Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: x4aaptPlL4psmUSb84ZRZwnTMHyzhuenNsuahsxBJkY=
Subject key identifier: 51:D3:BF:C4:E4:25:63:C8:54:B1:8E:E0:03:AA:54:9A:C3:F5:0D:3C
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019CAC46E0101C7B4EB9ED705B5E0A798884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 02:00:51 +0000
Manifest this update: Mon 02 Mar 2026 02:00:51 +0000
Manifest next update: Tue 03 Mar 2026 02:00:51 +0000
Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: D/1pUQ3qZ0qBEca/f1ezSLP0lDvat+Gqrap0PXJ350M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e0:10:1c:7b:4e:b9:ed:70:5b:5e:0a:79:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Mar 2 02:00:51 2026 GMT
Not After : Mar 3 02:00:51 2026 GMT
Subject: CN=51d3bfc4e42563c854b18ee003aa549ac3f50d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:5f:37:ac:7e:b6:f7:2b:1d:ca:46:b0:f8:
ae:fb:6a:cc:3c:ea:9c:b2:75:3f:70:4e:d7:80:a8:
76:11:94:1c:27:63:7b:ae:16:c3:df:18:1f:bb:7a:
87:14:96:01:7b:2d:1d:bb:93:75:bc:41:7a:db:50:
8f:01:2a:e8:63:46:01:4e:fe:a0:21:d3:21:35:53:
a4:df:f2:50:48:66:51:76:f1:2c:1d:78:73:d7:5e:
48:e4:e7:0b:c4:e5:3a:0b:ac:8c:f8:1b:c5:ec:80:
f0:fd:71:a7:02:8e:9c:ab:43:cd:f4:47:71:85:6a:
bd:c1:ab:aa:0c:0f:b0:a5:1a:bb:41:22:0c:ab:26:
7d:64:44:50:ed:88:ca:a0:1b:d7:7c:d7:92:ce:da:
77:e9:75:1d:41:02:d7:2e:85:98:a2:b4:17:9a:21:
e2:6b:c8:9e:30:73:e0:b7:5d:e9:9c:bb:c2:4b:51:
fb:10:f8:ee:fb:6f:6a:f1:c7:e0:e5:f1:77:0d:5f:
da:55:e2:69:5f:79:ad:bb:ab:2e:0b:2b:86:37:cf:
98:19:43:6d:ff:f5:92:bc:1a:2b:24:39:ce:ea:29:
cd:47:6e:5c:1a:6e:43:ff:cd:0a:e5:2d:8b:2b:57:
95:95:64:7e:b9:a2:46:f1:bd:4c:50:10:aa:b6:23:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:BF:C4:E4:25:63:C8:54:B1:8E:E0:03:AA:54:9A:C3:F5:0D:3C
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2a:85:c4:b6:49:35:01:5d:ba:97:bf:28:45:a4:da:75:3d:
15:9a:78:8a:19:54:51:93:8b:2a:21:73:54:d8:a0:0c:b5:2c:
68:11:42:82:c8:de:74:e0:fd:ef:b6:b4:7a:11:6d:b1:38:aa:
63:e2:5f:ce:a7:92:34:ee:79:d3:2e:63:e2:c6:0e:b2:73:37:
cf:3e:5b:4c:13:e4:5a:53:1c:0a:e2:08:f4:80:f5:da:64:13:
8b:bf:74:4d:00:49:57:1e:3a:25:38:e7:cc:e5:7a:f8:d9:c1:
2e:b2:62:36:4d:7f:f4:6d:03:d0:56:57:24:c9:4b:07:10:e6:
bc:14:c9:3a:8e:4f:67:01:cb:0a:72:0f:0e:68:d6:5b:51:a5:
ea:68:ca:42:0f:be:f9:9b:29:a9:c9:f4:cc:37:d4:fe:c8:d1:
cd:5b:4a:ed:e6:7a:8c:36:9e:9e:06:9a:9b:44:44:df:26:ed:
18:a3:9e:c7:0b:3d:84:b9:99:9e:7b:5a:c8:eb:67:b0:e0:8e:
59:b6:d3:58:45:95:19:25:4b:29:38:b7:76:59:b9:8f:a9:39:
ea:7a:f3:5b:6d:90:f2:0a:1e:2f:f0:ad:ef:1f:54:a8:6d:11:
2d:c6:81:ec:1e:a9:6c:27:83:b5:fd:7a:e9:51:0f:5b:4d:c9:
6c:f4:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:48 2026 by rpki-client