Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: xNaAz5smuoo/LnoHnL46AORCfPplQQWpSIJx8W1+SFM=
Subject key identifier: 24:ED:EE:E5:AC:AD:D9:A8:CD:B6:50:49:5D:BE:D6:BD:C4:2D:74:C2
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 019CABD9743885096171FEC9C194CB5F671B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 1748
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: BWH+FD6d2jpXPaQC388Qz9vApgCVskqWXQzIDVEcH7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:74:38:85:09:61:71:fe:c9:c1:94:cb:5f:67:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=24edeee5acadd9a8cdb650495dbed6bdc42d74c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:e0:3d:19:6b:1d:45:e8:d3:8b:94:2f:4b:
65:f5:84:72:d8:89:1c:8a:93:f7:0a:22:7d:45:30:
ac:f8:19:22:41:7c:68:64:eb:15:cd:18:71:eb:91:
f3:77:9f:37:91:0f:63:85:61:a9:db:25:a3:20:0c:
d4:01:7a:ce:e7:a5:a1:9b:03:25:47:68:18:f4:f5:
f2:84:0d:a2:d3:52:7c:f5:e7:e7:60:2f:34:9a:7f:
03:16:9b:d0:54:c9:08:d4:05:61:33:40:7a:04:24:
36:c4:2b:a4:a7:97:16:7b:df:5c:f7:1c:58:5e:24:
8a:e3:e0:bc:3a:f2:79:07:1f:32:cd:78:2c:0f:6c:
78:ae:6d:80:4a:c0:38:06:45:bd:f7:3d:68:f1:32:
aa:77:70:49:d5:03:1b:9b:73:fc:2b:14:15:ed:1d:
22:bf:76:79:46:de:9e:d8:48:91:49:3f:0f:5c:e7:
84:54:0b:b5:3b:3e:2a:63:37:8a:2f:ca:b6:ed:d1:
c8:a4:21:c5:8c:31:a9:bc:5d:3f:11:ea:69:3c:ac:
ec:d4:03:2a:49:3f:98:d4:20:f0:1a:ca:b4:cb:5b:
fb:14:c5:1e:81:e3:02:51:77:e0:e1:be:66:e6:60:
11:f7:d1:cc:5e:49:ae:27:7f:12:e6:77:0a:35:ca:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:EE:E5:AC:AD:D9:A8:CD:B6:50:49:5D:BE:D6:BD:C4:2D:74:C2
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dc:b1:ee:56:92:7e:9b:62:32:93:81:d5:7d:81:65:66:c2:
2d:99:4f:c2:1d:72:25:cc:9e:f7:86:a6:18:af:8e:32:cc:f0:
d7:d4:4b:21:06:6a:fa:dd:60:05:bb:f0:b7:99:e4:9b:78:9b:
bf:01:ce:3b:fd:1c:6e:64:2e:89:0d:28:a8:bb:9a:77:50:6e:
35:83:83:51:f1:a1:99:37:d3:fa:98:54:5e:30:4f:1b:45:e1:
22:dc:70:b7:7c:f8:ec:29:30:d0:fa:21:fe:32:d6:99:a4:31:
8e:3c:18:3b:34:62:6f:ce:93:24:2c:0d:7d:e6:13:09:72:f4:
04:36:29:47:0d:cc:f1:8e:9c:2d:5b:2e:56:f1:df:46:12:3d:
43:89:f2:aa:74:09:9a:b7:47:06:78:ed:2c:b7:1a:b7:b2:e6:
8b:58:23:45:52:90:25:11:aa:76:18:16:31:5f:3b:40:45:7b:
83:83:b7:94:35:83:71:c7:b2:de:3a:69:d1:90:1b:f6:ae:63:
b6:8f:fe:ab:0c:e1:f9:35:fe:f9:07:e2:97:59:64:3b:9a:84:
e9:6c:e6:a1:af:03:ae:04:7d:e8:6b:1c:8b:18:95:84:d8:3a:
8c:3b:7f:60:29:a8:d5:7b:06:d6:53:9a:19:5c:55:78:95:79:
12:3c:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:29 2026 by rpki-client