Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: ePHIwguTibzQznrrgrnRGY6qDXq+POTDY9POiFlH84c=
Subject key identifier: CC:65:DA:CC:CB:37:42:FC:CD:9E:1F:4D:3C:AF:C1:50:31:5C:E5:BD
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 019D27A93FF2BCD87B53BA2B56B687EF0186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 15C9
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: eUG_AmjvEk2Uh9jdu3zrIDZcE_M.roa (hash: crSLoIhk/emALC03/EeOK1gvgnibfibC83SpQwGH7wc=)
2: hAHPjweyfzEmZctOAqBgVej6D9Y.roa (hash: hZD266S3QeLuF8KPvtFtT0P+a47oHHfhQQOsd40VTSc=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: ytmDPsiLnEKr2CX7o2R6Vq8G6Zur6j7THWZx0Iv6FGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3f:f2:bc:d8:7b:53:ba:2b:56:b6:87:ef:01:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=cc65dacccb3742fccd9e1f4d3cafc150315ce5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:f6:6c:98:12:a1:e8:75:b4:39:9d:3b:35:
a6:44:58:9e:84:96:97:a2:57:32:ad:89:32:7e:6d:
b2:0e:00:71:df:be:a4:d6:94:82:88:ad:01:f9:fb:
ef:02:29:fa:aa:79:ee:27:2e:e4:3c:dc:20:b4:55:
e4:24:16:f5:18:0c:03:5b:da:fc:a1:d1:1a:c6:d7:
f7:55:f2:8b:db:1e:d5:df:01:06:39:9f:cb:28:d9:
b1:3f:76:d5:a5:a6:2b:ef:f9:71:d2:9a:ed:0d:68:
c9:5b:6b:32:f6:2b:c5:23:98:34:5e:d4:d0:aa:c0:
58:97:25:4e:c4:16:2a:85:a7:48:7f:7f:be:a4:a2:
0d:0b:be:f1:c1:24:91:d5:20:3f:7a:e6:2c:ae:13:
50:4e:18:d8:64:1e:65:a8:eb:df:4b:4c:fd:de:a8:
ca:85:85:0f:d2:d8:92:c1:d4:74:a9:d3:40:5e:d6:
f1:9d:cd:91:04:07:62:c6:30:f3:ed:0d:b9:ad:06:
48:7e:dc:13:3b:3f:16:f6:15:05:3f:24:fe:af:04:
e9:4e:4e:30:79:a9:16:4c:d3:1e:1c:15:9f:99:98:
50:c7:09:8d:97:77:1a:d7:74:68:c2:a4:2d:7c:9b:
58:ce:20:57:2d:de:b6:5d:24:51:84:73:db:9b:de:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:DA:CC:CB:37:42:FC:CD:9E:1F:4D:3C:AF:C1:50:31:5C:E5:BD
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d0:c6:cb:9b:bc:0c:e0:d9:2f:6e:d2:62:76:14:ed:88:26:
7f:50:80:3f:a1:ec:74:bc:07:21:14:f7:9c:6e:56:a4:0e:5c:
af:49:af:e7:ec:fd:c1:a4:d0:02:43:ac:af:7f:50:23:9e:78:
3b:d9:f4:41:b6:84:27:f7:9e:ba:72:7d:94:76:63:30:c9:b3:
88:a6:68:c4:aa:ac:7b:8b:03:a5:86:f3:87:08:42:e6:5f:bc:
14:e2:e5:eb:9c:11:dc:a3:22:71:74:d3:5c:97:38:3c:45:38:
d0:00:07:e0:0c:20:9f:4e:ed:1d:f9:a0:7d:a3:4f:0d:90:ff:
51:ee:c2:e5:50:1a:82:54:d5:e1:5a:db:ca:2e:07:13:a2:09:
14:4c:be:3e:5b:bb:1b:05:a9:b6:31:3e:8e:6e:bb:b4:28:f3:
68:18:0b:0f:82:ec:c0:7c:39:aa:12:46:a0:20:7b:cc:30:a5:
17:42:91:53:9d:10:5e:c9:9b:0e:a2:43:43:da:40:e9:a8:34:
91:42:1f:f9:1c:95:a8:72:07:89:00:43:61:d1:68:a5:e1:3c:
5c:c0:e1:74:3c:24:f0:50:5a:cc:3c:9d:f8:bc:1a:36:6a:56:
d4:5e:79:00:bd:39:66:59:b2:0e:41:5b:e9:b0:a2:23:79:25:
66:80:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:27 2026 by rpki-client