Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: L7i+0+H4diLvGc6CvQfI/j7rlwKReKmQMnuPAhPNSx0=
Subject key identifier: 16:FE:7F:6C:74:DC:80:A6:97:6B:30:A9:4C:44:2F:DF:FD:6D:A5:CA
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 019D27A89CF6E6657B8B85E3801EA0123D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: 7UqWyaj9hLyhWNBeLJTvRkw302EAu4JeQLwwbrksFFk=)
2: z9qeSQqLtFJYAzoPoWqDQVc-rT8.roa (hash: ZbaC8gEUuwDU0zVtTrY3vbSTCq0FecXsOteKoQHF2rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9c:f6:e6:65:7b:8b:85:e3:80:1e:a0:12:3d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=16fe7f6c74dc80a6976b30a94c442fdffd6da5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:94:ea:02:c7:c2:02:d3:c6:8f:a7:fa:f3:
dc:4a:c6:42:d8:70:85:13:78:04:37:db:93:07:61:
1f:59:7d:9d:53:06:71:52:55:7f:58:41:1a:31:28:
f4:dd:4a:92:29:2b:d7:df:2b:92:91:d3:93:5b:aa:
27:8f:5d:64:01:54:73:a5:ac:d8:f9:f9:ed:eb:0b:
17:52:1f:dd:18:da:13:51:dd:32:1a:91:f7:80:8f:
f1:69:d3:b6:50:32:f3:38:30:5e:30:d8:5b:f2:ee:
a8:23:73:0a:29:e0:af:46:a0:54:31:bd:85:2e:ad:
ba:2d:8d:7d:01:7f:2f:d6:f7:bc:5b:45:f3:d4:0d:
8f:d2:47:71:50:98:61:1e:b8:4a:9e:30:ef:a0:03:
29:9a:ba:3c:ad:56:b7:2a:1c:e5:53:59:dc:3f:67:
c2:ae:1f:55:02:fd:b9:cb:6f:97:65:8f:94:d7:fb:
cc:5a:31:e9:5f:97:3b:f2:fa:a1:37:04:7d:38:eb:
f2:11:68:af:0a:ec:48:c6:57:f0:63:6d:e3:79:7c:
56:69:2d:68:13:33:b4:06:84:bc:d5:03:57:f4:ee:
d7:4b:70:47:13:ff:4f:3b:18:58:ed:91:33:e6:71:
7b:d5:12:f9:4f:25:52:de:16:8d:a0:44:18:23:b5:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:7F:6C:74:DC:80:A6:97:6B:30:A9:4C:44:2F:DF:FD:6D:A5:CA
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3c:fa:76:a9:56:19:42:9f:d8:63:a1:0e:80:a1:b8:09:e7:
26:19:ce:29:3e:ef:9a:16:cb:39:7d:34:64:ae:3f:c9:6d:15:
2f:50:de:1f:af:f5:74:17:d6:da:47:5c:9f:b3:8f:ac:e6:71:
a6:fb:ab:6e:c0:26:75:9d:d8:7c:57:09:98:8b:8a:19:4c:e9:
fd:9f:c8:bb:32:a6:bd:0d:f2:93:18:50:32:2f:bc:c8:3d:b0:
63:d3:6f:ac:0d:75:15:11:04:29:29:57:2e:8d:2d:00:db:3c:
8c:66:7a:c4:bd:2f:cd:8c:47:14:1d:e8:18:4b:4c:53:7a:b1:
cb:c2:3e:d7:5b:90:eb:df:21:24:fe:9c:7c:ee:bf:10:c2:93:
6b:71:ff:f7:80:ea:3d:3b:04:47:dd:47:93:ce:9b:ad:e8:03:
fc:06:66:51:1e:be:51:24:13:ea:bc:62:56:fb:15:a1:20:3c:
f4:cb:07:f7:ef:43:da:7c:48:b7:90:0e:4c:e7:b9:c4:44:83:
c0:b1:14:ed:46:36:39:0b:89:0a:fd:6c:0f:25:b4:5c:7a:0d:
69:46:91:5d:cc:fa:62:72:8c:58:ee:3c:a3:3b:97:33:20:d3:
d6:16:da:67:c0:90:c2:85:a8:da:4e:5b:85:f5:08:0e:45:8b:
1d:80:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:40 2026 by rpki-client