Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: nZgr5/oPQv/az01eFFKQ0BfhYcQT1nHPY678Eg3xRrs=
Subject key identifier: E2:B3:17:81:AD:1B:36:20:27:46:8F:DA:CD:12:37:13:85:27:6E:4E
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019D27E0240702F241E717CC11CA9C77DB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1665
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: AO06uJHkVshYcEPLGfhX8Uw9gpc.roa (hash: 5SvwdBIYhvyrwzSR8AKYSXgpfbX0MUkDamcTaTo4pOY=)
2: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: Z4jAp93NpYV9mCaMKUbgNTi/pOwb/VEY5mXGR8YiNfs=)
3: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:24:07:02:f2:41:e7:17:cc:11:ca:9c:77:db:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=e2b31781ad1b362027468fdacd12371385276e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:9e:dd:9c:87:bd:71:a9:4d:6b:a1:e8:f5:
5c:69:52:b0:96:d1:ed:bf:91:0a:70:8f:52:5b:96:
56:51:d4:16:7e:bf:72:18:f8:47:8c:38:22:7f:c0:
67:c5:8e:88:3e:fc:e8:88:8a:c0:d0:5e:5d:32:f7:
ec:38:22:bf:68:52:2a:49:c6:95:6e:d1:cb:1d:7e:
9c:39:24:f2:a6:e7:e3:12:c1:bf:0c:bb:32:93:d6:
45:ee:30:25:e9:8a:10:de:3c:9c:67:f5:9c:0d:7b:
46:40:87:0d:4a:b3:00:16:61:bb:a5:86:aa:46:b4:
27:c2:0b:b8:bc:14:c9:62:bd:43:96:57:a5:0f:9f:
cc:ef:65:ae:70:fe:7b:44:2e:7b:a6:ad:72:59:d5:
6d:d2:92:df:b8:b4:2a:9d:3f:a0:de:e2:12:86:68:
f2:05:0b:39:96:0f:37:5b:0a:dc:7a:9c:0c:a5:2b:
b4:58:51:64:96:1f:6f:9e:ca:1f:80:9d:b9:6c:87:
d6:8c:df:2f:0a:67:fa:11:91:b1:42:94:9b:8d:0d:
8e:b0:f7:e6:6b:6d:b4:df:94:4c:62:0c:27:fc:f6:
80:2a:30:f2:2a:5b:fe:1e:84:7a:c8:8b:f9:4b:bf:
6d:5b:d4:91:d3:af:c8:0f:5e:06:b2:f4:e5:69:bd:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:17:81:AD:1B:36:20:27:46:8F:DA:CD:12:37:13:85:27:6E:4E
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:40:e1:56:8c:a3:79:0b:c4:e4:75:f6:ea:2f:06:66:8c:71:
65:32:e8:f3:ab:0b:ab:4e:93:bb:67:d0:3d:4c:8f:30:83:77:
d4:b8:ab:1f:bb:6a:26:7a:3b:4a:e2:20:65:09:0c:79:20:46:
57:7e:ac:93:a2:bd:40:96:fe:5c:4c:a7:04:40:38:37:ff:5d:
04:3d:cf:1a:b8:f5:86:fc:01:3d:44:a9:7f:ba:81:9b:72:83:
54:3f:f9:80:35:e9:95:92:54:ad:0d:f3:01:f8:82:64:38:66:
47:e8:70:13:64:cc:47:9f:66:d0:38:fa:f2:80:a2:21:89:89:
1b:f8:7d:20:1c:a9:79:2e:d3:58:74:b9:52:59:c4:86:34:87:
53:77:ab:68:9e:f9:c1:0d:14:06:c9:3e:8f:39:ae:ba:6d:83:
d4:7d:7d:31:8b:28:55:71:8e:aa:eb:8f:86:a8:82:83:d5:70:
4f:cf:08:e1:a8:4c:a9:12:d5:51:21:91:2a:85:fd:cf:89:2f:
11:28:5a:4c:2c:b8:5d:3f:f2:69:2b:f1:8b:94:7c:89:13:aa:
bb:c9:7b:1c:04:1a:07:31:ae:3b:05:40:f5:79:0c:84:83:8b:
6b:fb:4e:81:04:d2:b8:76:15:06:d7:1e:ff:59:00:05:02:5d:
9a:be:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:44 2026 by rpki-client