Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: TDe4HSO5iZJ0X8JxgxHvMzxuDbMudPLToUYMqmiY64U=
Subject key identifier: 92:4A:5F:CC:71:34:CF:8E:BB:67:A4:BC:5E:E2:D1:0C:A3:FB:B9:2F
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 019D265F92F3B356CAF5C2AFA4E7D2FDB017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: irkc21f/9zDeGu0EA1igqWKTYYfecEhsr9aRmDRutbM=)
2: wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa (hash: CzTKoLpU+KVC67tkElsOnwd+vAA1NZMBJOWkm7nD350=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:92:f3:b3:56:ca:f5:c2:af:a4:e7:d2:fd:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=924a5fcc7134cf8ebb67a4bc5ee2d10ca3fbb92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:65:27:23:31:43:a1:3a:5e:d1:67:63:ec:
4c:3b:57:35:93:9a:34:28:d4:2d:3a:f6:db:52:a9:
f7:81:f6:5d:69:8b:0e:55:2c:22:62:58:d2:2a:4e:
2c:10:e2:67:fb:b5:7b:1d:6f:31:f8:a9:3e:1a:3d:
f1:15:75:f9:f0:0f:b9:7c:da:84:ec:f9:11:c4:2f:
f0:75:28:b8:ff:58:0f:8d:74:ac:e4:21:26:54:47:
aa:84:cf:cd:3f:da:a4:ee:32:d0:2a:24:a0:f3:b2:
17:14:58:fa:13:25:59:6b:e0:41:9b:db:0e:cf:6c:
0a:9a:dd:dd:6e:6e:76:85:ab:39:f6:26:6b:61:4e:
53:73:e8:8b:fa:2d:20:29:ab:14:85:53:61:fa:05:
55:b4:6b:c1:ee:68:6a:df:80:d0:e2:27:8f:70:c8:
a1:a3:11:42:e9:d0:1a:07:37:1f:4c:9e:c8:64:69:
fc:b8:b3:1e:b2:40:61:ff:fb:e5:0d:fc:c2:e1:b4:
60:46:33:a8:d4:27:50:b9:70:72:04:3a:70:be:85:
cf:ce:1a:59:cb:72:98:7f:85:8c:11:2c:99:fd:9b:
03:3a:45:94:a2:e2:ba:51:22:af:f1:b9:b2:1c:0d:
82:1a:89:a3:22:b9:6a:c3:bf:72:72:d6:23:11:b9:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:5F:CC:71:34:CF:8E:BB:67:A4:BC:5E:E2:D1:0C:A3:FB:B9:2F
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:27:cc:5e:9e:90:74:c8:53:f9:0c:40:c6:e2:fc:0a:c6:9c:
8b:b0:5b:c0:47:52:b0:99:5a:0e:cd:85:15:df:2d:e5:8d:32:
2b:d6:7c:c7:7f:54:b3:dc:59:00:7c:f4:a9:b8:30:db:61:6e:
a6:1c:5c:63:d3:a3:7c:bd:d0:04:c3:43:5a:a2:6c:92:02:5f:
f6:fb:f9:77:53:fa:4a:95:13:9c:4f:f3:29:ff:22:58:ab:ef:
86:36:f9:08:f1:c4:32:96:e1:3d:71:65:4c:de:c4:9c:79:26:
83:85:6a:73:42:3d:42:58:27:7f:14:7e:04:03:f0:bc:76:d7:
09:3f:38:15:6f:68:07:60:6a:12:db:53:21:cf:26:28:ac:23:
f0:d6:18:d0:93:c4:33:7c:34:d3:46:de:ff:f0:93:e4:e8:b5:
c0:b4:96:21:4a:59:03:1b:7d:a6:40:c3:6f:89:ad:68:0a:80:
e1:70:16:8d:da:18:ca:96:23:c8:77:86:e9:21:07:ae:1d:b2:
6e:dc:a2:31:47:69:aa:eb:a7:b6:60:2a:4e:73:58:b6:77:27:
89:3d:39:b7:10:e2:fd:6d:ec:2e:b5:fe:a2:a0:c2:36:20:e0:
b6:52:fe:4f:a2:9c:65:37:03:5c:36:37:b0:fe:22:24:6c:76:
7a:6a:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:49 2026 by rpki-client