Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: 0YyQ/jzzxKXV9+syDTRsRWV6KIx72+PkLHpYVV2Ue50=
Subject key identifier: 76:11:4B:AE:78:74:55:CE:47:0D:4E:0B:28:3D:C1:86:54:CB:D3:FE
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 019CAA8F68A004F6C5423324832471566362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 0CE5
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: 1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa (hash: RiIz/j+OmLa7FEdZbMFlKrhGfrujyA65C/HnMjy7A3s=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: Q+VgKgdYoo/aKQJpyUhJoyfnTOHgpP4GbpBIwgIGhwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:68:a0:04:f6:c5:42:33:24:83:24:71:56:63:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=76114bae787455ce470d4e0b283dc18654cbd3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:09:6a:14:9e:ea:2f:f0:3c:70:02:3a:d9:
87:47:50:bf:fa:1e:7b:91:46:97:60:ae:fd:2f:f3:
7a:cc:d8:70:c8:fd:5a:c6:54:11:ee:d1:e9:e0:4b:
22:a6:63:99:26:be:3c:fc:87:8f:10:68:18:a7:3d:
64:b3:98:7c:1c:8b:3f:66:d6:77:3a:77:dd:a2:aa:
0e:c1:07:8c:61:32:c0:a2:59:55:14:59:ed:55:bf:
a4:80:2b:fd:4e:a5:79:15:64:1c:2f:cb:23:be:82:
6f:54:87:e1:7a:7e:c5:72:31:14:33:a5:c5:10:bf:
7e:56:ee:1d:ae:41:42:47:59:26:1b:74:27:c6:27:
ec:56:e2:9d:b0:c4:ab:8c:a8:47:96:bf:32:91:4d:
34:a1:48:48:22:99:d2:a0:00:7b:6c:6c:9b:e1:78:
f9:fd:27:6c:d8:85:73:ec:fb:d4:b1:c0:84:df:a0:
8c:6d:6b:cf:31:e4:ff:7b:9d:03:00:91:4f:cb:cb:
b9:69:02:af:6c:80:bd:ed:cf:fe:82:01:c2:99:5d:
54:ad:d4:77:e8:c3:c2:64:e1:29:e6:89:4b:b5:9f:
42:81:15:70:94:34:1f:ef:f7:f1:33:f8:6b:4c:5d:
8a:cd:44:03:5c:d6:07:22:65:79:e5:41:69:3c:bc:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:4B:AE:78:74:55:CE:47:0D:4E:0B:28:3D:C1:86:54:CB:D3:FE
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dd:82:d3:77:87:68:1a:48:28:ec:14:e5:3d:ba:75:3f:82:
89:e0:90:aa:f7:f5:7c:f6:7b:e2:70:fc:29:6f:53:26:29:8b:
61:7f:96:2b:b4:ab:e5:f1:f8:c5:36:51:04:e9:2f:04:b6:62:
b4:67:e8:89:d0:dd:09:d3:8f:63:6e:e2:88:b5:57:89:ca:f6:
cf:b6:da:bc:d1:c4:17:bd:94:41:a3:38:80:39:01:3f:b2:b6:
10:07:f0:ac:ff:e0:d1:88:ae:4b:9c:f9:0a:af:44:68:6d:68:
6e:9e:73:88:98:91:ce:55:74:fe:63:4a:a5:4c:b1:59:38:c9:
2e:d7:e3:9e:48:ef:f7:81:3e:ea:ab:7b:c8:3c:39:9a:a0:af:
52:c2:40:b2:86:50:a9:88:e6:17:2a:dc:08:1b:c1:39:af:1e:
66:c1:2c:2b:8f:f6:61:58:c8:ec:d7:c1:6c:82:a7:c0:c1:0d:
0d:28:a1:c1:2f:c3:53:f7:78:31:50:61:fe:c6:c3:72:bc:54:
d3:df:d6:ab:df:05:3c:6f:c1:db:f2:f3:0a:3f:0a:36:31:d5:
1b:1e:a2:39:f4:c6:c2:4f:86:6d:b3:98:d9:c0:37:11:af:c6:
1f:48:25:c3:ef:f2:3f:f4:be:b0:eb:06:be:c7:dc:db:55:4e:
98:37:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:46 2026 by rpki-client