Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: nKuj4MeJIbUZqmLAz51WWjmICEx1sx6Au+ejwEPUfzM=
Subject key identifier: D5:89:D3:83:C8:9E:71:B6:74:7A:C0:3B:57:9B:BD:D1:4F:1B:63:A5
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019CAC4794FC2AB9253771812CE0EED6F7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:38 +0000
Manifest this update: Mon 02 Mar 2026 02:01:38 +0000
Manifest next update: Tue 03 Mar 2026 02:01:38 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: LCWrQudkXvDiuIQNjFDH9H1UMitCOEYgdjT3PVHk7dk=)
2: QR9wcx2L71SKEtutJS3_6RZ2qBM.roa (hash: jMtzB+uj9QQoD07qr0k17Wvt08fncaVh2dRnLEBazkA=)
3: kJniZJ6iZYXidYzcJA4ZBySrhb4.roa (hash: IPJtJpbvrKU2IYcfqcSW/SQBNcuNJehfDhscEcl6bto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:94:fc:2a:b9:25:37:71:81:2c:e0:ee:d6:f7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Mar 2 02:01:38 2026 GMT
Not After : Mar 3 02:01:38 2026 GMT
Subject: CN=d589d383c89e71b6747ac03b579bbdd14f1b63a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:13:51:1d:a9:a2:34:95:d0:1b:62:8e:f5:
89:7c:3d:31:24:57:55:77:11:75:d1:84:fe:7a:51:
8a:55:24:88:eb:d8:c1:16:94:e1:13:c6:3d:e2:b3:
3d:42:36:de:c9:3f:2c:5a:eb:d5:e2:6f:b6:b4:12:
b9:40:ec:64:5e:21:93:cb:c7:e7:87:cc:ec:b5:ac:
12:96:da:46:2c:dd:16:2d:22:59:b2:ce:c4:c0:39:
48:78:ce:a0:90:76:f8:fb:90:25:e7:a4:4e:df:98:
7e:2a:9d:32:43:13:bc:4d:a7:42:f5:b7:04:10:ce:
3a:51:10:a4:21:9a:6e:b6:cf:c5:37:3a:d6:bf:f7:
7d:5f:5e:79:08:16:ae:a8:30:2a:90:e2:68:5c:70:
63:42:ba:98:f2:e4:12:c4:c3:3d:c7:9e:ae:dc:7c:
ae:a5:0f:83:f3:27:0c:24:bc:78:b4:91:ae:8d:92:
f1:c1:09:ff:07:35:c1:13:26:ff:a9:52:9f:d9:2c:
55:84:0a:1d:89:b0:ad:60:c4:d1:67:55:c0:2b:40:
e6:fc:3b:e5:d5:24:a5:a4:38:0c:99:4e:a5:5e:60:
df:b6:06:3d:95:5a:57:da:dd:ad:29:0d:ef:f7:b6:
0b:d1:eb:fd:1a:a0:18:bd:2d:8b:57:86:90:3c:7c:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:D3:83:C8:9E:71:B6:74:7A:C0:3B:57:9B:BD:D1:4F:1B:63:A5
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:00:d2:21:54:a8:0d:ae:a9:68:8c:b7:b4:24:54:44:88:
de:72:07:a8:1a:d4:9c:ef:e1:5a:16:08:24:02:ad:27:17:cc:
ca:d0:09:9d:b0:b0:91:4f:2f:3e:6a:96:84:2e:b5:60:56:02:
4f:f6:43:71:d6:51:03:ce:d2:63:c6:d4:10:50:92:48:b0:d2:
41:71:90:dc:65:e1:01:87:8b:8e:81:17:63:e1:99:22:5a:9f:
92:b8:5b:93:31:b2:d4:42:90:4b:d1:70:31:f5:b2:e5:c2:72:
45:63:c9:76:4a:89:ed:12:09:6d:88:f7:17:bc:9c:a9:4f:89:
d1:12:dd:0a:10:87:7b:78:ea:42:26:df:a4:1f:63:de:17:0e:
ab:26:45:2a:be:5f:78:a4:3e:17:13:54:2e:c5:d2:f1:94:c8:
e8:fd:2d:15:08:23:d2:19:31:a5:ba:54:86:00:3b:b7:c2:30:
c8:ac:39:e5:70:16:df:c0:04:b6:14:78:a6:eb:44:0a:7d:80:
28:45:73:cf:03:dd:18:a2:40:43:ca:2b:c1:2d:48:86:c5:d8:
2a:48:3d:23:7c:c3:b8:5f:e2:51:ae:ff:b4:35:b9:aa:ff:de:
14:f9:d9:90:92:ed:b2:69:eb:1a:32:8d:9a:de:c0:cf:eb:0e:
55:4f:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:51 2026 by rpki-client