Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: VMorAsVTa8u4BMP8JUoizAfUBYAa2pfcbhf8HsML/GU=
Subject key identifier: 53:F0:2B:6B:5B:34:88:4D:4E:A1:8E:70:32:71:A4:18:0C:7E:2C:DB
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019D9AABFD0B7C7BE13313B0C056EA67B79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: OqlOAjSf/IkeLj7MQ15I+JUM6F7C/HlxHVsjGSzKWNc=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fd:0b:7c:7b:e1:33:13:b0:c0:56:ea:67:b7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=53f02b6b5b34884d4ea18e703271a4180c7e2cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:39:0a:21:84:f1:53:4d:50:7a:34:13:12:
22:94:ee:75:7f:f6:5d:02:60:34:34:7a:20:b8:9b:
c4:7a:d4:e1:46:89:b3:36:f3:7c:ca:55:09:c2:20:
b8:6e:a6:15:76:b6:a4:c7:1d:9a:ee:fb:86:39:94:
6b:cd:66:f0:a6:1a:8c:b5:ee:57:34:08:60:df:7f:
60:ec:7e:63:af:5c:23:f0:5a:b8:28:65:e5:49:a9:
af:e4:c3:30:36:63:69:cd:83:5f:c5:44:f2:ad:21:
15:b0:07:38:ed:51:dd:be:25:b3:7e:cf:1e:a3:5c:
8a:86:0a:ed:64:62:29:4f:4d:3f:9d:7e:59:ec:7a:
82:d6:df:e2:e5:21:3e:1a:b2:7e:84:31:2e:f8:da:
52:6d:44:7b:20:d0:3d:69:89:c8:d2:b0:e2:10:75:
b8:85:24:0b:fa:01:3a:59:bc:00:09:ac:c2:45:5a:
62:7f:75:6f:20:85:04:b0:b3:cc:3f:3a:71:88:ca:
1e:24:32:e8:41:f9:9c:bd:9d:54:1a:ce:12:c6:2e:
66:d2:8b:a5:ad:57:b8:9f:1f:00:d0:50:f2:05:bc:
eb:5c:5d:cc:63:4a:e2:c5:c6:54:25:77:63:f2:a4:
42:97:71:c1:0d:be:a1:23:09:4d:ca:47:1e:15:30:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:2B:6B:5B:34:88:4D:4E:A1:8E:70:32:71:A4:18:0C:7E:2C:DB
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:c0:0d:8c:ee:8f:6b:db:6d:c1:96:42:27:6c:e0:ce:6c:
6a:6f:2c:92:27:ef:1f:3e:b3:e8:6b:fe:7a:32:f8:92:3c:56:
07:56:b1:5f:e1:3d:29:4f:5e:39:53:9e:3d:cd:dd:7a:24:53:
fd:a2:f8:19:b0:26:34:99:99:0d:6e:2f:af:51:96:c6:ff:61:
8a:7e:af:e8:dc:d6:73:4c:9c:38:20:b8:ec:17:76:74:f8:bf:
97:b2:a3:ab:a6:e2:7b:7e:11:95:08:23:64:dc:1f:68:15:50:
3d:3e:aa:3b:66:fd:97:da:87:d9:5b:a3:16:ce:7e:ae:e2:f5:
10:bf:08:2f:56:57:04:e1:ab:c5:0b:15:af:05:5a:e0:7d:69:
50:11:64:bf:c3:b0:76:35:8a:c7:91:ac:cc:9b:25:2d:c4:b0:
0f:b9:df:22:4a:0c:fe:a7:17:57:26:2b:e2:7b:1e:93:4b:82:
9f:93:e7:3d:61:33:48:1f:cf:8a:ef:9b:b0:2b:59:51:0e:f6:
50:73:e2:38:4a:f6:62:bb:00:9a:16:bb:c3:85:09:f9:a8:46:
e6:a0:a6:d1:be:0b:8f:46:08:15:97:70:19:c6:ba:5e:f5:44:
35:8d:29:3b:ad:8a:ad:18:69:95:99:59:f3:58:b7:9b:8e:7e:
cc:93:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:45 2026 by rpki-client