Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: 9wbtEPQHsIAZ1K2H3SwJoazwjmcpc/KsD/JcwTDf4iY=
Subject key identifier: E7:39:43:25:E2:76:1A:F2:AD:6A:22:84:53:29:DB:FD:92:6E:B8:58
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019D284D804BD33D5855E4D4734807100E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa (hash: P/ftwFa1S2VKjprGcKvJDhqUROD7iDtwsuNt3XMlEQ4=)
2: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: JUeRMrxX+MD/PYKQvFDquWBf2bV3QHb17F6Ux5HYGQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:80:4b:d3:3d:58:55:e4:d4:73:48:07:10:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=e7394325e2761af2ad6a22845329dbfd926eb858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:37:4b:61:43:60:a7:c7:f4:d5:54:05:c9:
0a:75:e4:fb:45:77:14:6f:f9:1c:82:2c:65:db:96:
de:29:20:77:26:c3:3f:85:11:69:d4:37:d8:6d:0f:
5d:24:28:50:0a:ca:18:21:d2:a0:43:dd:b7:96:aa:
d2:84:fb:b1:93:b6:86:2a:d8:b1:2b:0c:2a:76:48:
cc:3d:cb:c8:69:57:07:90:b8:39:73:a8:f5:d4:5e:
fd:1e:a4:91:fc:ee:72:16:b0:74:2c:dd:16:96:63:
6c:87:d9:a8:ce:fb:58:54:f0:d4:63:05:13:f3:d5:
7e:f7:5d:68:01:a0:a5:89:d2:7f:2c:73:f7:6e:7b:
cd:cf:09:4c:bd:cc:e6:6b:c8:c5:b6:e4:7b:e0:1d:
70:ca:db:e3:36:d7:f3:cc:9e:43:60:2c:a1:a6:c1:
28:bf:23:ad:bc:37:ab:68:42:df:73:37:7f:ee:fd:
73:c2:5e:8e:a6:26:f4:81:12:fa:d2:8c:0f:17:d2:
30:55:8a:de:30:4a:c6:81:7e:59:c7:f5:8a:6b:d7:
a0:72:c4:6e:5c:25:c2:95:c8:e2:14:9c:b8:4b:fe:
4b:8e:d3:ba:d9:7a:82:84:c9:48:5c:ca:c5:8f:e7:
4e:cd:55:d3:63:51:5d:4a:09:ff:5c:c2:07:16:ca:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:43:25:E2:76:1A:F2:AD:6A:22:84:53:29:DB:FD:92:6E:B8:58
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0f:eb:b7:27:c8:73:c7:00:c3:58:40:9b:7c:a2:d7:3c:de:
d7:1a:3c:ea:09:f3:18:f7:fc:99:30:ac:ff:d6:ff:44:f0:e4:
ee:c5:a2:d2:35:1e:88:65:29:fc:c3:e1:c2:6e:36:dc:8f:9e:
ff:09:8e:d7:39:74:7b:6e:57:40:cc:69:52:ce:31:1d:7e:f8:
96:eb:3b:58:42:b8:a2:c6:7f:f8:c1:02:5c:e8:9b:00:32:3a:
20:c0:3f:e5:05:a1:7d:f0:83:08:c6:22:f3:16:e8:9f:cd:8c:
8c:ce:d7:5f:34:78:af:26:3a:6f:87:b5:33:1c:d1:86:1e:35:
f4:00:97:1e:dc:0e:ac:41:41:f0:e7:cb:2f:a9:18:30:45:b2:
a1:d9:13:db:ea:aa:cf:61:60:83:a6:ca:62:57:38:f4:bd:95:
38:5a:e2:ba:f4:e4:68:e1:88:ed:67:b0:d4:60:90:30:e7:45:
00:9a:dc:8b:66:ad:6f:a6:69:b4:9f:2e:de:0c:5d:2f:3b:e0:
48:ac:15:47:e5:ae:48:dd:37:89:81:25:69:5e:2c:2b:ae:8d:
f2:94:aa:04:f2:98:b6:ac:73:50:35:53:89:40:a3:b0:d6:a1:
52:83:66:c5:05:03:04:54:bd:21:7b:64:28:37:a3:49:0d:ed:
e2:d2:a3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYBL0z1YVeTUc0gHEA42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl
ZGU3NDQwHhcNMjYwMzI2MDQwMTAwWhcNMjYwMzI3MDQwMTAwWjAzMTEwLwYDVQQD
EyhlNzM5NDMyNWUyNzYxYWYyYWQ2YTIyODQ1MzI5ZGJmZDkyNmViODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvc3S2FDYKfH9NVUBckKdeT7RXcU
b/kcgixl25beKSB3JsM/hRFp1DfYbQ9dJChQCsoYIdKgQ923lqrShPuxk7aGKtix
KwwqdkjMPcvIaVcHkLg5c6j11F79HqSR/O5yFrB0LN0WlmNsh9mozvtYVPDUYwUT
89V+911oAaClidJ/LHP3bnvNzwlMvczma8jFtuR74B1wytvjNtfzzJ5DYCyhpsEo
vyOtvDeraELfczd/7v1zwl6Opib0gRL60owPF9IwVYreMErGgX5Zx/WKa9egcsRu
XCXClcjiFJy4S/5LjtO62XqChMlIXMrFj+dOzVXTY1FdSgn/XMIHFspdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc5QyXidhryrWoihFMp2/2SbrhYMB8GA1UdIwQY
MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt
MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3
LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtw/rtyfI
c8cAw1hAm3yi1zze1xo86gnzGPf8mTCs/9b/RPDk7sWi0jUeiGUp/MPhwm423I+e
/wmO1zl0e25XQMxpUs4xHX74lus7WEK4osZ/+MECXOibADI6IMA/5QWhffCDCMYi
8xbon82MjM7XXzR4ryY6b4e1MxzRhh419ACXHtwOrEFB8OfLL6kYMEWyodkT2+qq
z2Fgg6bKYlc49L2VOFriuvTkaOGI7Wew1GCQMOdFAJrci2atb6ZptJ8u3gxdLzvg
SKwVR+WuSN03iYElaV4sK66N8pSqBPKYtqxzUDVTiUCjsNahUoNmxQUDBFS9IXtk
KDejSQ3t4tKjyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:56 2026 by rpki-client