Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: faXSlCtjFtsN2zSMQm2NimY+ZDjCSb4z+LCDtOB2go4=
Subject key identifier: E2:2A:54:69:F2:1C:AF:A0:56:41:A6:3A:AB:F0:B9:61:47:44:65:66
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019CA945AB38FFEF497683F40FCC5BDE268A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 50
Signing time: Sun 01 Mar 2026 12:00:41 +0000
Manifest this update: Sun 01 Mar 2026 12:00:41 +0000
Manifest next update: Mon 02 Mar 2026 12:00:41 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: mJZXC7HTUdNeumpt8R8D6wqaF0zrwsjcfmQPLEUUCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ab:38:ff:ef:49:76:83:f4:0f:cc:5b:de:26:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Mar 1 12:00:41 2026 GMT
Not After : Mar 2 12:00:41 2026 GMT
Subject: CN=e22a5469f21cafa05641a63aabf0b96147446566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:3b:43:6b:f2:a5:7f:9d:f9:66:97:b1:95:
9d:13:7a:f8:55:43:06:cd:b8:67:4d:f5:40:3c:c3:
2d:c8:d6:f1:ef:86:1f:f5:0b:09:79:e5:db:1a:61:
de:39:a1:00:3f:2c:2b:d7:f7:1d:20:78:c4:4a:54:
0b:b9:5a:fa:25:ed:3a:fa:3c:7a:53:44:80:cd:7f:
c1:f6:07:9b:70:bb:33:25:1a:a3:59:ab:f4:5a:d1:
96:95:94:91:02:96:ec:05:8a:49:ca:f1:ad:96:9c:
ed:58:7f:b0:20:a9:30:b6:eb:47:71:3d:ad:0d:8c:
90:78:3e:4d:90:6f:30:97:b8:49:53:d5:55:14:f3:
ec:0a:23:84:8c:77:e5:26:fb:ac:ab:91:9e:30:22:
f0:7c:6b:5c:f0:dc:05:16:21:8b:64:a8:96:0a:cc:
83:6b:00:3a:d8:3d:f5:da:85:cf:d4:fe:38:8d:a6:
9e:02:a0:ff:81:f7:dc:0f:92:f4:a9:93:57:5b:ff:
3f:f5:32:c7:4d:95:90:a8:ea:23:2b:a8:9f:0d:c8:
cc:0c:59:7d:d4:ac:8a:a2:19:63:ad:5a:81:64:dd:
b3:e3:23:1f:84:66:41:a3:10:bc:e1:a3:5a:9b:8f:
0d:44:ed:8e:a1:55:a0:65:2b:42:a7:f4:31:18:13:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:54:69:F2:1C:AF:A0:56:41:A6:3A:AB:F0:B9:61:47:44:65:66
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7a:0c:52:78:2a:22:73:b9:d5:d7:7e:0c:a7:0b:28:a7:6e:
c3:bc:2f:49:60:ad:ad:20:e2:0f:80:b7:e6:55:f8:8e:e5:73:
8a:b8:04:73:e8:12:50:01:91:c2:58:4c:e2:03:c1:8e:1d:6a:
ca:8f:b6:16:5e:bc:fa:2d:45:33:10:d5:6d:10:96:55:7f:db:
3f:1c:cf:ce:63:c4:a4:51:ec:55:a7:29:fd:74:8a:82:52:fe:
d9:5e:6c:eb:a6:63:15:76:cc:6a:33:87:7c:c5:4f:84:17:1c:
88:1b:28:a3:b4:be:d4:67:8b:2e:09:f1:80:1a:45:02:94:44:
a6:21:48:e6:bf:b0:4b:50:d7:45:87:a0:bd:f0:80:db:30:3c:
5b:36:9f:27:94:23:3b:72:8a:8a:70:e7:e4:a6:17:1f:f9:e0:
3a:b3:2b:1e:77:53:59:35:99:94:19:c0:82:2c:7d:be:51:d9:
ad:ad:49:35:55:5d:71:c9:ef:50:6f:2b:f8:d9:91:f6:cc:c7:
20:32:63:6d:e6:1e:ec:40:e5:f3:20:76:1d:80:8e:f6:34:f0:
01:b0:1d:78:f5:e0:2d:50:f2:06:c8:32:a5:15:82:05:57:e9:
b0:b4:93:f0:8e:be:6b:64:0d:e5:1d:67:22:b2:6b:66:1f:7d:
d0:31:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:35:56 2026 by rpki-client