Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: 8u+Do1il9vWZpJnda5zSIaHS0A16g/dFDVqt/Tq9FFg=
Subject key identifier: 24:95:A2:0D:A9:1B:DA:6D:A5:0A:38:48:2A:D5:40:8D:90:B0:DB:ED
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019CABD9B50027282F9C6DB9AE8303DE7850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: sh4+FVgBc8qODWUhlWc6uoe1zDydORJe0kHjUdKhkxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b5:00:27:28:2f:9c:6d:b9:ae:83:03:de:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=2495a20da91bda6da50a38482ad5408d90b0dbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:0b:8a:6c:df:bc:9f:0a:fb:f1:c8:ae:e8:
5e:43:b4:ed:f0:07:3a:73:46:31:94:ef:93:27:3f:
f2:12:85:29:2c:eb:d5:57:09:1e:9c:14:e3:e6:fc:
74:ad:04:f0:39:4b:14:ba:47:f9:83:a2:2f:d0:db:
dc:bf:7d:25:ff:47:a2:31:ee:c5:a0:42:c9:cc:22:
6f:58:51:15:a8:ba:e4:5e:54:73:9c:b7:1e:1b:09:
d3:51:9f:08:e3:1a:aa:d3:e3:c0:49:18:86:ff:eb:
04:0d:32:27:3d:2c:49:49:69:ca:33:5e:3b:b0:4b:
67:71:b1:4d:6d:84:25:c3:95:20:88:b9:e4:17:ac:
27:03:b0:c3:ca:7c:4a:9b:85:30:4c:13:e3:2e:27:
78:99:7b:39:d7:b9:16:77:6e:23:e2:73:66:83:71:
58:06:1b:cc:7e:2a:e4:a0:ff:57:82:56:c9:61:00:
38:cd:33:29:2c:93:e5:92:b5:88:b4:2c:0e:38:30:
cf:c0:83:24:87:c3:3f:6b:c5:9d:36:ec:43:f1:bc:
de:45:26:fd:b2:c5:c3:4b:99:28:d2:27:68:7f:2c:
fd:ba:5d:88:da:81:3d:78:a0:e9:18:15:4b:7d:64:
ea:ed:28:a6:c4:b6:24:7f:e4:82:5f:91:52:f9:ca:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:A2:0D:A9:1B:DA:6D:A5:0A:38:48:2A:D5:40:8D:90:B0:DB:ED
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c4:9e:a6:a0:e5:de:23:a1:4e:ff:3a:93:c0:ec:53:cb:14:
df:84:cc:d8:5a:e0:5e:45:90:62:84:13:c2:b2:d3:06:f8:d8:
b6:51:a8:5b:aa:b0:60:fa:07:ab:0b:6a:d1:62:04:19:55:45:
eb:34:13:62:c1:99:b4:65:be:26:90:8b:3e:62:4f:1b:38:d3:
81:5e:4a:f9:8a:bb:82:0e:d7:f2:65:4b:6e:01:87:b7:9e:33:
41:81:c9:30:09:f7:e7:6c:bd:03:b4:4d:5f:59:a2:24:63:73:
e7:40:04:1f:3a:f0:8c:9e:97:2d:24:7d:5f:16:cf:8b:d4:64:
a2:10:2d:24:98:02:a5:0c:4e:a3:ae:62:b9:5c:54:e3:de:d4:
a2:ff:87:58:61:b7:af:26:74:5c:1e:3a:20:d8:5d:8a:30:39:
63:24:66:c5:f1:74:c1:7b:6f:df:c6:12:ff:f6:2f:cd:f8:51:
53:af:bd:3a:7c:87:2c:7b:08:e2:d0:2b:3e:c4:94:9c:d3:02:
59:40:5c:37:62:b2:74:4a:0c:ec:34:dd:48:c1:e5:a7:f8:8e:
52:84:ae:da:ae:ad:fe:f7:86:bc:94:61:5d:5a:13:92:ce:32:
d6:99:36:62:82:58:b6:ac:7e:a3:ec:2d:11:1e:b8:22:72:de:
11:35:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:59 2026 by rpki-client