Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: vWoy8THKkec/oXfQ9wk5Rfm0v7hCD2OokQi6QUg+RPE=
Subject key identifier: 80:91:F2:F1:F0:E2:23:47:E3:DC:14:E1:05:9C:FF:46:F0:D6:87:F1
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 019CA9B361F3F379E2C88B7CE3F8FBAEC4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:31 +0000
Manifest this update: Sun 01 Mar 2026 14:00:31 +0000
Manifest next update: Mon 02 Mar 2026 14:00:31 +0000
Files and hashes: 1: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: ySsrnE6+9kfAcA9nr5AFDWZJPceMurcv0tKti/hTeRI=)
2: Yuog9y8JF_gUyOtwmx2LA41kaSA.roa (hash: bgBtmLlCdZ3iz8t6uBn4uo/dQZySgZ2naQr/qUoBKkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:61:f3:f3:79:e2:c8:8b:7c:e3:f8:fb:ae:c4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Mar 1 14:00:31 2026 GMT
Not After : Mar 2 14:00:31 2026 GMT
Subject: CN=8091f2f1f0e22347e3dc14e1059cff46f0d687f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:55:07:e7:83:14:c0:a0:fc:7e:70:ff:66:
c7:64:11:ed:98:f4:51:ed:a8:de:2a:7c:9b:1c:4e:
69:2e:22:51:b4:e4:04:02:a1:d8:07:9d:c2:ad:68:
09:a2:14:47:38:20:ef:e8:2c:70:f4:cd:b4:e8:79:
50:33:9f:7b:21:f3:90:ef:26:cf:1d:7b:38:f4:85:
5e:4e:8e:f5:a6:5b:d8:fb:1d:05:f4:77:24:e6:52:
ea:7d:06:26:8f:10:e2:7c:16:2a:ed:61:af:14:40:
9f:bc:5d:b1:6c:c0:a1:e0:7b:57:4b:19:ce:92:da:
04:2b:6a:7b:0f:9b:df:93:6e:ee:b6:1b:c8:14:0f:
d0:a7:c4:d6:e4:7a:32:d6:a6:c7:20:e4:0b:1f:60:
0f:0b:55:f4:dd:f4:35:5f:ff:69:bf:a0:85:80:50:
fa:99:66:43:e3:c3:59:14:0d:1a:13:dd:f4:75:fb:
73:07:86:7c:20:de:e0:47:fd:97:76:32:94:fe:76:
f4:ad:f0:30:ad:dd:09:9c:15:4c:ef:38:b6:ad:8b:
43:15:95:41:76:e6:79:df:10:ea:6a:3a:e1:90:73:
06:e5:d6:c7:44:7c:98:4b:c8:38:50:1c:12:20:62:
13:17:bd:b1:b2:18:57:d3:64:3b:8e:08:6c:dc:b9:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:F2:F1:F0:E2:23:47:E3:DC:14:E1:05:9C:FF:46:F0:D6:87:F1
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:18:ce:ce:0a:14:c0:d5:8e:01:e9:3f:62:0b:d7:2f:e2:cb:
96:f4:3a:c3:07:f3:9f:22:4b:60:e6:c7:4b:0e:b0:dd:ea:ff:
9a:cd:04:dc:84:b3:fe:e8:fa:38:ca:4e:f9:e6:c5:2d:dd:df:
54:07:08:40:b9:71:f6:50:59:51:94:29:ac:54:d4:9c:03:1d:
0a:d0:d7:1c:f0:6d:9c:5c:e9:be:62:29:0b:80:3e:46:30:63:
6e:c7:d4:e6:ed:d1:b1:e5:1f:f0:ee:10:13:bc:dd:68:c7:94:
32:f5:b0:78:95:69:4d:b7:0e:75:e9:8c:37:42:c8:43:4b:ab:
6d:e6:aa:ba:e0:1e:8d:22:ff:c1:fc:99:c5:4f:68:3c:c0:bf:
2d:3f:24:65:fa:12:db:90:24:95:ce:b1:d7:79:f4:09:10:72:
73:90:d3:cc:4f:23:57:4f:94:20:7f:31:dc:97:71:cc:91:07:
68:36:ad:c3:ab:1d:47:de:2e:5c:c6:19:50:56:90:c8:86:0f:
9b:af:40:11:6d:2c:59:9c:de:8e:a8:32:02:6b:e1:cb:6c:8b:
cf:42:db:8d:38:a7:d7:bd:cc:da:f7:41:59:2f:08:ad:7b:97:
db:ab:72:b6:e7:8f:21:b5:3e:0b:a6:c3:f4:65:b5:a7:4b:bd:
45:e3:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:06 2026 by rpki-client