Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: Q6MKB0zDUGCAZF53clDQ/Me5mZqu6gioeah/Ylajigg=
Subject key identifier: B8:E0:62:57:44:B6:2B:97:C8:54:DD:B5:2B:2E:2C:F5:CD:8E:BA:F6
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019CAB6AE4234C035DD7CDB8F5560BE5D55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:00:34 +0000
Manifest this update: Sun 01 Mar 2026 22:00:34 +0000
Manifest next update: Mon 02 Mar 2026 22:00:34 +0000
Files and hashes: 1: HDxp4-KB2dPA-NyP02GCjWFt6QA.roa (hash: LTY7QxSQBnngm+poB1EEJ8+hiVTNU5U5ClZkRC7Y7Uk=)
2: TLN5w5cgvT477ocf4zEJnj0eIqA.roa (hash: 30mMiWxAWoWHEx7ZkZVM6NYModzsYLEuwSbsb3IeG3c=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: knWrX5/1/C10zlSJDWj0hgb7frmi0kSHxg2WgCNOBL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e4:23:4c:03:5d:d7:cd:b8:f5:56:0b:e5:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Mar 1 22:00:34 2026 GMT
Not After : Mar 2 22:00:34 2026 GMT
Subject: CN=b8e0625744b62b97c854ddb52b2e2cf5cd8ebaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:d4:b8:d7:90:89:75:b4:d1:02:d9:75:37:
c5:6b:1a:a8:09:ab:5d:2c:64:82:6d:d4:39:24:78:
03:77:f9:54:58:2c:24:7f:28:51:e1:1c:f4:e1:dd:
0c:bb:1f:f9:ac:b4:ec:5b:78:6f:98:bc:e0:12:73:
c3:1b:ba:ae:91:61:15:f9:23:34:86:b0:63:46:44:
94:5c:fb:60:d1:84:15:22:d7:75:9c:54:be:0f:eb:
b0:42:10:ba:a1:d2:17:60:08:6b:4d:24:98:59:49:
4d:c5:74:66:06:e8:fb:08:f6:02:94:21:56:04:ea:
db:86:8b:3f:aa:54:9b:47:e5:eb:a4:23:2c:fc:bc:
aa:dd:d3:79:55:6d:4a:8b:80:3e:77:9a:9c:3a:12:
e8:26:be:b8:c8:1b:b3:79:d1:69:22:bc:1c:04:d7:
8e:fe:b3:46:5f:0b:49:67:20:f9:e9:f8:7c:bd:17:
8c:e1:39:c3:8e:60:90:f2:eb:3f:96:87:2a:71:91:
59:57:84:79:47:f3:c2:20:2e:08:36:78:9b:92:37:
c2:bb:ee:bc:1a:fe:7b:67:89:cb:b2:71:82:0f:77:
34:31:82:77:3a:e1:c4:ba:d4:1c:92:7d:34:8c:e6:
b2:be:5c:e6:24:d4:a2:aa:96:cf:79:f3:55:92:d4:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:62:57:44:B6:2B:97:C8:54:DD:B5:2B:2E:2C:F5:CD:8E:BA:F6
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:c3:ef:fe:c5:9f:4f:81:3d:66:8c:d6:e1:c2:ae:d3:fb:
e6:d7:1d:c5:39:0f:1d:4c:ff:7d:a3:3d:4a:13:99:b0:28:b8:
c6:02:14:c9:9e:bd:dc:6b:c8:19:78:61:4d:e4:05:b7:0f:29:
b6:e3:a0:3f:9b:f7:f0:c4:60:d9:60:f6:92:79:d2:35:51:3d:
9f:87:80:cb:e9:54:a3:56:dd:35:84:ee:e8:d6:37:5d:50:64:
a5:59:be:c7:9e:55:6c:cf:0f:2f:46:3a:19:5d:10:2c:6b:be:
82:9a:64:f5:95:4f:1d:34:0a:f7:fd:27:d3:9e:a4:db:43:9b:
63:1b:c1:3d:55:c5:df:fc:37:16:cb:ec:af:10:c1:75:b1:39:
91:ed:d1:33:87:cf:2e:41:f6:61:ae:84:7c:29:12:e8:94:3a:
db:5a:1a:36:ea:4b:44:7c:f6:0a:75:e1:4f:2b:87:46:ec:40:
8f:08:ea:d8:b4:7d:bc:9f:6f:8f:4d:e9:30:c6:27:22:94:e6:
52:53:57:d3:33:b2:ac:d4:2e:b6:88:0b:f3:3a:bb:cb:3a:f3:
18:02:9b:da:02:94:0b:f5:b8:f1:6b:8b:9e:05:e0:51:8c:ce:
3d:3e:06:82:5d:3f:15:7c:b8:14:fa:ef:6f:85:96:35:d8:14:
ea:c7:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:15 2026 by rpki-client