Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: Fsxuog2GWjddQnE8aptJPpxRWu1wWGD5pMdZ6oxeAlU=
Subject key identifier: D2:80:FC:93:02:6C:DE:E5:74:80:AE:9C:97:A1:45:F6:33:E8:8F:0D
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019CAD22B1AEF6475A3A6282AC7159B4DD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: XBz8n5jNuaGJxgdO3wvm/81fE746rPq947T9Hw2nvMo=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b1:ae:f6:47:5a:3a:62:82:ac:71:59:b4:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=d280fc93026cdee57480ae9c97a145f633e88f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:9a:aa:c4:6a:bf:56:42:94:68:24:1c:76:
d6:bb:6b:a9:de:12:d9:17:df:86:35:38:81:f5:9d:
40:76:c7:c4:2e:5c:34:a8:0a:23:59:7f:d9:3e:7c:
37:d5:50:19:5d:83:6f:22:61:c6:b8:ac:1c:48:7b:
db:5d:a6:c3:56:22:2b:ce:82:de:60:54:e7:fb:d3:
3c:3a:ff:9d:31:56:dc:bd:3c:89:25:6a:55:be:98:
7c:b3:5d:96:c5:d5:8d:ef:7c:8e:32:57:b7:93:fb:
00:c6:b7:2b:29:99:dd:28:d9:bc:c1:06:dd:62:27:
ed:ab:57:4d:cb:dc:fc:6d:36:60:94:73:db:8c:9c:
da:6c:26:15:b6:ca:da:54:21:d7:b0:a6:31:d8:92:
50:25:15:d2:14:9b:49:cf:a4:c9:db:60:cf:a3:d6:
f2:d9:a6:a0:3a:41:c5:fc:36:19:2c:b1:4a:22:ee:
87:07:21:42:07:ea:5d:56:98:02:10:f1:ec:87:d1:
40:45:5c:e0:d9:72:1d:19:ab:b0:43:ae:6e:86:37:
84:9e:4c:3c:30:08:59:a0:65:24:6b:e7:f1:1a:c8:
ff:8d:8d:70:5a:7b:36:0a:ff:c7:fa:1b:0a:94:29:
a6:f3:d9:dc:c4:67:dc:8a:9d:d3:b3:01:96:20:e3:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:FC:93:02:6C:DE:E5:74:80:AE:9C:97:A1:45:F6:33:E8:8F:0D
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:90:db:cb:19:e1:43:fc:74:39:94:b5:89:f3:f4:d5:23:aa:
f8:17:a6:81:d8:b7:79:8e:1f:f0:d0:14:fb:0c:a8:86:bd:8a:
34:23:e6:cc:2b:10:e2:2e:46:73:b5:0a:77:ea:b1:70:c5:8d:
dc:bf:ae:9b:17:84:ac:9c:8c:9d:6b:31:4c:0d:09:30:ea:13:
52:ec:85:c4:d2:72:bc:e6:26:b9:09:fa:d6:57:ea:19:da:36:
03:cf:15:27:e7:fa:d7:a8:be:a6:4b:77:d1:96:81:eb:da:71:
40:fd:50:16:c2:63:a7:c1:d4:9c:cf:53:d1:89:27:aa:b8:74:
78:e8:b6:6b:2f:31:ea:6d:ce:cb:d7:a4:be:80:15:1f:cf:51:
6f:4b:5b:f3:c8:ea:00:e1:84:65:d6:a1:df:62:66:f3:27:c9:
77:65:97:a8:7c:16:ec:41:d4:1a:6f:01:cd:54:dd:ca:a5:b1:
11:58:41:3c:a1:fd:bd:49:6f:9d:a4:c7:69:56:fa:9f:f9:a0:
3b:20:47:25:bf:a7:b6:0d:30:e4:fc:8d:c6:40:21:29:6f:8d:
39:4a:4a:5a:ed:6a:1a:21:ab:e6:0e:06:c4:e4:6f:0f:fa:7b:
c0:a0:16:d8:52:4c:88:58:39:22:dd:c5:53:9a:74:a2:71:f2:
9d:c1:62:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIrGu9kdaOmKCrHFZtN1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5
Njk2NjkwHhcNMjYwMzAyMDYwMDU3WhcNMjYwMzAzMDYwMDU3WjAzMTEwLwYDVQQD
EyhkMjgwZmM5MzAyNmNkZWU1NzQ4MGFlOWM5N2ExNDVmNjMzZTg4ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zuaqsRqv1ZClGgkHHbWu2up3hLZ
F9+GNTiB9Z1AdsfELlw0qAojWX/ZPnw31VAZXYNvImHGuKwcSHvbXabDViIrzoLe
YFTn+9M8Ov+dMVbcvTyJJWpVvph8s12WxdWN73yOMle3k/sAxrcrKZndKNm8wQbd
Yiftq1dNy9z8bTZglHPbjJzabCYVtsraVCHXsKYx2JJQJRXSFJtJz6TJ22DPo9by
2aagOkHF/DYZLLFKIu6HByFCB+pdVpgCEPHsh9FARVzg2XIdGauwQ65uhjeEnkw8
MAhZoGUka+fxGsj/jY1wWns2Cv/H+hsKlCmm89ncxGfcip3TswGWIOPONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKA/JMCbN7ldICunJehRfYz6I8NMB8GA1UdIwQY
MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt
OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk
LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpDbyxnh
Q/x0OZS1ifP01SOq+Bemgdi3eY4f8NAU+wyohr2KNCPmzCsQ4i5Gc7UKd+qxcMWN
3L+umxeErJyMnWsxTA0JMOoTUuyFxNJyvOYmuQn61lfqGdo2A88VJ+f616i+pkt3
0ZaB69pxQP1QFsJjp8HUnM9T0Yknqrh0eOi2ay8x6m3Oy9ekvoAVH89Rb0tb88jq
AOGEZdah32Jm8yfJd2WXqHwW7EHUGm8BzVTdyqWxEVhBPKH9vUlvnaTHaVb6n/mg
OyBHJb+ntg0w5PyNxkAhKW+NOUpKWu1qGiGr5g4GxORvD/p7wKAW2FJMiFg5It3F
U5p0onHyncFizA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:10 2026 by rpki-client