Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: J74v3PVNGJz6HRAnO9pYHSRxyQG2FWFzCVl0mFCczY0=
Subject key identifier: 12:E8:90:70:2E:7D:DB:0D:CE:B6:09:CD:7C:50:19:D5:4E:E8:9D:94
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 019CAC47520B9D66AEF13E56006D175B985A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 17B0
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: Wazx3LZDxhV9N5q9JPv8h2Qs-YE.roa (hash: KJ3tWSAQqQBPzmhSgtG5aN79Rwb62j6iubPkCvI++ds=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: AzjZFWho6FG5Y1XJMRTtKXQ+Aszfm4aWZm1dzPawmGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:52:0b:9d:66:ae:f1:3e:56:00:6d:17:5b:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=12e890702e7ddb0dceb609cd7c5019d54ee89d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:df:85:1b:5d:42:59:aa:c1:5d:02:4d:56:
98:8d:d7:ab:2b:62:32:ee:df:5e:fd:5a:62:91:5d:
82:38:77:6a:06:59:a2:e4:b9:e6:b6:b9:a6:a1:e5:
fe:76:46:0a:ac:df:c1:2d:16:2a:ef:51:ff:1b:6d:
b9:93:4d:03:cf:c8:ef:a5:63:ec:be:a7:60:46:b6:
88:81:73:59:99:f3:ea:b6:36:cb:75:ce:28:93:d3:
53:3f:27:ed:56:c9:e3:21:2e:5b:76:3c:26:c4:f1:
8c:6c:f1:87:fe:db:57:29:2b:85:d1:61:cd:86:d3:
54:1a:3c:aa:7b:4a:9b:63:8c:94:1d:09:f2:2f:18:
93:4a:45:30:38:34:b1:46:7d:55:d2:66:c4:b4:d1:
3d:b3:98:a6:f8:6d:5b:1c:76:ba:f6:08:e1:9a:90:
1d:b2:df:64:18:66:4a:fd:f0:e7:eb:0e:60:40:b0:
2a:49:5c:5b:f4:fc:aa:d4:fc:42:d8:34:ca:d0:c3:
a6:f7:ff:37:22:66:75:62:b5:b0:1c:83:d2:ac:66:
1e:be:c5:ee:b5:83:fa:b3:74:a5:ac:96:87:94:eb:
89:a6:e9:ef:36:b1:48:ce:77:c4:6e:fd:48:2f:42:
52:e7:90:7f:7b:53:9c:5d:27:88:91:15:55:b0:5c:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:90:70:2E:7D:DB:0D:CE:B6:09:CD:7C:50:19:D5:4E:E8:9D:94
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:44:7c:b0:b4:a3:42:4c:f6:b5:f2:9e:bf:4a:dc:4d:7d:08:
43:ef:a4:0c:b6:7d:92:d8:ef:62:10:23:91:d6:a9:8c:21:72:
24:37:8e:22:17:5a:b5:f1:94:a8:3a:91:fd:56:74:54:33:ee:
fb:6a:4e:99:5b:12:f7:55:1f:5d:48:91:c8:7d:c7:71:b0:99:
bd:c3:70:8f:74:ce:4e:73:9f:c6:69:4f:02:cf:7e:65:3c:58:
bc:d3:13:08:5f:4e:58:05:c9:66:d0:43:d1:c9:ff:24:05:63:
67:7f:35:06:8c:80:e3:d4:ef:7a:c1:40:6b:f9:f5:37:43:27:
9c:d7:da:14:a4:a0:6a:78:ac:c4:98:06:6d:b5:a0:09:df:bb:
25:97:04:de:03:34:6e:aa:3d:7d:a1:ec:61:40:f0:cd:22:83:
84:ec:61:36:e9:10:58:c8:c1:8c:d8:43:47:06:aa:c8:8f:f9:
ac:3a:60:57:15:72:ab:3e:86:04:ce:5f:18:91:48:74:c9:41:
29:25:f8:90:91:22:a8:13:77:e0:1b:b8:13:08:22:03:23:3c:
3f:da:de:90:a2:9e:bb:b2:82:6e:dd:fa:f6:4a:dd:79:63:d7:
c9:9b:41:58:64:71:e4:1e:d4:88:bc:ca:f7:11:45:8c:48:15:
6e:0b:ab:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1ILnWau8T5WAG0XW5haMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMjlhZDIyNTc5YTY4MDVjMWZmOGIxZWU1ZDczNTI5MGMw
MTM0MGIwHhcNMjYwMzAyMDIwMTIxWhcNMjYwMzAzMDIwMTIxWjAzMTEwLwYDVQQD
EygxMmU4OTA3MDJlN2RkYjBkY2ViNjA5Y2Q3YzUwMTlkNTRlZTg5ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7fhRtdQlmqwV0CTVaYjderK2Iy
7t9e/VpikV2COHdqBlmi5LnmtrmmoeX+dkYKrN/BLRYq71H/G225k00Dz8jvpWPs
vqdgRraIgXNZmfPqtjbLdc4ok9NTPyftVsnjIS5bdjwmxPGMbPGH/ttXKSuF0WHN
htNUGjyqe0qbY4yUHQnyLxiTSkUwODSxRn1V0mbEtNE9s5im+G1bHHa69gjhmpAd
st9kGGZK/fDn6w5gQLAqSVxb9Pyq1PxC2DTK0MOm9/83ImZ1YrWwHIPSrGYevsXu
tYP6s3SlrJaHlOuJpunvNrFIznfEbv1IL0JS55B/e1OcXSeIkRVVsFxmTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLokHAufdsNzrYJzXxQGdVO6J2UMB8GA1UdIwQY
MBaAFJAprSJXmmgFwf+LHuXXNSkMATQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2It
Yzc5OWQ2ZDYxNDRhLzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lZGFlZmUtYzg3MC00MTQ3LTllM2ItYzc5OWQ2ZDYxNDRh
LzEva0NtdElsZWFhQVhCXzRzZTVkYzFLUXdCTkFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQER8sLSj
Qkz2tfKev0rcTX0IQ++kDLZ9ktjvYhAjkdapjCFyJDeOIhdatfGUqDqR/VZ0VDPu
+2pOmVsS91UfXUiRyH3HcbCZvcNwj3TOTnOfxmlPAs9+ZTxYvNMTCF9OWAXJZtBD
0cn/JAVjZ381BoyA49TvesFAa/n1N0MnnNfaFKSganisxJgGbbWgCd+7JZcE3gM0
bqo9faHsYUDwzSKDhOxhNukQWMjBjNhDRwaqyI/5rDpgVxVyqz6GBM5fGJFIdMlB
KSX4kJEiqBN34Bu4EwgiAyM8P9rekKKeu7KCbt369krdeWPXyZtBWGRx5B7UiLzK
9xFFjEgVbgur+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:53 2026 by rpki-client