Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: opGw11Yi6lwJ4JjGpLHiufRNm29WbAAFa9GZNWXGnfo=
Subject key identifier: 3E:57:42:48:9C:08:13:99:FE:0E:C5:ED:3C:2D:FD:7B:CF:91:9C:79
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019CADFE1A956B5718CC56CED1F21E93815B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:00:37 +0000
Manifest this update: Mon 02 Mar 2026 10:00:37 +0000
Manifest next update: Tue 03 Mar 2026 10:00:37 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: ufKlJDYTRDVtJrLRI/VqynsvgqTFH048iFaPIthIo8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:1a:95:6b:57:18:cc:56:ce:d1:f2:1e:93:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Mar 2 10:00:37 2026 GMT
Not After : Mar 3 10:00:37 2026 GMT
Subject: CN=3e5742489c081399fe0ec5ed3c2dfd7bcf919c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:d5:2e:be:19:1d:1d:ac:cb:a6:91:f0:72:
e4:14:9d:52:db:27:9a:56:7d:2d:c4:aa:3f:26:a3:
86:4f:fa:d0:68:70:31:0d:74:40:b9:7a:40:b9:bf:
af:87:44:b1:38:b7:cb:90:59:34:dc:0d:80:fb:38:
e7:3e:ef:19:1f:53:12:d8:a3:91:7a:37:98:5b:18:
d2:ec:10:b0:86:bb:f2:b4:67:76:dd:0b:d9:2e:6f:
5a:73:ad:23:62:6a:ae:55:a9:23:db:44:d1:fe:2d:
05:76:36:ac:38:da:39:52:c4:0e:e8:c8:c1:dd:c4:
5d:7a:37:de:91:bd:bc:1e:c6:85:d7:e9:e6:44:b2:
f2:f8:10:c7:77:88:27:8d:7f:59:61:55:c9:c0:23:
14:1f:3c:83:56:3c:5d:d9:3c:e7:3b:bc:17:55:d4:
11:68:d3:97:ba:9d:d9:7f:e8:a2:10:ae:c2:42:95:
a1:af:f6:ec:8e:ea:0b:3f:45:4d:e5:2d:40:3e:3b:
03:a7:aa:dc:29:42:56:81:e2:05:d5:96:78:17:1a:
7d:f5:a0:6d:02:8d:c6:76:29:88:a7:14:6c:33:88:
d0:88:61:59:5d:64:89:69:f7:d2:c5:43:41:dc:6e:
fd:db:5d:fc:3d:e6:7c:7f:92:c2:bf:8f:e8:86:e1:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:42:48:9C:08:13:99:FE:0E:C5:ED:3C:2D:FD:7B:CF:91:9C:79
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2e:52:c7:58:5c:5b:fe:15:45:7e:e7:08:a1:b9:f9:bc:c7:
3b:3c:90:31:90:33:50:65:a2:59:63:07:89:bc:99:71:19:18:
44:84:58:6e:ad:56:26:66:6c:d4:e1:b6:8f:65:b4:08:35:07:
8c:5d:45:2e:5c:70:1b:f7:89:95:34:a5:d7:f4:46:b1:69:b7:
47:0e:27:b9:cf:7c:c4:4d:79:81:cd:d1:a3:3e:64:19:7f:71:
ad:62:e9:d9:ae:af:a9:39:d0:e8:b5:d3:06:93:4b:8b:ad:0a:
6b:44:37:aa:37:04:d2:08:24:e0:da:1d:9a:a9:fb:e2:18:b8:
6e:aa:7b:c3:31:4d:90:36:d5:b7:4c:33:b7:cd:30:b1:77:e7:
b9:37:35:10:2d:03:96:2a:6f:4a:47:b3:51:54:58:5b:3e:ab:
52:1f:0b:20:25:a4:ed:ae:7e:f5:38:06:35:2b:3c:f5:ca:25:
e5:99:ea:92:7b:87:01:c6:04:b3:97:80:f8:7c:fa:e4:5c:aa:
27:f4:52:8b:25:8f:f1:40:3e:66:fc:07:90:a4:01:5a:2b:91:
e6:ec:3c:44:3b:74:87:95:0d:a5:8d:a6:d7:27:2d:79:ef:f8:
28:f2:62:87:78:f4:e5:b3:e4:0a:24:aa:d1:fc:10:a7:e8:9d:
c4:6f:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:58 2026 by rpki-client