Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: FLJwcEsKvTMEASPcEL8qkaB5U86zvvBS/37MoT6C7rs=
Subject key identifier: 85:2E:30:96:2D:DB:E0:7F:4D:74:FC:89:07:53:8A:51:39:36:DB:A7
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019CA9EB15A58CF80754ED3D0FE3F93A68BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0B82
Signing time: Sun 01 Mar 2026 15:01:21 +0000
Manifest this update: Sun 01 Mar 2026 15:01:21 +0000
Manifest next update: Mon 02 Mar 2026 15:01:21 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: 4wo+zl3uAaUBnGc64P5T+283KH9TRb+lPOmeiqA073M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:15:a5:8c:f8:07:54:ed:3d:0f:e3:f9:3a:68:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Mar 1 15:01:21 2026 GMT
Not After : Mar 2 15:01:21 2026 GMT
Subject: CN=852e30962ddbe07f4d74fc8907538a513936dba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:ff:97:f7:40:12:88:f2:dc:2d:1c:d5:c9:
03:6f:f8:78:18:a8:fa:66:60:3b:33:7d:7c:2f:8a:
4d:e7:60:3c:0b:ce:ad:80:e8:cf:d0:4f:a5:0d:ee:
ff:d2:9c:91:ca:b2:b7:57:21:58:17:da:f0:af:4b:
86:ce:6b:74:b6:6f:02:f3:28:da:56:c9:df:ad:76:
b8:20:13:ed:e4:43:1b:f9:3e:04:25:be:a4:da:a2:
9d:b9:70:37:76:d6:49:e7:8d:23:dd:fc:3c:03:11:
97:98:6e:10:70:3e:89:d5:82:ab:04:59:4f:e0:55:
7f:3b:7d:93:5c:60:77:3b:d2:ee:6e:7d:e7:83:41:
5f:c3:22:1f:2e:7c:d6:c0:30:44:87:90:1c:04:27:
83:e4:2b:b1:35:2f:68:c5:fa:7e:c0:c8:00:95:96:
f1:9c:70:ef:d8:9c:c8:c5:7d:47:69:6a:19:cf:e2:
29:56:19:4b:0e:51:d2:bf:fd:1e:24:cd:ee:d2:2e:
39:9a:05:94:21:54:de:97:71:18:f7:e4:fb:5b:68:
45:dc:96:93:42:8c:45:83:b3:66:e6:11:a5:db:28:
8f:eb:55:58:21:16:2f:e6:ee:c5:bb:f3:02:79:46:
44:65:df:c0:1e:76:77:ca:4b:bd:d6:1b:b5:8a:fd:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2E:30:96:2D:DB:E0:7F:4D:74:FC:89:07:53:8A:51:39:36:DB:A7
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:79:62:91:c8:a7:ee:ff:15:e1:ca:31:36:b0:64:d9:a0:
06:aa:bb:08:80:a7:39:12:32:62:b4:29:f0:b1:a6:76:09:ef:
ad:67:04:a4:87:29:e7:01:df:66:a1:cf:52:e6:3c:46:82:8d:
df:f8:d4:58:4c:3d:58:cc:26:ab:d7:ef:9f:73:ae:ce:d0:a8:
96:01:e6:66:84:6d:90:32:f0:30:00:c9:e7:64:cd:5a:93:0b:
05:79:0a:b2:06:15:c0:ea:aa:80:73:dc:ce:0d:7b:4c:ba:c9:
76:75:4f:23:ca:00:4b:e6:76:c5:d4:57:f2:a0:5c:ea:37:7d:
cb:dc:8d:b2:c3:92:6e:b8:f0:4a:c3:ba:5a:0f:75:dc:62:4f:
72:00:e8:be:e3:d4:50:dd:c2:a4:20:f7:95:42:d5:65:19:14:
a4:e3:33:af:f6:2f:98:46:34:0d:94:06:19:23:d9:24:1a:4f:
47:e0:bd:c2:c9:dc:ba:03:aa:54:b2:7b:ad:3e:01:47:43:ab:
ad:73:ef:e9:3e:7c:55:2f:87:0a:ee:ad:39:84:1e:e1:26:d3:
e1:4a:fc:cc:7b:8b:88:94:3b:d9:00:4e:bb:4a:6c:7d:21:c6:
1f:22:32:96:27:e1:8e:cc:36:71:fe:8b:b5:5b:61:3f:71:bb:
16:36:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:36 2026 by rpki-client