Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: 8+NEBFqySriYRXM7g7fnvSvJ6lKDwlTBLi2Npi1qHzw=
Subject key identifier: 24:BB:60:45:96:3F:F1:AF:91:A0:A9:AF:A1:4B:0A:7E:39:93:4A:EA
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019CAB3449EE09BBA33D1CCA0E1859B9C6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1006
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: WvZCUWWeNrxC677rA4F7J+20Go/jBop2tjG85J9KRgI=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:49:ee:09:bb:a3:3d:1c:ca:0e:18:59:b9:c6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=24bb6045963ff1af91a0a9afa14b0a7e39934aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:16:83:e3:c5:3f:80:68:9f:77:3f:df:61:
72:ab:6e:d4:28:a4:4f:76:94:d3:1a:f6:de:89:d4:
93:9d:84:cc:f8:64:87:2d:71:52:b8:c4:d4:78:1a:
96:e0:36:fd:21:d6:e0:b3:4a:35:30:64:97:ff:b2:
80:0e:c3:3b:83:08:6b:58:77:67:04:34:76:cb:1f:
42:94:6e:49:e7:65:de:78:55:56:98:f1:44:52:b2:
2a:ad:cc:25:29:e1:a8:37:18:0b:ee:d3:b7:01:8d:
66:01:3a:41:ea:84:bc:13:ba:96:f3:9e:ab:bd:da:
2d:2f:41:a0:ee:5b:8e:78:7d:2c:9c:71:db:99:a6:
11:21:0f:74:1b:ee:20:2f:a6:ec:68:4c:65:a6:ca:
8e:49:60:cc:a3:49:76:2e:cd:04:d8:8a:f5:8e:31:
f0:e3:2e:ca:d1:80:9d:bb:88:e8:d4:25:ab:ea:d1:
0d:06:ac:01:fe:2b:02:58:dd:55:69:67:62:40:86:
55:db:67:af:f8:3f:1e:88:64:fd:a3:42:33:5a:9c:
e8:04:98:6b:44:c8:32:30:2a:5a:b7:25:24:10:73:
dd:6f:ef:88:45:7e:c2:6a:9d:01:20:02:f9:16:3b:
55:9f:52:b3:e3:f1:68:a2:4d:c7:bb:59:16:95:5b:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:60:45:96:3F:F1:AF:91:A0:A9:AF:A1:4B:0A:7E:39:93:4A:EA
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f7:6e:69:c1:43:cc:c1:99:bc:fa:9c:7c:75:b6:26:bc:63:
d9:81:f4:bd:95:ae:a5:5f:86:6b:be:8c:b1:18:45:30:64:d1:
54:95:71:d6:b3:8c:13:aa:64:4b:b2:39:f0:66:97:c9:b4:58:
24:fc:df:45:a4:c3:d0:da:4b:e1:0e:e0:b9:6a:db:24:29:27:
04:dd:d6:6e:76:74:72:18:5f:2f:11:58:ad:bc:a6:9e:14:b9:
d8:95:77:3b:fb:de:32:b8:08:2e:63:cf:df:87:80:e2:b9:f1:
9a:07:ae:38:af:71:6c:b8:bd:4a:12:33:ff:9f:88:b1:df:dc:
83:7f:b6:94:f9:34:31:38:94:56:de:5c:fc:26:7f:ea:c0:12:
e4:01:7e:ce:9f:b3:c7:76:11:41:87:e8:f7:fc:81:93:98:49:
f3:53:c3:a8:1b:24:b9:aa:41:be:4d:f9:90:78:ba:9b:e3:ef:
ae:93:fc:9b:3d:6c:66:68:a4:9f:9d:b2:ba:33:b8:8f:78:fa:
ab:bd:90:1f:87:ca:a3:49:52:60:66:f7:d0:39:2e:c5:f6:44:
87:23:50:c2:66:27:95:fd:b2:d7:38:e6:37:ca:26:15:77:d8:
a9:0f:c6:8a:9a:5b:17:73:1b:2d:f3:0e:c1:73:b2:87:ad:ef:
20:4c:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:20 2026 by rpki-client