Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: TyJLcm2DEg2mW4vhCJiQXkcf0dIOxCmFsjmcY9BdSnU=
Subject key identifier: 77:9F:4F:00:B6:30:3E:29:AB:BE:D4:D8:EC:C8:1F:CF:6E:E9:C8:23
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019CA945B629EAE3A8F8C9513DC529BC405B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 180D
Signing time: Sun 01 Mar 2026 12:00:43 +0000
Manifest this update: Sun 01 Mar 2026 12:00:43 +0000
Manifest next update: Mon 02 Mar 2026 12:00:43 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: whZGydutIgy4dSjjz0ZQUa6CPW6KZ1XsApwg9FZNc5w=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:b6:29:ea:e3:a8:f8:c9:51:3d:c5:29:bc:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Mar 1 12:00:43 2026 GMT
Not After : Mar 2 12:00:43 2026 GMT
Subject: CN=779f4f00b6303e29abbed4d8ecc81fcf6ee9c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:12:74:7a:b3:22:8a:bd:25:ea:71:d4:82:
5a:58:98:5c:c2:90:b0:f8:0d:ad:52:1b:d3:61:a3:
e9:f6:20:05:de:6b:a4:3c:d7:05:b4:2a:9d:26:8a:
4a:0e:f3:f1:c6:df:bf:ca:98:21:85:b5:bf:2f:4b:
ec:df:37:8a:6a:cf:e0:ce:55:13:47:36:85:d8:48:
7a:12:7a:f8:da:07:bb:7d:44:4c:af:d0:4a:fb:d9:
c5:36:f3:15:d4:dc:e4:bc:23:bd:50:0f:54:84:08:
5a:c9:26:71:3b:c3:51:04:71:a4:17:f3:0d:3c:c4:
57:da:92:ed:b8:df:5d:f5:a2:a2:6e:92:40:8e:7d:
6b:f5:8c:db:d1:a5:00:fc:b2:95:09:03:d6:27:55:
42:4a:01:16:38:f7:55:99:d0:08:82:34:8f:c7:d7:
f5:02:ed:8d:07:a1:02:0b:51:66:05:ec:16:b6:80:
16:67:80:a9:64:36:46:58:96:0a:9b:05:49:bd:fc:
79:40:42:ee:50:31:86:f1:e1:02:c3:5e:6c:ec:fb:
2c:3e:0d:40:2a:74:fb:c1:91:c6:84:a8:d6:ba:0c:
a6:e2:a6:c7:26:91:d2:8b:2c:d4:f9:b4:dd:22:9b:
88:5a:b2:3d:c1:b7:77:91:e5:53:5e:10:b2:82:1f:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:4F:00:B6:30:3E:29:AB:BE:D4:D8:EC:C8:1F:CF:6E:E9:C8:23
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:1d:70:2a:33:41:4f:12:3b:13:07:7d:35:63:b6:b0:9a:
9c:08:f9:dd:51:52:39:be:91:5e:21:29:c4:25:b4:49:32:c2:
2f:25:c3:1f:0a:15:84:c0:5f:30:a7:cb:a5:72:7a:e0:7d:bf:
8e:cb:00:13:8a:eb:98:89:7a:a6:f7:62:fa:47:94:68:51:e6:
4e:3b:82:44:20:a9:21:ed:a1:65:94:cb:4e:3f:f1:1d:2b:da:
cf:a2:17:86:b8:7d:f9:06:06:c4:15:15:14:60:1b:73:c3:2f:
cd:36:b9:ae:c2:5d:eb:38:3b:af:a1:3f:b6:bd:b6:e1:8b:a2:
1f:f6:25:ba:e6:74:a3:42:26:e1:d5:50:83:15:17:4f:21:ce:
45:2b:3c:af:1d:16:d0:5e:db:93:99:42:b8:11:8e:6c:e9:ee:
6e:35:28:9c:3c:85:7c:6d:bc:35:9b:57:4b:44:77:90:a1:c5:
50:44:ab:76:44:f8:15:e3:fc:44:38:59:5f:80:30:8f:dd:65:
7c:ea:b5:6d:a9:fa:79:96:50:20:05:ca:69:ac:3b:f7:cf:7d:
c9:c0:84:2f:e8:6e:8c:04:33:70:78:ec:48:ea:02:3c:ca:3f:
d9:83:a7:fa:3e:0b:4f:11:7c:ac:d5:de:70:c1:3a:fd:c9:70:
37:65:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:55 2026 by rpki-client