Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: 8h4HxdbXFPHHr+3UKiHNhrFKx9KNfgHnRxIhh+i0POk=
Subject key identifier: 2D:B0:00:41:E8:9F:2C:5C:D5:AA:B3:9A:3F:89:0A:33:7C:C2:9F:76
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019CAB3459C8C12FE5282047182DFE978544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 1867
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: JusMkeLnpwZerjRmrLfh18Ll6fs.roa (hash: 3QHrOt+mUzTsdAhnaZvehOeizpN1D+y9MLiru36nQ0s=)
2: MIyWfq9gpX_eI_ED1ii5vOGaWmM.roa (hash: u6guXrywPfx5K9H1XrSR92ZwtD6DI3B8S7D6GcWPq6E=)
3: QecGwK74B6zUHtUhTMCZnZhdc-I.roa (hash: aKnsrMiz1TExOCFQauB98iUzX+RHG82R4UA+NNcGRUk=)
4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: jozeNzpG/njwFkdFyR6yvbZmuD0wRCgtABUCz+GbIzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:59:c8:c1:2f:e5:28:20:47:18:2d:fe:97:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=2db00041e89f2c5cd5aab39a3f890a337cc29f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:fc:b1:c1:73:d3:66:84:4d:c5:e5:6b:a5:
86:78:ae:71:13:73:a9:28:8f:83:3a:c5:a2:50:c7:
50:be:5e:f1:8a:c5:a7:d6:05:69:5f:8d:5d:c4:12:
1e:8e:20:9a:2f:88:51:94:73:25:09:a6:13:55:75:
d9:08:04:fd:68:2b:56:27:19:19:94:3f:da:40:ce:
b1:2c:17:e2:92:b6:dc:5d:1d:5b:11:c9:0d:a9:30:
87:f1:97:44:09:bb:bc:4c:54:c9:4d:e4:0e:85:d0:
37:05:c3:fa:00:8b:50:eb:b7:3f:c1:06:b7:97:03:
17:7b:01:b9:69:85:ee:a7:71:b6:9f:6d:d2:ac:f1:
fd:b8:48:f2:f4:9d:7c:4f:0c:4c:98:c5:25:f0:82:
78:4c:d1:47:65:56:93:e6:bb:8c:33:c3:50:b3:23:
65:3e:da:a8:45:88:d2:59:e8:cb:b7:98:05:de:ae:
0b:ed:f4:5d:87:0e:fa:5b:09:04:4d:4a:46:11:e5:
60:9e:cf:aa:eb:d6:be:b9:1a:7e:e5:6a:c3:52:2c:
51:b2:3d:c8:4c:1c:4b:b8:a3:04:5c:47:72:5a:ad:
8c:8e:f0:6f:52:1e:81:27:e9:c0:18:0c:51:f6:c5:
3b:1e:ce:18:bb:25:67:80:fe:53:f5:e4:0d:96:5a:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:00:41:E8:9F:2C:5C:D5:AA:B3:9A:3F:89:0A:33:7C:C2:9F:76
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:d3:86:7b:d9:2d:e5:5a:22:61:2c:9e:d3:67:15:8f:97:
19:04:54:59:1d:b2:c6:a6:2c:9c:62:65:ce:81:f6:83:8e:be:
a7:18:cb:dc:1f:a6:21:fd:6f:16:d2:0b:56:83:cd:2c:e2:c5:
56:ca:6e:27:e0:67:a5:f4:57:99:57:50:04:78:33:46:8b:c1:
0f:75:ae:3a:ab:95:99:a0:5a:0c:e3:60:65:67:5c:f9:11:34:
3e:24:27:54:6a:b6:6a:55:f8:88:5a:d7:1e:e2:e6:f9:ae:c1:
03:79:30:86:51:8e:14:41:46:16:1e:2f:2b:a1:5c:fe:a1:93:
ae:ae:e9:92:f8:ef:c8:f5:51:2d:36:0b:f9:6f:73:f5:5b:2d:
7d:65:21:96:dd:28:37:d9:f6:39:ae:3e:fe:9e:3c:cf:42:df:
cb:f8:e8:35:56:a5:b4:f6:e2:67:12:ca:8c:7b:b3:9d:e9:f7:
02:6f:3f:29:ad:3a:c5:b7:6c:c3:b0:18:ff:ff:4f:81:db:b9:
00:dd:2b:c3:7c:0d:50:2c:cf:03:c5:82:45:ba:9b:e2:4e:57:
09:15:ef:4e:8f:ec:c5:0b:bd:6f:0d:e2:a6:d4:a8:79:8a:5c:
e2:c0:5d:b9:39:da:70:a4:6b:e3:96:95:1c:8a:c5:48:9a:69:
82:51:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:29 2026 by rpki-client