Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: UlOl7batfz3WjzTvK8sFKJhKmFx7cAaobXWmaDNAE80=
Subject key identifier: ED:FC:95:C8:51:C3:8C:D0:66:F9:66:5D:60:F1:10:46:1F:C3:42:97
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019CAE356B4987C04ECCF5D86E04AF39E458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:02 +0000
Manifest this update: Mon 02 Mar 2026 11:01:02 +0000
Manifest next update: Tue 03 Mar 2026 11:01:02 +0000
Files and hashes: 1: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: rLs7ZeptW+pmhRMFkFiAhsgMrWha+6ijM/ezWTZmrqI=)
2: oeaJctM9Qtah90R6LCT4BqnOU4E.roa (hash: 6Vq0BN7rnnATY8BQSA0XM6bTNiKEPoqXG+oYtacEtmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:6b:49:87:c0:4e:cc:f5:d8:6e:04:af:39:e4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Mar 2 11:01:02 2026 GMT
Not After : Mar 3 11:01:02 2026 GMT
Subject: CN=edfc95c851c38cd066f9665d60f110461fc34297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:b2:ae:00:3a:45:21:9b:60:4f:71:9f:20:
0d:7d:3b:e6:ca:59:fc:e8:4d:ee:0c:cd:ad:57:1e:
e0:97:d6:24:d1:fa:5a:7e:3d:38:ab:74:e3:69:f6:
72:02:4e:f8:a9:ac:52:e2:45:cb:3d:98:7d:38:7d:
05:07:69:c3:f7:e3:41:c9:ef:4f:99:26:fe:cc:09:
ac:f2:52:75:33:ab:6c:6e:7a:ec:40:08:36:99:69:
06:34:b6:d2:07:3c:2b:bb:5f:73:5a:64:18:56:92:
d6:68:cc:f4:45:2b:0d:41:95:b9:bf:f4:d5:83:06:
31:c7:47:38:48:73:d3:69:64:32:e6:94:c5:23:59:
f4:cb:81:00:bf:3e:5e:c6:14:db:68:c9:72:65:05:
2a:69:4f:ec:59:0d:b3:f1:3f:7b:ea:81:ed:d6:96:
96:76:22:f5:4d:30:64:34:93:b8:c5:06:1d:a4:f3:
db:7f:0c:6d:88:e3:d6:8b:2d:eb:40:cd:c6:4a:bc:
0f:95:2c:69:e3:c4:b7:ad:3e:86:8e:13:76:4f:51:
08:f0:da:53:ee:ca:a4:0d:e6:05:20:07:2a:bf:c6:
5a:36:06:5b:95:97:1e:2a:d4:5d:3d:47:57:f2:d1:
73:e1:52:e7:43:e1:aa:48:e5:0d:6a:9e:34:1d:63:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:95:C8:51:C3:8C:D0:66:F9:66:5D:60:F1:10:46:1F:C3:42:97
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:db:79:47:5a:39:13:95:fd:c5:b3:e5:19:99:78:29:d1:
2e:fb:f9:8f:bc:b7:65:06:4c:ac:d6:42:cc:d3:cb:28:73:66:
d3:ea:58:45:1b:4c:60:18:24:8c:bc:93:d8:e7:61:bd:f3:fc:
c4:d6:72:8d:21:fd:94:72:dc:8d:df:14:bd:78:f7:22:b9:38:
d1:3a:b1:69:be:a6:e4:4a:06:01:53:1b:46:e8:ad:95:19:68:
f7:25:b2:8e:1a:52:fa:a6:ec:0d:38:81:e2:95:72:df:5a:e1:
21:1e:75:b3:1e:2f:3a:1b:b7:92:ab:ef:8b:1a:d1:62:7a:29:
8e:eb:06:c0:15:c2:8c:71:4d:6d:4d:ac:ae:74:28:f4:9e:0e:
9e:7c:e6:45:a1:53:84:a2:a2:90:76:e0:8c:ce:18:16:91:1a:
f4:c5:b7:41:4d:58:41:b8:3c:33:10:b6:f4:51:46:b8:fb:2c:
84:a6:12:8c:1e:1c:0b:07:18:d5:4c:c3:84:af:98:38:ef:d0:
14:95:c1:e0:06:c7:5e:b8:f1:db:8f:27:de:3b:c7:9a:0b:b8:
28:b6:dd:1b:48:c9:f1:dc:7f:12:02:63:a6:e9:78:d7:6a:86:
5f:51:e2:44:94:7e:aa:2e:c6:92:6e:fa:c5:c0:64:c5:bc:42:
fb:92:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:27 2026 by rpki-client