Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: ENNe1iPhRf2KipW5Kuo5SStoGdM3AMTDFxJU5IcSK/8=
Subject key identifier: 4E:AC:71:48:E6:CF:0B:66:96:EF:1B:93:5B:8B:CE:D8:DC:EE:6F:24
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019CAAC6CA41F1DC5ADAA93B3EE2FE7D98FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 17D3
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: +/6PUMfWEq4GmIVaoUuXUOwk7ZZukIgi/yK/5jPmXJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ca:41:f1:dc:5a:da:a9:3b:3e:e2:fe:7d:98:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=4eac7148e6cf0b6696ef1b935b8bced8dcee6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:62:db:6f:94:2f:25:fa:6d:79:49:77:6a:
6e:39:f7:90:16:d7:e7:3e:a3:77:fe:55:80:b3:04:
06:21:e2:54:f4:c0:9a:5f:8e:15:ce:aa:6d:1f:b5:
2b:9d:e9:97:c6:95:8d:81:95:2a:ec:ab:27:7d:43:
cb:ec:9f:9d:2e:f7:41:fd:66:03:d8:be:98:66:13:
f4:5e:a8:8f:4b:c3:89:f2:18:d2:ef:83:d7:03:9f:
fd:33:ce:2b:b9:2b:90:02:a3:fe:0b:55:95:d0:2f:
7f:52:8e:67:79:3b:b0:f8:d0:a4:78:1a:62:a0:df:
42:ea:e6:dc:2a:a7:6f:0b:1b:19:3a:61:28:d3:46:
59:32:1f:5d:32:f9:1b:7a:91:79:13:9e:05:71:1c:
bc:17:35:31:e0:06:eb:f5:ac:b8:6c:4b:cf:f8:59:
ca:d4:5f:78:2b:96:5e:26:1d:d6:90:73:a3:8d:c8:
14:16:cb:92:58:c9:03:63:fd:e6:7d:5d:68:08:0f:
a0:3a:33:07:2f:d6:eb:a0:ac:2b:54:91:78:8f:56:
f1:93:eb:6f:cc:44:22:0c:21:2d:cc:24:62:fe:80:
aa:8c:22:c2:57:5c:70:4a:38:8b:57:b5:0c:dd:7c:
ef:63:59:62:b3:c4:2b:b0:eb:e0:80:42:fd:ce:93:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:71:48:E6:CF:0B:66:96:EF:1B:93:5B:8B:CE:D8:DC:EE:6F:24
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cc:43:e1:49:ab:51:dd:ab:4d:94:d8:ed:f4:c3:a7:92:39:
b5:d6:45:94:05:c7:07:bf:83:9d:a4:e7:0d:aa:40:d5:44:35:
a7:b3:3f:f1:36:99:76:7e:20:b4:e9:a6:1c:de:a6:60:84:8a:
be:5d:d4:ea:55:f1:75:02:39:44:af:8f:93:13:fe:16:b4:30:
68:b9:a4:8b:44:75:94:b1:85:4f:e8:c5:10:15:39:45:f3:24:
7f:df:21:9f:eb:8f:f1:80:59:f0:8f:e3:4f:bd:e2:47:d9:2d:
e8:b7:c5:48:3a:25:a1:8f:b2:37:52:5c:61:b1:43:38:4c:15:
ad:6d:e7:9f:01:81:da:8a:4a:40:19:0b:0f:7d:39:23:f5:7a:
29:71:a3:7e:c3:69:6d:e4:f3:92:09:db:f4:1b:3a:df:79:57:
0c:de:dd:49:c4:0c:62:11:55:3f:a1:19:c6:86:ff:9a:cb:92:
bd:bf:f5:0e:2d:a7:dd:7b:10:f9:a3:10:26:dd:51:8a:ee:8a:
28:c3:42:59:ad:9c:5b:42:4c:c0:3c:96:62:ff:37:6b:ba:17:
cb:f0:29:c7:45:11:bc:23:58:db:e7:25:44:77:d4:e7:1d:4a:
06:5c:fc:b8:52:fd:05:76:ae:99:33:08:81:79:9a:eb:92:20:
a2:b4:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:21 2026 by rpki-client