5b:9f:11:8f:61:d7:a2:d6:8c:80:82:
73:4c:3a:e7:97:74:ae:a6:ea:3f:30:54:47:5f:5f:
08:94:02:14:4f:f8:09:a9:98:9b:cd:ff:68:af:ff:
9f:7a:d3:5f:ca:92:ed:3e:5e:93:17:2f:ed:46:c7:
9e:91:d5:95:bb:83:8c:2e:c2:8f:0b:f6:d7:43:63:
a4:64:fb:ed:57:fc:c6:32:5b:ac:46:08:fe:19:4b:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:55:A3:58:48:AA:B6:12:F8:96:D6:16:F7:E9:7D:0F:77:27:82
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:29:7e:d0:48:82:5a:68:b5:61:4f:b8:23:e1:1c:ad:ed:51:
dc:ea:df:8e:d8:27:37:9d:f9:4c:21:73:03:0a:96:05:c7:e9:
e5:9c:47:0f:ed:35:1d:7f:2b:93:52:61:e5:4a:39:ba:7b:50:
c1:27:56:00:5f:9d:38:86:44:d5:b5:9b:85:97:c8:7c:9a:46:
5c:71:11:30:c1:90:88:a9:64:dc:a6:88:d2:b2:6b:45:2d:e0:
fa:ac:a4:72:fe:76:49:03:4f:a5:d5:36:1a:d6:10:be:9d:c3:
61:52:8c:5d:5d:05:1d:91:c1:98:c1:3b:0f:11:99:57:eb:73:
99:f8:e3:8c:b1:81:15:d3:49:c4:4c:8a:87:ea:3e:6c:c6:7d:
35:6f:bf:f2:3a:37:e2:32:6e:86:58:51:18:81:f8:28:50:5d:
5c:e2:5c:44:55:66:73:cd:9a:8b:af:3d:5e:59:0d:b4:9c:42:
49:eb:5e:72:cc:53:de:4e:a7:85:f9:dd:2c:1c:d3:00:2c:c3:
7b:30:c7:bb:ee:a9:ea:d4:da:d0:6e:21:7f:ff:b4:e2:1b:b1:
84:e6:29:da:75:cb:6e:d0:1b:31:78:46:32:06:76:28:0d:9e:
f1:c8:94:32:39:72:95:72:69:5d:e2:64:4b:d2:ee:b8:9f:7d:
f8:eb:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:26 2026 by rpki-client