Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: E9h4lBbiPr5kwit2xfsEYY2MhfK+iScSoeE7zNQwF0c=
Subject key identifier: EC:80:18:3A:62:5D:F1:44:98:6E:60:D1:7F:E6:45:8A:BA:66:F2:50
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019CAC46EAD96BD4D816F7F93E3A1527B41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0715
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: 5geKctXwqBWy/gjr7IQyefDHbdAtAGmUsSIGxtfFIDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ea:d9:6b:d4:d8:16:f7:f9:3e:3a:15:27:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=ec80183a625df144986e60d17fe6458aba66f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:42:c7:e9:4e:e3:95:bc:57:d8:e9:9d:73:
fc:bd:22:68:46:40:85:84:7c:cf:91:ce:ee:c2:4d:
2e:1d:60:80:b7:95:9e:3d:ff:09:3a:50:ef:47:7b:
2d:56:51:40:cb:32:8f:78:f7:c2:b4:15:e3:7c:e3:
30:1f:af:25:80:89:4a:9d:37:eb:86:20:9f:85:b1:
a1:c6:c9:34:14:46:e0:29:c0:65:75:70:29:d5:e8:
57:8d:a7:cd:5f:f8:0f:56:a6:ec:2e:00:a3:3c:26:
a5:66:0e:61:39:38:b4:06:96:ce:a3:fe:64:3b:4a:
de:6a:56:32:e0:34:68:98:92:39:6e:50:2a:fe:4d:
e8:49:b6:81:bf:9e:6b:ff:57:da:ed:29:e6:0b:89:
4a:7f:17:41:62:23:da:07:88:6f:8a:7b:31:52:5f:
e0:37:11:32:53:10:0c:d0:c2:34:d3:d0:f5:a6:4c:
df:ab:01:69:d0:9a:41:7e:f1:cb:a7:4e:92:15:1e:
f1:d5:f5:cc:8c:b6:fb:9a:7e:ec:42:76:16:3e:f3:
c7:37:b0:ae:42:de:a1:dd:9e:3b:8e:54:70:55:a2:
9f:29:bd:a0:a6:80:09:ab:1d:5c:52:94:d4:c8:be:
bd:8b:e4:2b:13:f6:a0:44:a9:15:51:fd:7a:b2:25:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:18:3A:62:5D:F1:44:98:6E:60:D1:7F:E6:45:8A:BA:66:F2:50
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:27:cc:d9:84:a3:f8:4b:44:3a:92:3d:0b:be:f5:0c:d2:98:
0b:17:16:1d:c8:64:24:19:8c:8d:d1:43:9a:8d:6e:51:7b:44:
96:9b:0b:02:51:18:a5:f1:bf:33:23:5a:c5:7b:31:ea:7b:d5:
1f:3a:c3:35:0c:00:98:f2:70:98:3b:6a:be:4d:6b:1b:f8:40:
22:95:63:59:9a:f4:1b:e6:17:f6:30:72:21:19:40:23:f2:98:
62:7a:5a:3e:81:7d:02:29:1a:53:1d:57:25:72:73:dd:5c:72:
69:ca:d2:d6:07:88:ac:60:e7:80:96:00:d3:4d:8e:05:ee:c1:
a2:f2:f9:a4:4a:52:41:d4:9b:ab:59:45:42:05:5a:6c:bf:9a:
41:b6:51:ff:cd:55:aa:19:fe:6c:75:ad:d9:a0:ee:b9:a6:14:
ed:af:21:7e:e4:40:cf:de:93:11:9a:04:6a:0a:32:e4:e6:eb:
18:47:eb:43:a5:0a:9f:ab:dc:35:68:26:ef:78:f2:89:d2:b3:
b1:2a:57:19:ca:38:29:40:3a:e7:20:fc:2b:83:2e:52:69:fc:
75:e0:35:a9:d8:53:78:d6:7b:73:fe:13:24:25:8e:ce:d8:09:
4b:d5:a8:5b:64:73:d1:2d:8b:64:45:6e:d4:50:be:11:91:2d:
7a:0c:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:06 2026 by rpki-client