Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: rNKx1G1M2VTkxt4dk4htwISAzry1ZO8blus2BH4lAlo=
Subject key identifier: 9E:17:07:18:7F:F4:23:1E:6B:28:2B:B7:C1:DA:AF:D9:BA:2D:03:69
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 019D265EF66E0C7E48EFEA0654E710C5D119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 07AC
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: y6hOlsUjEDWfy952itQfM1DECtqSYcv6ddK9qpSsxYQ=)
2: fyr3l71yXyZa0qJKX752horsWVs.roa (hash: 6QW7nNjpNR48gxgLwjjO7J9nPbB82YNsVN3+Wky6unk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f6:6e:0c:7e:48:ef:ea:06:54:e7:10:c5:d1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=9e1707187ff4231e6b282bb7c1daafd9ba2d0369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:85:a6:96:62:b9:4a:a2:a9:bb:7b:ee:6c:
f9:b6:fe:db:bd:4c:07:b2:ae:a6:5c:27:62:e8:55:
d3:77:98:7e:4d:a9:20:83:8e:a0:dd:9b:61:c1:d9:
a8:6f:d6:d8:f5:76:8e:b3:a4:70:cd:54:dd:85:46:
8b:c7:91:ad:c0:99:9a:0d:58:01:35:74:9d:53:c8:
ce:9c:a5:d4:93:13:8e:b4:2e:4a:fe:f4:5b:da:87:
27:27:04:ac:3c:fb:ac:9f:e6:ad:6f:18:77:30:91:
c1:39:7c:78:77:fd:5b:ea:87:32:4a:5a:53:84:d3:
77:3b:47:69:2a:b7:c9:c8:e3:84:91:3c:c0:5f:4d:
d1:27:4c:25:03:9a:1c:04:55:10:64:da:33:bb:5b:
2a:30:ce:4e:4f:b2:00:b8:5c:49:f9:5d:d4:07:a0:
7b:45:e5:38:41:b7:51:78:b5:51:5a:be:ac:92:66:
e4:f2:9b:55:45:a8:a5:83:71:c9:df:89:8a:03:25:
53:b0:20:1a:10:fd:7c:f6:2b:b4:31:04:fb:95:6c:
b5:43:4b:2a:17:7b:f4:c0:37:59:33:ff:d9:0b:ec:
40:fc:cc:5d:4a:00:9e:aa:75:6f:a9:fa:f9:81:e0:
54:f7:58:da:5f:db:31:b6:35:47:31:3d:a0:7d:fb:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:07:18:7F:F4:23:1E:6B:28:2B:B7:C1:DA:AF:D9:BA:2D:03:69
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:dd:8a:4e:eb:ea:ef:ba:ec:88:6a:77:69:11:7e:13:d5:
b8:62:96:90:a6:bb:4c:0d:4a:e8:4e:72:c5:7d:02:0e:b7:9d:
05:5e:27:a7:6a:6a:d0:c1:0c:ae:fa:1a:8f:28:f9:3d:f7:5c:
ae:d7:0e:48:a8:94:03:04:21:eb:1a:e8:8f:51:55:57:1c:17:
fc:fa:f9:7e:70:86:a8:93:b4:32:82:d5:8d:21:6e:ca:8b:7b:
b6:d5:2b:a3:16:b6:17:6f:9d:05:1a:52:2d:64:c8:49:be:d9:
9f:c3:86:26:cf:3f:3f:f1:dc:ba:93:f5:65:c2:89:3b:a9:5a:
2d:35:f5:60:1c:bf:47:65:a2:7f:33:84:97:23:03:07:43:9b:
90:c3:bd:53:24:57:f6:9e:bd:4d:88:af:25:cd:13:85:e3:a9:
d2:38:0d:fc:66:d3:44:6d:54:d7:a9:91:05:22:32:b5:10:3b:
c6:06:29:c7:cd:0d:96:58:1b:9c:84:06:77:87:9a:40:2b:cd:
61:33:85:0a:b7:2a:e7:d7:6f:37:bb:f5:33:e4:1f:fa:49:e1:
2f:53:11:f1:33:b5:ed:53:12:33:0b:8d:df:11:4f:fa:01:62:
d6:67:4a:12:2d:82:3e:c2:af:01:64:95:d0:1c:11:5a:a8:62:
ba:a3:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client