Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: AX4VkAHfY8inhKT4WYbnDus3xlZQV6FCCnYlF9KqZuo=
Subject key identifier: EC:59:67:26:9A:2A:10:97:90:E2:56:2C:EE:3F:97:8D:D7:D0:F2:31
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019D2696532EAD7DF17368CF51BE15E78ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: Vfdzs5n7rcmjTljUNAOmG8QDUJZX9euU1n5uHKNzZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:53:2e:ad:7d:f1:73:68:cf:51:be:15:e7:8e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=ec5967269a2a109790e2562cee3f978dd7d0f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:dd:c5:ed:b6:df:ad:79:de:97:2b:cb:23:
ad:97:0d:20:c6:1a:13:ac:f9:30:32:28:8b:a1:43:
00:31:61:db:21:f7:0a:dd:78:77:69:87:76:45:9d:
02:47:5e:5f:6e:2f:f9:a9:26:39:2b:2c:08:c5:35:
d4:ed:ed:8e:3c:82:73:e9:fa:95:75:64:87:40:d3:
cd:9f:19:6c:3b:82:29:f1:61:1c:19:cb:fa:b6:d4:
2f:61:f1:88:78:ee:3e:e0:4c:50:18:ef:59:66:8a:
47:6e:26:d3:de:de:18:ce:c2:ee:da:0c:3f:49:d2:
d1:c9:c2:52:6a:94:ef:08:92:c2:fc:1f:b7:20:89:
fa:94:5e:e0:13:2f:c8:7b:97:2e:fa:a0:7f:55:56:
2f:a2:85:6d:98:2d:ed:35:4d:91:3f:b1:5d:fc:b4:
fb:5a:e7:34:17:7d:37:97:e8:c7:ca:3c:d6:72:92:
30:d6:6e:2e:1d:35:ff:e2:88:c9:54:10:60:3f:07:
85:0d:b7:ec:0a:01:f7:b1:7a:58:24:c7:75:38:2a:
73:78:b1:ed:73:a5:30:43:4a:b0:93:89:74:e9:c2:
be:1c:a7:97:46:2c:ea:9f:6c:82:5b:72:1c:78:8d:
09:d5:21:dd:d9:4f:c6:92:a6:0e:1e:ee:10:68:90:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:67:26:9A:2A:10:97:90:E2:56:2C:EE:3F:97:8D:D7:D0:F2:31
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:23:a7:33:32:58:8d:61:36:bd:73:d4:91:3e:59:19:7b:35:
ea:28:ab:49:cf:c5:e0:13:7b:79:50:d0:94:ee:5e:55:b0:9f:
3a:e1:27:37:de:97:10:f1:38:84:39:f4:55:7e:6d:71:e1:81:
47:e2:c7:7c:44:20:37:d9:e5:66:6b:86:80:d8:cd:2f:0f:cb:
a0:84:b9:02:78:31:d1:ea:49:48:9b:39:48:f3:e1:18:b2:a2:
53:9b:23:a2:b2:87:d6:c4:b8:83:f1:95:76:7c:e6:b1:22:bc:
28:93:57:40:84:2b:34:8a:26:80:08:2d:38:27:67:88:b2:b9:
6a:86:81:79:7b:ac:37:66:a1:78:ce:7f:3f:11:14:77:3a:e3:
21:fa:8e:4e:46:86:93:6d:44:77:50:74:d3:a0:55:c5:a0:41:
ec:36:52:51:11:1d:50:70:fd:aa:75:0d:42:30:dc:4d:6e:da:
53:a2:52:f3:93:1e:fc:71:28:b5:4c:c4:63:39:6c:ce:e0:a0:
06:b4:37:2d:12:05:bf:25:b3:f9:1a:3c:43:b7:5d:eb:8a:67:
1d:58:91:23:88:6b:97:a1:e1:3b:34:7a:1f:10:a5:d4:91:9f:
20:ed:ca:11:ac:76:22:1c:43:a0:da:87:d7:24:3d:7c:7b:59:
82:f4:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:58 2026 by rpki-client