Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: /MhHiuQkceMPeCwmafktMo0BmogVYWg60m1HQ/RfoUY=
Subject key identifier: E0:FC:C5:40:B8:7B:07:85:C6:9C:A6:5E:72:37:D3:54:46:60:93:34
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019D265FF2AF2C82A3D499E541944C1EDEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa (hash: L6OclFsXAbkjxZSlLKINJ4WzPa71QpYW4ACfx2HTL/4=)
2: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: UT9NhTv9mFrTIIWBMlUm82uQnCTINMyAwIuZMKEKfqI=)
3: NUW_ZH_EIIHERuITZzYR2weW90Q.roa (hash: Y1z/FtrJMczt8aV1zB8hcs+HmFMUQfSmWahrrb+QcEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f2:af:2c:82:a3:d4:99:e5:41:94:4c:1e:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=e0fcc540b87b0785c69ca65e7237d35446609334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:d7:03:af:c5:4a:a1:06:ce:a8:07:38:76:
71:63:d6:20:07:01:68:41:7d:fe:a0:5f:52:07:1b:
01:99:12:4d:8b:c3:2a:04:3f:9a:13:6e:d1:67:47:
60:0f:95:bf:aa:9f:31:6e:44:82:fd:d3:c6:d7:9c:
f3:01:13:6d:b0:3d:59:bc:3d:e0:a4:2d:29:e8:79:
0d:1a:ef:c2:22:88:29:74:17:60:d5:36:1c:2e:13:
88:0f:83:f0:c1:96:15:60:44:d2:a2:cf:98:24:1f:
d5:8b:c8:7a:ad:65:f0:0e:d3:fb:8b:07:5e:e4:87:
51:da:8f:bf:d9:af:2d:3f:25:c0:fa:f6:c2:ce:ad:
44:57:56:7b:86:2a:b8:46:68:18:a2:46:7a:e1:01:
44:33:5a:d8:11:1d:12:0c:28:30:ea:70:56:4d:59:
75:78:95:90:5a:fd:2a:fd:fd:6b:d9:2a:85:46:0c:
c0:97:c7:99:d6:91:91:d1:1a:cf:21:0c:cc:31:45:
c0:11:30:4f:f6:a5:d3:b7:d4:b1:f8:15:39:16:ff:
83:48:80:db:f8:e4:02:43:43:0f:fc:3a:8f:a3:8c:
9f:8b:21:97:86:84:32:90:60:59:12:f8:c2:45:c5:
cc:5a:ea:88:16:dc:e9:9a:6b:c9:3d:44:13:e4:31:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:C5:40:B8:7B:07:85:C6:9C:A6:5E:72:37:D3:54:46:60:93:34
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:6a:16:e0:63:3c:b3:22:d7:8a:84:88:f8:1a:dc:0f:90:
9f:d5:a4:ed:1f:61:1a:24:fa:38:dc:53:b6:f7:32:4a:c9:a7:
2d:ea:e2:66:cc:f2:ec:1e:12:f2:f1:04:40:7d:c9:3a:64:bb:
bc:e6:bb:63:f2:33:e2:3b:27:f7:69:57:ea:1e:89:e7:61:1d:
56:94:c0:a8:c9:9b:5e:93:f1:d1:a5:3e:33:a7:69:51:22:fb:
ad:d1:8d:6f:18:f8:1d:83:eb:8d:71:c3:ae:7c:d3:d2:0b:1e:
96:64:2f:a8:e7:e6:52:b5:b3:cf:dd:8f:68:6e:96:0e:e5:db:
5c:2a:23:df:28:a5:f7:3c:29:83:d0:95:c5:28:a1:38:7d:f1:
d8:c1:eb:af:63:16:60:7b:7a:12:47:b4:53:05:fb:2a:85:d5:
5c:cc:79:32:43:83:84:0d:1a:cf:28:d4:85:89:f9:3b:27:c5:
e1:ba:74:27:e9:ac:16:0a:70:da:a1:2e:4d:60:73:ed:c7:fd:
4b:dc:8e:95:09:d4:23:26:89:b7:4f:04:06:f7:a5:db:f4:10:
af:7b:51:85:44:78:73:bc:4d:f1:62:63:c7:12:51:de:f4:c9:
85:f8:ab:f2:ee:de:83:b8:b3:e9:42:72:35:56:65:84:18:3d:
56:9a:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:58 2026 by rpki-client