Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: 6DVgQqEqsAFqd86P7EmrDhXu+BuoXV5UpbjyI0NwU/w=
Subject key identifier: 87:1F:2D:74:C9:38:2A:98:A6:00:BF:BD:56:09:02:FA:E7:1D:83:4E
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019CAB3407688A8F975803B48F907E534762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: OLk0VPmUnPey7QQvUWy+4kJVhXVOsCvXDrfJi5+fYos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:07:68:8a:8f:97:58:03:b4:8f:90:7e:53:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=871f2d74c9382a98a600bfbd560902fae71d834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:c7:93:8e:e6:07:97:3d:a7:e5:3b:51:a5:
e6:2b:2e:b8:00:b2:21:77:16:20:bb:8d:01:09:d8:
20:f7:55:50:d9:e2:19:b6:28:63:a0:70:a8:30:3a:
ba:80:30:71:a4:29:49:7f:24:b5:79:06:16:40:ac:
2d:7c:db:ca:f7:38:7e:ca:c1:d5:2d:4c:5e:50:55:
ee:26:72:a3:db:af:7b:e3:53:a0:9a:eb:52:4e:68:
6b:ab:dd:3d:4f:48:2c:ac:cb:74:79:d7:fb:32:7e:
98:c9:86:e1:ed:66:88:ce:8e:ea:8a:fd:a6:98:fc:
af:79:df:f1:6f:4f:1c:bb:e6:15:8a:99:8d:a8:da:
02:62:d0:89:ed:8f:06:0d:74:37:8e:81:65:a3:e0:
e3:ff:cb:45:ff:26:1f:65:ef:d7:db:18:b4:a7:57:
75:20:3a:e8:d3:99:8f:a6:8b:67:02:c9:43:81:2f:
e2:d5:31:a7:e7:18:fd:d3:f4:36:de:02:b8:4d:b6:
69:b1:05:2a:27:cc:04:9a:3f:67:c6:a5:10:16:14:
b1:4a:bf:c0:35:1a:8c:a5:af:94:50:f2:69:b2:fb:
34:3c:6e:3d:f0:b9:f1:c0:46:4b:78:9e:a5:84:e3:
a9:54:56:03:fb:ce:ac:e1:de:ee:8d:8f:9f:03:80:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1F:2D:74:C9:38:2A:98:A6:00:BF:BD:56:09:02:FA:E7:1D:83:4E
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:14:b2:36:cb:d9:74:96:81:21:ef:aa:b1:5f:f6:8f:d2:c1:
c1:a5:d3:d3:64:b2:91:9f:a0:8e:87:f0:bd:a8:6b:f8:f9:a9:
d7:29:33:00:6a:64:74:3f:bd:1f:d2:4b:ef:d4:94:01:9e:c0:
7f:ed:ec:91:7e:d7:31:b9:ff:3f:38:de:7e:92:db:a9:e8:46:
a6:11:b2:94:5b:8b:58:a2:57:c7:c6:f6:81:71:0c:80:a9:7c:
32:7a:4a:fd:a4:23:7d:81:4c:44:db:6b:e5:ba:9f:46:de:50:
30:47:13:9a:49:37:c6:af:ce:47:ce:35:23:40:9c:84:10:ad:
34:90:32:bd:30:d4:d9:98:46:50:19:2f:53:23:e4:54:90:a0:
87:c8:bd:e2:bb:67:5d:17:72:c8:57:a8:b2:86:14:ec:5a:a1:
eb:2f:b6:f0:db:10:52:ed:ef:d3:75:f5:d2:98:e0:67:cf:a6:
ea:7d:f7:bb:b7:e5:ac:a4:69:51:46:12:67:52:d1:d2:3f:81:
95:1f:06:94:26:8b:21:36:cf:98:75:f9:66:f2:9a:55:24:47:
0a:ba:b4:77:e5:c7:59:7b:ef:86:89:87:a3:44:0a:e1:c4:bc:
c2:2b:b7:a7:10:7c:e9:92:f2:51:ae:b7:e6:f0:43:fe:a9:7c:
ea:0e:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:42 2026 by rpki-client