Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: zADgqj1WnogSNlAvSwTC4v2fEeklGXSYiAi0hV8EjqQ=
Subject key identifier: CC:69:39:E8:FE:68:22:61:BB:D5:98:33:7D:D7:6C:CF:B1:7C:6C:50
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 019CACEBA4F231124A5B78098ABA3D01C442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 1745
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: x1v96dR3H19b95byNWqU35ARPOw+d0A3sGnmxmdhNaA=)
2: vG3ETTisgvR8uHGsP-7vqX6UxOU.roa (hash: jLQe3Tz3snh6BMY0+c4cK7G/UdU3rVW7/eW9hxngsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a4:f2:31:12:4a:5b:78:09:8a:ba:3d:01:c4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=cc6939e8fe682261bbd598337dd76ccfb17c6c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:83:78:56:55:69:e9:9f:af:cc:80:b1:78:
59:4a:54:72:67:62:9a:04:dc:ca:58:cb:9a:8c:b9:
a2:c4:d3:f5:3b:cd:73:8b:43:e5:05:70:c9:0b:f4:
6f:97:88:a2:e6:59:aa:ad:5e:66:db:7d:59:2f:1d:
25:c0:c1:9e:8f:62:b7:24:97:7d:9d:1f:ca:c6:c3:
21:72:75:18:9e:15:41:9c:6b:67:72:36:ef:e1:be:
fd:b9:5a:14:3a:09:97:af:df:85:a7:9b:3f:5c:e7:
cf:34:b7:48:67:34:74:46:33:9a:f1:55:da:27:97:
94:1c:eb:82:1e:99:6d:cf:84:b2:9d:c4:00:0f:fd:
46:91:de:eb:31:8c:d8:d5:92:00:fb:32:48:76:31:
1f:99:19:cf:05:6c:be:37:89:23:76:ab:ef:56:df:
06:c9:a2:52:ce:7e:3b:8d:b2:91:b5:22:42:63:40:
41:ec:dc:0b:5b:eb:9e:5b:9d:48:4e:59:70:39:5f:
66:05:c4:a9:77:7f:a4:76:bd:a9:e4:a4:82:65:a3:
e9:4e:7b:5e:25:0b:44:ba:13:4f:94:30:b9:43:4a:
63:14:c7:01:44:ee:d1:5e:dc:c0:5a:2f:5c:71:a1:
af:55:3e:ff:eb:f6:ff:b1:41:27:a9:73:dc:0d:ff:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:39:E8:FE:68:22:61:BB:D5:98:33:7D:D7:6C:CF:B1:7C:6C:50
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:ac:29:13:21:7e:61:e8:99:a0:d2:c0:e4:93:60:74:62:
dd:01:44:01:10:f3:f8:fc:44:46:0f:b1:e2:30:b3:ec:9b:59:
d5:64:95:22:3e:12:1a:63:24:c0:e7:44:03:27:a1:08:cc:09:
4d:d5:02:93:a3:f4:10:de:0c:e6:ac:1d:c1:7f:17:74:56:f7:
85:ff:7b:d1:28:58:42:e9:17:ac:a1:cb:04:c7:61:0d:ff:7b:
b7:f2:5f:56:64:72:a0:c0:69:6b:5b:0f:94:7b:82:01:7d:ca:
8a:10:19:16:ec:2d:ce:8d:28:55:f5:fe:c2:07:bf:65:ee:7b:
46:7e:a6:88:d9:97:b9:c4:61:4e:8d:60:31:68:8e:67:10:c6:
a5:bf:64:98:06:4e:3a:ca:43:05:4a:6d:01:95:3d:f7:e9:ad:
9b:1f:d7:76:1a:ca:31:65:d8:56:73:d9:16:cc:ac:85:e5:64:
ec:20:6f:09:f7:c5:0a:38:ac:de:c3:c5:ff:e9:a7:59:7d:d5:
92:01:18:87:70:69:0b:6b:8c:f4:d5:54:e7:a9:bb:7e:a5:f5:
6d:87:8c:b3:b1:e7:30:35:44:b1:72:e0:81:fb:60:02:ca:0f:
c9:60:fa:ed:04:bc:4a:70:0e:fe:17:e0:3d:4f:5d:cd:27:29:
31:1e:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:54 2026 by rpki-client