Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: G/5AlzVGKqcRTMcJ806HB3iLfUOdoFc13j/kS4SFOLc=
Subject key identifier: EA:53:AB:5F:EE:E7:C3:96:3F:40:44:08:44:2A:96:4C:74:73:2E:AC
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 019CA9EB47836D50A67CD2C81BD86EFCAB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 15:01:34 +0000
Manifest this update: Sun 01 Mar 2026 15:01:34 +0000
Manifest next update: Mon 02 Mar 2026 15:01:34 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: u9WFdu9Dmu7/9LaPBUcb9f5ZzjbWL5slTFxcgUOS8oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:47:83:6d:50:a6:7c:d2:c8:1b:d8:6e:fc:ab:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Mar 1 15:01:34 2026 GMT
Not After : Mar 2 15:01:34 2026 GMT
Subject: CN=ea53ab5feee7c3963f404408442a964c74732eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:fd:19:68:a7:19:4a:01:2c:ae:48:ce:5d:
13:f6:6a:2a:94:f0:eb:51:ca:fa:a1:87:c1:62:3f:
ea:df:dd:3f:e5:44:49:f2:7a:4c:ae:4a:f4:2d:eb:
02:13:71:ff:7d:e8:18:e3:9e:f7:8f:c0:75:c0:a9:
64:b1:0d:a3:d8:e0:eb:69:78:9e:5d:43:cc:a3:e7:
43:74:be:be:79:81:78:c8:b7:12:ae:62:2c:ae:bd:
dc:b0:f0:14:e9:64:c9:95:28:23:ed:66:93:80:aa:
af:b6:f5:28:61:dd:d1:d6:45:5e:f4:56:25:1a:a2:
12:c1:90:c0:36:34:6b:fd:92:6a:1e:95:00:65:91:
61:d8:cb:88:29:b6:68:e0:18:f1:cb:de:40:68:33:
e8:68:73:9c:5e:91:42:eb:07:7f:7e:7b:22:70:33:
88:03:c9:ed:15:a6:53:77:54:1e:44:7b:ac:53:57:
1a:2d:fb:07:6b:c1:63:32:a5:22:cf:c3:fb:99:9b:
9f:4f:c7:aa:82:c9:d0:8d:08:a5:bb:b1:c6:af:b0:
ae:45:d9:a4:65:94:ae:b1:7e:77:5c:e0:3a:e0:2c:
48:62:29:52:3a:ae:c6:c7:3c:6d:59:f4:6b:5f:06:
ec:59:32:08:52:8b:86:5a:d7:33:b4:56:fe:f9:9d:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:53:AB:5F:EE:E7:C3:96:3F:40:44:08:44:2A:96:4C:74:73:2E:AC
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e2:0c:b5:08:fb:a4:06:00:b0:f2:17:21:9b:11:83:cd:77:
11:61:e5:86:ad:dc:85:59:4c:7e:1e:f6:c4:74:15:ff:29:39:
f9:56:8d:ef:b5:8a:24:54:23:cb:37:2c:fe:c2:9f:09:cf:d8:
43:d5:36:08:fe:64:1b:c9:9e:c5:3a:ca:b2:cb:d7:a4:91:5f:
4f:82:48:04:86:38:63:bf:c0:4e:e7:cc:aa:29:f1:72:2f:0b:
f1:d6:08:9a:5c:19:a1:89:76:6e:fd:58:9b:8b:7d:0e:1f:ec:
83:7e:83:e5:bd:2f:a4:0c:d6:40:c6:65:f9:6a:14:03:3b:dd:
f4:7f:d9:4b:c3:f2:aa:28:6e:7d:96:ee:c2:9e:26:27:cc:8b:
39:c1:95:77:02:a1:2e:a0:fb:bf:72:bd:3a:4e:1a:01:c3:2c:
93:ef:6e:4c:e7:31:56:12:33:f1:2d:02:89:00:96:32:67:43:
c2:3f:d7:50:a1:46:3e:51:ce:3a:fb:58:47:b5:5d:ac:44:87:
9b:77:59:d6:7f:90:bb:50:47:ac:ca:3c:cf:cb:67:e8:0d:fe:
ed:55:d0:4e:7c:80:7e:cb:c8:12:ee:2f:6b:d7:35:f9:05:c6:
a8:f2:c0:99:bb:de:8f:c7:6e:ea:39:9c:68:b2:01:ff:03:a3:
d5:1c:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:24 2026 by rpki-client