Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: Je8CYG1aXw31XJCs/9STT+l8SvN3h21SXiREJLeiMv4=
Subject key identifier: B7:D9:24:C4:5B:6B:3B:7B:9A:D4:0F:EB:63:19:E5:0E:22:79:82:92
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019CACB4764F722CB9FBAB4D0121FB963AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0E46
Signing time: Mon 02 Mar 2026 04:00:33 +0000
Manifest this update: Mon 02 Mar 2026 04:00:33 +0000
Manifest next update: Tue 03 Mar 2026 04:00:33 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: KrWl1w/xsDalmjdp4G8ZIXgL4/iljkE3uciWXd/y3rQ=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:76:4f:72:2c:b9:fb:ab:4d:01:21:fb:96:3a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Mar 2 04:00:33 2026 GMT
Not After : Mar 3 04:00:33 2026 GMT
Subject: CN=b7d924c45b6b3b7b9ad40feb6319e50e22798292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:30:de:16:8f:1a:fd:74:f2:b4:05:03:22:
32:ef:67:cc:c1:58:cf:b0:a2:70:33:cc:19:24:02:
da:91:79:63:fc:21:6b:bd:7e:2d:25:f8:1b:09:00:
c4:c8:fe:de:46:7d:27:fc:10:58:c1:fb:02:ca:0f:
bb:91:bc:14:e5:10:6b:fe:45:34:7a:66:28:19:6c:
96:1e:4c:b2:bf:5e:f7:81:c4:d6:0e:8a:9d:9a:cd:
df:08:18:52:17:7b:e9:14:93:12:8d:6d:91:56:d8:
15:ee:88:0e:cb:e5:43:bb:45:31:df:19:5c:f9:f4:
b1:f4:92:ff:8e:f1:ef:ac:ff:ca:a4:43:33:0c:c0:
53:c0:aa:8b:1d:0b:7c:5d:b5:81:e6:7a:5d:71:94:
ff:a5:a4:4f:68:d7:d4:b4:29:d5:1c:e5:38:da:91:
83:67:42:05:32:0a:b4:a7:71:46:38:86:49:08:15:
73:e1:17:3e:47:87:7e:96:19:e4:48:74:82:dd:59:
a2:c6:d9:da:69:78:20:d1:2a:17:8f:53:c8:e8:65:
21:2b:1a:5f:36:00:03:87:db:ab:39:9c:18:50:f2:
b8:74:d4:48:65:e0:f6:c2:7f:6f:ad:10:0a:8e:85:
8a:5e:2a:ac:19:7c:e5:df:d8:0a:b8:72:2d:ba:e6:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D9:24:C4:5B:6B:3B:7B:9A:D4:0F:EB:63:19:E5:0E:22:79:82:92
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2d:dc:ce:e5:bb:64:59:f4:7d:c2:53:b6:e6:70:7a:9c:18:
86:8d:e2:79:7d:72:66:5e:1c:0b:c8:1c:b3:54:3d:9f:7d:e2:
5d:db:95:ac:e9:f7:1f:e4:da:ec:3f:96:d6:4c:43:74:82:2a:
55:91:70:e4:a1:8d:49:b9:97:91:6c:d3:75:81:64:bf:07:dc:
94:a6:80:4a:a2:b6:ca:a5:a5:d1:d3:c8:b4:56:4c:ec:23:82:
6c:38:9b:fc:8e:e9:df:51:43:6e:0a:42:7f:e0:84:a5:f1:13:
93:2f:27:86:d2:33:65:b5:1b:6e:c2:5a:77:95:7f:86:df:8f:
11:49:be:45:5c:c3:5f:63:98:fb:4b:47:c6:e5:a5:ca:3e:c6:
fc:ed:0c:2d:d1:42:90:01:cc:83:a0:59:39:04:4d:2f:9e:ad:
94:b8:8c:39:35:c0:91:3c:bd:7f:81:71:04:b4:41:59:6b:5f:
16:b2:02:1d:dc:62:11:4f:d9:61:19:54:c7:57:7b:3f:fa:1a:
0d:f8:2b:11:a5:fc:8b:5e:9e:94:e6:18:a7:a3:2d:5a:e1:99:
00:80:ba:14:20:49:f2:00:0f:c6:74:4c:0d:7d:ff:de:8b:8b:
d8:15:65:6f:ed:fe:48:f1:16:45:8d:0d:f4:53:ca:3a:2c:d2:
ad:7d:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:38 2026 by rpki-client