Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: 0gOt85QzNvtpzBIFcfF8vMxnDr9V9lbwj/qDfV24ZVA=
Subject key identifier: D9:89:D0:03:3F:F6:6A:3D:D3:92:28:41:E3:E3:9F:34:B3:79:55:0B
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 019CAD22E16AA5379B6906056915B3BB14A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 1056
Signing time: Mon 02 Mar 2026 06:01:10 +0000
Manifest this update: Mon 02 Mar 2026 06:01:10 +0000
Manifest next update: Tue 03 Mar 2026 06:01:10 +0000
Files and hashes: 1: Am9Fuzo8eGiZZ7qmRGeVzeJ7O8k.roa (hash: Da6u9ERoM1g/y/tKKfNZmlBoBL9DF5Ukejxp9AtmT+E=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: atF4YNA4Bp/XlmkYV1P2s0yKOPmORiXA/VcL3tEnWoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e1:6a:a5:37:9b:69:06:05:69:15:b3:bb:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Mar 2 06:01:10 2026 GMT
Not After : Mar 3 06:01:10 2026 GMT
Subject: CN=d989d0033ff66a3dd3922841e3e39f34b379550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:c2:a5:b5:33:31:02:a1:8e:5c:6a:23:c3:
e5:a0:bb:d5:3e:f6:69:35:b5:48:86:54:62:12:42:
c2:6a:ef:99:62:a9:3c:dc:cd:56:32:f9:07:42:2e:
b1:51:03:bc:7b:d3:4e:ca:08:85:da:44:30:7e:80:
0e:a0:49:c7:e1:77:cc:c7:57:37:68:41:6e:c0:87:
48:67:98:6c:cd:b6:f0:5f:8d:8b:ca:11:70:dc:18:
53:bd:8b:84:bb:38:e7:25:aa:62:e7:6e:5e:ed:e1:
c6:dd:af:ca:d1:8e:d9:f9:67:44:9b:3a:3b:1f:fb:
9a:d3:1e:06:ec:64:c7:67:a8:9b:17:ac:64:f6:28:
3d:9f:eb:2a:25:02:dd:f0:b7:6f:37:ad:13:8f:e8:
0b:6f:78:8b:06:da:e0:a5:fe:7c:a6:a9:90:a6:68:
a9:ef:2c:f5:c3:29:51:c7:c7:50:6a:38:03:41:2a:
f0:22:f0:66:3b:7a:53:46:9c:1d:10:f8:2e:ec:1f:
5b:7b:24:e5:8e:b6:cf:9b:4b:cc:10:89:d6:cb:4a:
1a:30:e2:d4:99:0a:40:99:f3:a0:6f:02:38:06:c8:
4b:5b:3a:40:0c:cf:21:a3:32:a0:6f:d7:3e:c8:9f:
94:cd:da:e6:3b:78:ea:ff:17:a2:0c:d7:19:8e:fd:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:D0:03:3F:F6:6A:3D:D3:92:28:41:E3:E3:9F:34:B3:79:55:0B
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7f:d3:78:88:d4:fb:e7:b9:48:83:a7:58:96:9c:73:57:b3:
69:5a:33:10:cc:7e:df:b1:8b:c8:d9:4b:9e:19:bd:2a:44:61:
95:00:6d:05:a8:e5:05:71:84:fd:df:3b:2c:6d:f2:7c:2a:1d:
90:26:a7:57:13:bb:ac:f9:d3:d7:b9:87:ca:d7:4c:94:26:3f:
e7:de:08:a3:2a:03:47:64:7a:3c:c3:9b:90:e5:c5:68:9a:be:
b3:1a:48:f1:ad:b8:14:28:45:e3:ed:db:79:dc:52:2c:e7:1e:
17:f6:75:b2:cf:9f:6f:09:b9:0e:d1:42:b8:f6:a2:38:d3:e9:
ee:ef:f2:64:09:f5:2a:56:8f:56:ea:0e:de:17:14:77:4c:27:
7a:26:50:43:8b:57:8f:55:59:f3:e3:17:9c:52:41:0b:4e:09:
b6:c3:f1:03:63:2d:43:71:9b:04:23:75:a9:c2:c8:54:c3:e1:
0f:0b:a1:05:ac:88:71:e5:56:f2:e9:78:5d:34:af:e3:b8:77:
33:3a:d9:e3:e4:89:48:f8:b6:31:ba:f2:80:14:f3:0d:e6:c1:
e2:0c:a3:4c:ba:ea:cb:d8:1d:d0:42:22:74:e3:bc:03:90:64:
1c:ad:d1:ee:2b:a8:f8:de:ee:5e:f6:8c:ee:7d:ef:7e:71:8f:
4c:f8:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:06 2026 by rpki-client