Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: lBZ3jOULrVJ+C7Ype85En5+nteb3z80wvY7qcnCoUWI=
Subject key identifier: 0C:7E:94:20:71:79:63:EF:18:E0:4D:A2:71:61:E2:DF:2B:CA:AC:C1
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 019CAC103A939B245A2A9B5D456A18047831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 1589
Signing time: Mon 02 Mar 2026 01:01:10 +0000
Manifest this update: Mon 02 Mar 2026 01:01:10 +0000
Manifest next update: Tue 03 Mar 2026 01:01:10 +0000
Files and hashes: 1: eUG_AmjvEk2Uh9jdu3zrIDZcE_M.roa (hash: crSLoIhk/emALC03/EeOK1gvgnibfibC83SpQwGH7wc=)
2: hAHPjweyfzEmZctOAqBgVej6D9Y.roa (hash: hZD266S3QeLuF8KPvtFtT0P+a47oHHfhQQOsd40VTSc=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: 2Wt64p+81LAQXKsbsCuoy0vcK5r03C8+/T6T28Ewj1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3a:93:9b:24:5a:2a:9b:5d:45:6a:18:04:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Mar 2 01:01:10 2026 GMT
Not After : Mar 3 01:01:10 2026 GMT
Subject: CN=0c7e9420717963ef18e04da27161e2df2bcaacc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:4d:b4:07:7c:66:64:fd:9b:9a:7f:db:63:
83:0b:06:2c:bd:d6:79:78:6f:e4:ed:ab:c0:e4:89:
f1:f3:31:11:56:53:de:1e:9f:1e:2f:08:eb:83:23:
28:8d:8c:39:fe:1c:3d:58:e6:a5:3a:8e:e4:dc:74:
50:15:60:b5:4e:44:ce:0d:a8:0b:19:c7:5d:34:3f:
67:ec:df:2c:3f:10:48:89:a1:8b:b1:77:82:46:b6:
26:83:14:bc:0e:a9:1f:42:e5:8e:62:bb:60:bf:9b:
d5:cf:a5:9e:26:3d:10:41:bf:a6:07:2b:dd:34:39:
93:f8:f8:23:1c:24:9b:fb:60:9d:d5:8e:e2:62:7f:
94:ad:e0:e9:8c:91:42:01:19:57:51:23:d2:39:2d:
3c:65:af:bb:8d:4c:ce:28:70:de:4c:e3:39:ff:bf:
b9:32:a3:e5:17:b0:e5:b8:1b:97:55:c0:3f:a1:f3:
9a:70:d3:f4:a9:a4:b7:79:ab:31:2c:e6:c1:fa:cf:
19:13:80:c8:98:11:39:f2:50:a0:8a:35:5f:dc:51:
6b:84:6e:00:79:d7:e6:c1:fa:af:58:a6:63:5d:da:
4e:54:31:0d:a2:6f:e7:aa:26:a4:44:15:fb:2f:78:
cb:f5:ad:b8:d8:67:01:ba:b9:7a:70:8a:10:a8:4f:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:94:20:71:79:63:EF:18:E0:4D:A2:71:61:E2:DF:2B:CA:AC:C1
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:e7:9c:4b:83:2c:0f:18:45:ff:8a:eb:96:26:6f:76:f8:
28:71:9e:da:66:a0:36:e1:e6:2c:b1:94:37:28:d4:65:be:0f:
94:8c:51:2b:c2:9f:f7:77:fb:d4:18:4f:6b:c2:32:8d:17:21:
ab:52:ff:f0:97:4c:9f:82:07:76:da:95:4f:cd:4f:cc:db:ee:
f6:a3:7b:4a:45:1d:5d:c3:62:a6:05:10:25:79:a0:38:96:ea:
94:b1:71:e6:b2:38:dc:f6:3e:7f:d4:3b:16:6a:17:df:0c:4f:
ad:e7:45:24:24:d3:fe:c8:e0:45:1a:88:9d:59:0b:37:71:6b:
8c:2e:2c:69:91:c4:43:7b:04:5f:59:5e:90:b3:c3:47:e1:57:
27:bf:43:3c:58:83:f7:54:72:53:5c:6b:ff:d3:71:81:9d:0b:
54:7c:84:38:f8:df:b4:96:f6:01:4d:57:91:7f:e5:19:8e:ca:
60:1b:39:db:cf:0f:ff:14:d0:a0:de:aa:29:4a:ec:25:a7:d2:
4d:7e:48:3f:b0:31:3c:7e:61:0d:41:22:97:61:4c:2e:a3:f1:
37:48:06:66:ec:13:b8:58:9d:6f:1f:9a:8e:7f:c0:8a:8b:7d:
15:80:1b:db:d8:cb:cc:11:9a:25:8e:d9:33:35:fd:76:69:50:
23:a7:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:08 2026 by rpki-client