Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: ZDsCTQj5L8QW7wHOkLB078KfLii9P5Nv7H02FpFXQZw=
Subject key identifier: C9:CE:14:EB:99:90:A7:8A:E1:16:C0:EF:2B:D3:17:C2:1B:14:F3:F6
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019CAA58BB69DCEDD44DCC149EC4E4387F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0CEA
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: w8ENTMw9l3xhRA1VPRmwlNrH4iwfvgL9ajgMyTJBRhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bb:69:dc:ed:d4:4d:cc:14:9e:c4:e4:38:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=c9ce14eb9990a78ae116c0ef2bd317c21b14f3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:4a:fd:e1:b0:65:2e:b6:49:a1:89:0f:fb:
c1:a8:68:97:fa:29:30:35:f8:85:43:24:a5:c0:7e:
49:d4:d2:18:10:e5:45:16:6e:01:58:6a:1c:b3:3d:
37:b6:69:7d:a6:c1:52:04:ea:6e:bf:46:86:9a:bc:
09:88:40:73:de:ab:b7:18:eb:27:cd:fb:f4:ec:a5:
7b:f9:c8:85:28:40:a1:29:c0:4a:64:1c:43:25:1a:
21:8d:9d:16:5e:ba:80:04:ad:73:89:bc:76:db:98:
17:aa:ad:55:ad:84:61:49:03:d5:4b:ba:37:0e:92:
9f:a2:a8:2b:0a:1b:49:cc:37:48:53:76:54:f4:89:
5a:19:d5:35:6e:13:39:0f:8a:18:88:a3:a1:16:9d:
a2:20:b1:b8:d0:35:9d:94:23:bc:44:e6:be:55:5c:
14:6d:8e:2e:93:cc:69:4f:20:f1:d5:c4:eb:4a:96:
e9:da:b6:34:02:c2:13:ba:b8:71:90:bf:41:4c:f8:
32:e5:35:ef:e1:c0:83:36:c0:e8:cf:49:f1:8d:74:
15:77:82:72:41:f6:55:d7:81:a8:5a:76:2e:d3:c4:
58:91:5c:bf:06:c0:3e:28:91:53:70:9a:de:01:4b:
11:42:2c:e4:69:ec:69:c2:e3:9c:fb:34:cf:b3:eb:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CE:14:EB:99:90:A7:8A:E1:16:C0:EF:2B:D3:17:C2:1B:14:F3:F6
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:a6:1a:8f:4f:38:f9:bf:89:fb:a5:d9:56:12:df:9b:59:
d2:0f:9e:5a:d2:40:79:af:3c:6d:aa:45:d6:a3:55:44:36:96:
4d:43:c2:ee:76:27:a3:5d:65:7b:57:8e:ea:9e:89:e2:d3:18:
c6:73:6d:92:df:f3:f2:ed:1f:5e:f9:20:23:77:95:34:90:0e:
95:fd:ac:44:8b:d2:89:64:74:4b:0c:3b:84:46:b0:09:a3:d5:
0c:33:83:34:07:df:13:e2:a9:3a:c6:4b:6a:df:d8:8f:2a:a3:
28:a1:4c:14:ff:9a:70:8e:a6:eb:51:0d:76:58:22:ee:8a:56:
a2:7b:39:bf:72:49:73:fb:2f:a5:a2:ff:0a:a4:4e:7b:6e:f3:
01:16:0f:96:99:f9:48:3b:b8:27:10:88:df:bf:88:db:9a:bb:
74:b3:6d:91:82:f9:c4:69:e1:d3:92:6e:81:35:a9:5d:01:60:
05:64:34:27:95:95:15:1d:69:d0:13:27:1c:78:90:2c:94:8b:
c0:d2:35:44:56:65:5d:61:40:66:2e:c1:bb:cf:75:db:15:24:
e3:87:27:df:b3:59:d6:e8:a0:ef:a4:ee:46:98:1d:61:6c:93:
ed:52:b8:b5:3c:c3:58:cb:61:22:7d:3e:9f:ff:fe:fe:38:7f:
17:9b:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:32 2026 by rpki-client