Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: dkgVF+FnkZezLVIZSzPYqfmvkn5Xqvad7VEXr3TzwLQ=
Subject key identifier: 34:83:F2:AA:D9:9E:3C:19:C8:80:23:1D:E3:B7:B2:98:EF:30:9F:0B
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019D25BA83177374B659B0C9B9575221288D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 151B
Signing time: Wed 25 Mar 2026 16:01:13 +0000
Manifest this update: Wed 25 Mar 2026 16:01:13 +0000
Manifest next update: Thu 26 Mar 2026 16:01:13 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: ApK6++Cj5L2xPyInoaR/i12++CSR9yi2EyPPhSZriro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:83:17:73:74:b6:59:b0:c9:b9:57:52:21:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Mar 25 16:01:13 2026 GMT
Not After : Mar 26 16:01:13 2026 GMT
Subject: CN=3483f2aad99e3c19c880231de3b7b298ef309f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d6:ce:70:1f:45:27:6b:4c:85:bd:42:6a:8f:
2e:7d:c7:e3:31:3b:2d:43:8f:ca:1d:39:36:f1:3c:
f3:49:7f:7e:22:bb:9c:c0:9a:5a:59:65:a7:a3:14:
19:9a:58:29:96:72:10:29:41:01:5b:48:4f:7b:14:
b2:ca:be:40:63:f5:74:52:3f:ba:d8:f8:de:09:84:
dc:2e:03:36:8e:52:50:21:88:44:bc:92:99:ae:1b:
9b:12:bc:72:fe:23:04:05:c6:23:35:d7:a0:d2:07:
f5:15:e0:19:ac:2d:ce:ab:2a:c5:b2:34:4d:69:4b:
52:4a:a2:94:c0:6d:70:9e:15:a1:d2:08:c3:7f:21:
a0:51:8a:46:4d:1c:e8:c7:3d:e5:71:8a:b4:fd:7b:
42:5d:2b:01:21:d8:c1:3d:fb:91:5c:57:10:2a:07:
7c:39:ed:cd:88:4c:f7:91:5a:8b:7c:38:83:52:7a:
b1:65:6c:ac:b3:05:4b:3d:a9:e1:1f:bb:fd:5e:b8:
92:1a:ac:af:96:ab:aa:c6:ca:b7:ae:ed:e7:49:e2:
de:5b:e2:f2:36:50:7a:d2:fe:bf:50:1e:8f:29:dc:
72:af:9c:fd:7c:92:b8:6f:fe:16:aa:7a:4d:92:1e:
b3:ca:b5:6d:6e:33:d9:5d:c9:be:5f:be:df:55:75:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:F2:AA:D9:9E:3C:19:C8:80:23:1D:E3:B7:B2:98:EF:30:9F:0B
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:57:53:4b:13:54:62:a5:70:72:37:1c:b9:5c:c3:3a:d1:35:
40:bd:79:c3:19:23:64:9e:d8:d9:ff:1e:8d:72:b3:b5:fb:eb:
b2:2b:d0:67:e9:23:45:32:41:e9:e1:da:c1:b8:d5:e7:bc:3b:
a6:c1:b9:7d:81:57:4f:75:2a:21:bd:81:24:eb:d8:66:25:c4:
9e:a4:a4:f5:1d:3d:14:ca:78:9f:ce:d3:e6:18:53:05:03:be:
fe:29:01:d8:55:c6:e2:6e:6c:6c:c6:6b:87:e5:2d:16:70:c8:
a9:c1:99:a3:36:34:c1:96:78:4b:61:35:42:0b:7b:da:2b:ac:
a1:da:24:3b:9e:2e:7b:3c:46:01:ea:a8:2b:84:23:d1:f2:7c:
20:6f:ae:fd:13:05:ff:02:41:52:a1:d9:e8:a8:69:fa:bb:51:
97:06:ed:96:af:16:be:4d:36:78:ae:51:8b:af:89:d8:21:33:
90:4b:60:41:d7:07:f5:d7:24:71:04:8a:15:f9:68:8e:4e:ac:
82:2c:c3:d6:75:93:5c:70:eb:e8:93:f3:c9:e4:b5:ed:90:81:
b6:c8:a4:06:0d:30:2b:c3:1a:5c:88:0e:b5:71:6f:ec:33:f4:
82:3c:2c:93:36:e7:fd:ea:4c:e4:eb:3a:44:1a:09:b5:eb:49:
50:3a:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:57 2026 by rpki-client