Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: hxVkVWT2rO81W4G9PAhLneKWeJlM0NK6iXmFjfoM+ks=
Subject key identifier: 9A:FF:BF:1E:8D:16:5F:9F:04:54:32:64:B1:F0:65:92:91:3F:7A:D5
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019CAAC6BA3718E58D01A94997ADFDB52866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: I0UZpWboc5cQ0LGg6PNXqF6lSBw.roa (hash: P/ftwFa1S2VKjprGcKvJDhqUROD7iDtwsuNt3XMlEQ4=)
2: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: d+xPd2lgkN2N98QUvJv6l8oMb+wkWXAcUPN+XE+pJdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ba:37:18:e5:8d:01:a9:49:97:ad:fd:b5:28:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=9affbf1e8d165f9f04543264b1f06592913f7ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:bd:ce:25:e9:79:4d:74:6f:ad:0d:69:cb:
cc:45:70:34:1f:dc:ad:8b:48:3b:e9:da:e1:b2:7e:
42:e2:fb:38:e6:b2:95:6d:07:f9:97:26:6d:cb:99:
fa:9e:d3:b9:84:46:1b:b7:d4:47:1e:e2:70:07:9d:
b9:7c:9d:f4:c1:ba:1d:c1:70:09:ee:6c:df:2e:e2:
f7:14:d5:ce:04:74:12:c5:16:01:11:1a:9b:a5:eb:
a6:dc:ce:6b:3e:3c:65:1d:aa:25:10:72:6c:bc:3d:
6b:c7:84:9e:06:3b:70:ec:9f:ef:19:0d:36:43:73:
71:ec:a0:b7:c0:44:e5:95:51:d8:fb:f4:09:d9:8b:
6f:29:59:34:8a:fe:fe:67:0c:9d:26:6d:76:89:31:
97:d8:cc:66:dc:64:d0:72:4f:7a:d6:1b:0a:3a:ca:
bd:73:40:9b:b4:8a:f7:27:9b:d2:9a:2b:92:c7:40:
7f:21:a6:e1:4d:38:0b:81:2c:c5:ad:a0:a8:7c:be:
29:06:60:c3:aa:06:15:26:5c:85:e0:75:ca:70:aa:
53:30:fe:59:91:c9:4c:4d:86:de:71:4b:bb:49:3d:
09:a7:6e:16:76:8c:ac:4b:9f:fe:7b:8b:d4:c5:84:
d9:7f:0e:24:a8:2f:04:e0:ef:c2:20:c8:33:69:55:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:BF:1E:8D:16:5F:9F:04:54:32:64:B1:F0:65:92:91:3F:7A:D5
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:59:ed:ff:4d:04:64:ef:08:29:82:42:a9:e9:c4:c3:83:
43:8e:d0:b8:a6:a4:e1:65:38:c7:c4:a5:ac:ed:ee:74:78:ec:
fa:31:99:4b:10:f1:78:90:ec:cd:8f:ae:9d:6d:2e:34:0e:a0:
72:8e:b5:9f:81:9e:3c:b4:58:58:de:e8:22:8d:9a:d7:7a:f8:
b2:a3:10:08:59:69:cd:55:d9:db:fe:67:ef:2c:48:cd:95:9a:
8a:1d:b8:fb:c9:b5:13:8b:f3:67:95:1b:50:3a:87:7c:18:f2:
f5:5a:24:32:fc:67:f2:5b:93:3e:0c:2a:bb:07:19:c7:a2:95:
37:b7:cc:be:84:05:16:3d:21:54:42:e1:08:4d:ca:da:e4:21:
23:07:63:49:d5:72:36:66:40:1a:89:66:dc:b7:3d:16:11:64:
80:c4:a3:34:cc:76:94:63:2d:8a:ba:73:f2:93:ce:8c:15:e9:
fd:26:6a:6d:fb:bc:0d:ee:74:6f:23:21:21:d4:27:ea:4d:f0:
02:88:c5:98:0a:3b:12:c6:d5:cb:f5:76:79:f7:ca:ae:f3:07:
1a:f8:a2:b1:4e:d9:2b:20:f3:a5:de:8a:69:65:3e:27:df:e1:
13:55:63:ef:33:a4:73:5b:da:c9:f2:38:8c:7c:b7:c6:b5:d4:
28:4f:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:13 2026 by rpki-client