Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier: uwuGOObk7UBk3ANZewXqVS/gGYwyfUfbxLVDLMBUDCU=
Subject key identifier: 67:8D:5B:D3:57:1B:5A:68:F3:93:FC:51:CF:E1:58:23:ED:0A:4D:5A
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer: /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial: 019CAAC6A9480678C1C4903A486DF57562F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number: 16E1
Signing time: Sun 01 Mar 2026 19:01:12 +0000
Manifest this update: Sun 01 Mar 2026 19:01:12 +0000
Manifest next update: Mon 02 Mar 2026 19:01:12 +0000
Files and hashes: 1: HW-WD3YmA183Eg5SjeKZRN7F6vo.roa (hash: qS+dps2UAxlaxbw7uwyr1mlazMmXktC7iMhFMsxdPKo=)
2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: RAwoebUejPbSDxDckJOb66zCqrERsA+3YE0Mcshp70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a9:48:06:78:c1:c4:90:3a:48:6d:f5:75:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Validity
Not Before: Mar 1 19:01:12 2026 GMT
Not After : Mar 2 19:01:12 2026 GMT
Subject: CN=678d5bd3571b5a68f393fc51cfe15823ed0a4d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:26:c1:5f:46:a4:6e:18:ec:63:a1:55:31:
de:bd:09:51:37:5a:3f:64:8e:1b:bc:d7:44:41:83:
c3:63:2b:61:c7:57:76:78:67:50:95:5f:1c:93:de:
96:e1:96:68:35:8b:9e:6c:0b:6b:a9:14:21:22:aa:
9f:e1:e4:47:c1:8d:ab:9d:4e:b2:3f:2a:cf:07:6d:
73:23:f7:bb:53:e8:8d:98:00:3f:26:29:9b:17:ea:
9f:fe:6d:6f:da:1d:9d:11:21:32:bc:f8:1a:df:ee:
41:b2:3e:e5:e9:42:b8:b4:1f:3e:61:26:69:0e:b2:
27:b8:4d:95:1f:16:b8:91:1a:48:48:e8:ff:c8:95:
15:be:40:6a:19:02:cd:39:b1:a4:e1:14:84:1a:ba:
3a:8d:be:8a:08:69:b0:d4:8f:12:0e:4f:45:19:de:
f4:0d:d3:bb:03:1e:9c:08:0c:c6:c0:36:fa:c1:d2:
92:5c:6c:08:03:97:db:b8:37:af:b6:fe:31:1f:c9:
b3:85:44:f7:62:4b:0d:88:22:9c:8d:cd:62:dd:1b:
f5:28:9e:dc:48:c5:be:6a:b4:96:ff:19:2c:e1:78:
df:46:53:46:13:48:92:b7:c0:2d:55:18:ea:32:5c:
1d:fb:fc:7a:62:7e:47:a3:2c:a1:31:22:04:eb:76:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:5B:D3:57:1B:5A:68:F3:93:FC:51:CF:E1:58:23:ED:0A:4D:5A
X509v3 Authority Key Identifier:
keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cf:3d:b7:e6:29:99:1d:3a:53:f2:b7:5e:b5:3c:bb:f1:3b:
e4:de:1a:38:01:ba:5c:68:d6:97:cd:8e:87:d9:91:a0:2c:eb:
f1:ce:ec:00:6e:ac:41:e4:f4:95:df:ff:2b:9d:d3:4f:6d:8e:
11:a9:4c:b6:78:40:cc:7d:fa:f0:4d:6b:c8:a4:86:58:60:0d:
ad:2d:d9:51:57:b6:45:8e:90:07:47:09:dc:92:35:70:cb:66:
ed:70:a9:9a:15:3d:7c:f2:7b:03:6f:08:27:fa:5f:28:5d:cb:
75:3c:5c:13:fa:25:3b:9c:e3:91:63:b0:89:07:4a:df:ae:36:
2e:50:bf:a8:f3:a1:e8:25:72:c6:7d:ca:ad:be:a3:3d:47:dd:
99:bb:85:0e:ef:3a:1e:72:7d:d3:3d:63:5a:6d:2e:93:c0:8a:
a9:47:40:5e:b1:fb:8b:c5:b0:e4:de:d5:30:34:ad:b0:f1:a1:
21:10:3b:54:b6:73:cd:1a:20:c6:6d:b1:5d:16:ef:bf:86:27:
4a:9c:96:ce:07:55:c2:4c:4c:d7:21:23:5a:87:ce:72:0f:be:
31:c1:7b:9c:66:89:a5:09:ee:e7:a4:5a:40:1c:88:54:2f:38:
c9:35:b8:7b:ec:92:e9:43:61:bb:c5:05:63:42:7b:35:14:31:
b5:0e:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:59 2026 by rpki-client