Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: NFkXhaMKRJTtxncDG90U6N2Pm0jE7vDus5J4y/Rygts=
Subject key identifier: D3:8E:77:40:F0:87:69:B3:9A:8F:D4:50:A2:22:C4:EA:6B:11:B8:81
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019CABA24820C363D189EDBD60943F07EA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 04DD
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: 6XhRNflwuCiYF9gQ2g_easWtUa4.roa (hash: yHoCFnKYnwnTFsYyGnaFZYpzrID8T0Yi654/H4Ihcpg=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: HYMNmeAQyZkdOZ6q/EXwVmnfytxy8u2nYQTtTLRy0gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:48:20:c3:63:d1:89:ed:bd:60:94:3f:07:ea:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=d38e7740f08769b39a8fd450a222c4ea6b11b881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:b9:e2:92:c8:d7:92:dc:6f:69:5b:cb:5e:
a3:e5:c4:1e:1a:75:d4:de:a6:57:c8:f8:18:7c:7d:
ab:09:91:2c:72:53:17:a0:09:27:f7:b8:a8:68:f2:
5e:f7:94:c9:65:c2:e3:1a:5c:06:89:47:1c:89:99:
1f:65:9e:c9:16:4c:da:ed:10:46:fd:5d:52:cb:c3:
17:5d:40:ea:7c:db:7c:d3:9f:f0:57:79:d4:1d:32:
a6:32:e5:d8:df:7a:92:c4:7d:48:1d:c0:e7:e2:ab:
ef:99:7b:e5:3d:4b:f0:0a:e5:25:e2:24:64:0a:33:
7f:9f:61:dc:b8:4c:5d:03:56:c2:7a:ee:05:03:f6:
90:7a:5d:bc:12:8a:ea:1d:89:c3:b8:76:4a:7f:35:
db:c9:fa:d4:16:8c:5b:f4:c3:10:76:49:b3:b3:6c:
51:17:b5:78:5b:22:eb:90:3d:70:19:04:43:01:1b:
a6:dc:f7:6f:fe:22:59:03:28:bd:30:2f:d4:2f:a5:
88:4a:1a:59:76:78:0d:63:bf:59:fb:0d:65:ed:e7:
2e:b9:e9:aa:8f:e6:16:ab:ca:3a:55:94:62:3f:a5:
ca:22:31:c7:ab:dc:35:27:7a:75:02:6c:c8:96:b3:
1c:be:0a:45:75:b9:03:80:39:1b:6b:ba:58:e2:83:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:77:40:F0:87:69:B3:9A:8F:D4:50:A2:22:C4:EA:6B:11:B8:81
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:45:9a:48:83:35:e9:9b:a2:95:88:0c:be:ae:0c:0f:66:61:
e4:f7:b0:22:18:e4:ec:3b:d9:7b:e1:29:6c:87:a3:92:a3:98:
07:2b:ab:7c:58:1b:60:1f:0d:e2:ae:3f:4a:c0:77:b5:42:dc:
f9:f4:3e:e8:2f:17:9e:84:a4:7f:ae:bd:b9:3f:3f:c8:93:21:
55:df:95:1d:d9:1f:0e:2f:51:95:fb:6e:08:bd:ad:3e:28:df:
b3:fc:5a:56:17:67:5d:fd:c6:9b:c1:e8:b5:90:11:03:7e:a9:
9e:03:75:93:66:cb:43:72:f3:55:0d:a2:c4:3f:b2:98:a9:6c:
13:6d:af:be:35:46:1f:d3:d0:02:76:e3:9e:e0:4b:34:a7:59:
b1:3c:3c:5a:7e:c5:0d:ab:fb:72:df:fe:af:f6:8e:f7:89:14:
89:3d:cf:74:ae:e3:d9:74:12:1e:85:ba:ab:15:8f:bd:f8:3e:
c3:53:db:59:bc:fa:7b:c4:77:39:73:8d:a9:19:43:51:18:19:
0a:c1:2b:bd:10:a5:78:95:f7:67:17:c8:1c:2f:cf:2c:f4:96:
2d:74:a6:8e:09:86:f9:95:9b:20:01:c8:49:f4:50:4c:a0:9f:
3e:a7:1f:46:aa:32:41:dd:e9:43:d5:26:49:fa:92:0e:e0:12:
be:01:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:55 2026 by rpki-client