Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: j0+F/wMdg9vFUPf0ojyhs0MhMxVYmzC9mrJbmoIC8aI=
Subject key identifier: 47:C7:57:C8:84:6A:4A:D2:AC:5F:28:B9:49:E5:8F:F3:97:74:51:A3
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019CAA58301ADE7F1086307BA620E56FB06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: P85nMUUsWvtlty3MsyeYuR91WlA.roa (hash: 0M7UxUnF0/zFcPRAsWHHJdG3pK8LxaWyG1SYbXqBeBM=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: P7Ol99Rmj0rK6p8xhXMCBZXX74ePMs2LQlfUUYwJwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:30:1a:de:7f:10:86:30:7b:a6:20:e5:6f:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=47c757c8846a4ad2ac5f28b949e58ff3977451a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:ed:65:8b:ee:87:74:64:cb:a1:76:89:6c:
24:45:d3:18:c9:c7:1d:49:6a:72:75:cd:b3:c6:77:
99:71:f7:8c:e8:d7:dc:23:86:17:4e:41:43:d2:af:
65:23:93:00:a6:1b:a8:2a:ca:53:60:e0:2a:6c:cb:
90:ef:27:10:ff:4e:96:41:f6:1f:83:61:66:1d:39:
37:37:a0:a0:3f:42:99:fe:f9:57:26:4a:24:95:54:
0b:9a:31:62:77:f7:d1:24:82:58:78:b7:35:54:39:
03:b9:82:b1:7c:b0:c1:a7:9d:11:f2:ac:ca:d2:a6:
ea:f6:23:5d:d3:95:f5:ac:8c:f4:3b:ae:e8:fb:96:
47:d7:11:08:28:9d:15:c2:e8:06:92:18:17:c5:8b:
e6:76:e6:d0:dd:04:60:cb:fe:37:a4:68:4e:f0:58:
42:d3:56:ae:a7:d3:23:ff:38:b1:84:7a:8a:84:79:
69:96:f7:f4:7e:8e:64:0d:cb:7c:f6:ab:84:2e:42:
2e:02:51:bd:5c:7e:d4:2f:5d:29:a6:f9:08:43:fe:
b8:27:e2:86:99:23:f5:51:b7:87:0c:93:a5:51:76:
aa:9b:76:37:a8:35:83:fe:82:ba:c0:a1:68:4d:35:
7e:2d:47:02:76:ae:7e:1c:b3:5d:03:a0:67:51:cc:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:57:C8:84:6A:4A:D2:AC:5F:28:B9:49:E5:8F:F3:97:74:51:A3
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:99:ce:33:ca:15:d3:cb:cb:45:ec:4c:b6:dd:97:1a:88:39:
57:d6:8f:5c:3d:e0:22:53:7c:1e:ce:ce:f7:b2:24:47:49:c5:
cf:25:82:59:f3:62:d1:70:4e:a0:c7:93:95:6d:68:67:75:48:
7c:7f:2f:36:00:28:09:d0:7f:6a:e1:77:94:17:a0:fb:ce:7c:
12:f4:5b:76:e6:c8:95:2b:2f:56:6e:be:4f:55:f4:eb:7c:f0:
0f:e2:b1:44:e7:f3:9b:4a:ed:db:3a:f0:8d:17:cd:7c:f8:68:
84:69:10:54:30:08:22:88:d0:80:1a:be:26:4c:f7:c4:30:21:
ec:ae:1d:6b:fa:49:b8:29:bb:0e:b8:21:a1:d4:6b:a8:70:61:
08:f0:6a:0c:12:78:db:d9:96:ba:1f:2e:20:41:ad:3e:a1:33:
0a:1c:85:9c:b0:04:5d:50:e3:06:56:a2:b9:35:01:15:d2:a8:
e8:75:e2:78:de:db:92:94:02:c7:67:4e:df:99:ee:9f:98:bb:
b0:de:96:76:61:90:33:45:3b:29:81:76:c5:4e:08:84:a6:22:
1a:d4:12:ea:46:ba:03:90:3c:f2:08:5a:d8:f6:c1:7f:4b:a6:
48:a5:af:3f:3e:20:0b:93:59:ee:6a:e6:d8:eb:24:33:8b:96:
5a:40:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:05 2026 by rpki-client