Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: PnG/sSI7kIdC+70eguURc5p2KZpoE1025sj/iOXmxd0=
Subject key identifier: CC:B9:CA:63:50:AD:CC:E7:CA:5C:56:F5:A5:6E:7B:58:93:1B:C7:CD
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019CACB4E8EAA879F70AEF5E1CCCC4E71C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa (hash: L6OclFsXAbkjxZSlLKINJ4WzPa71QpYW4ACfx2HTL/4=)
2: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: 2PA22b9Fd0cmtIWOokbpAQCnOd0j2QpCWn6VAnvOtZQ=)
3: NUW_ZH_EIIHERuITZzYR2weW90Q.roa (hash: Y1z/FtrJMczt8aV1zB8hcs+HmFMUQfSmWahrrb+QcEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:e8:ea:a8:79:f7:0a:ef:5e:1c:cc:c4:e7:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=ccb9ca6350adcce7ca5c56f5a56e7b58931bc7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:33:1b:61:02:a7:08:54:6a:18:9d:91:91:
44:3e:21:99:78:f4:10:4f:ca:64:44:f2:40:f1:62:
b5:cb:ee:0e:b1:98:e1:8e:19:1b:57:b2:1d:96:1c:
1d:d4:cf:3a:16:09:18:94:94:50:87:4c:b0:99:c0:
46:11:ed:5b:16:c2:68:df:b7:3b:8b:8b:ac:40:25:
16:a4:3b:4a:18:90:08:68:28:d7:08:76:15:8a:84:
fc:f1:3e:a9:ea:8a:59:5f:42:fa:82:e1:b4:b8:9f:
a4:b5:75:85:72:e5:13:3c:68:02:2a:18:40:97:89:
55:ab:dd:5e:cf:b8:37:10:d0:6c:8f:6f:dc:b9:c2:
d0:23:12:14:2b:8e:7a:07:50:8f:99:39:8d:86:03:
85:40:21:bc:49:67:b2:5b:67:ca:93:c1:cf:cd:46:
89:36:8e:97:d2:42:b6:8a:18:ae:24:21:cc:e6:b4:
b5:c2:76:7c:2e:7a:2a:37:47:0d:f8:5d:8e:aa:8d:
a3:a2:2b:0b:c2:20:ba:63:2e:20:12:ce:da:75:a3:
85:da:a6:71:b2:3a:c9:cc:83:eb:38:85:f1:c7:83:
63:bf:ba:61:14:90:2d:17:be:23:8a:ab:6e:b1:bf:
09:84:0a:b1:81:fe:58:f3:f8:61:a1:ea:cb:9e:e3:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:CA:63:50:AD:CC:E7:CA:5C:56:F5:A5:6E:7B:58:93:1B:C7:CD
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:ef:88:25:31:46:18:ce:9e:ab:04:4e:e1:74:b7:2c:4a:
91:0f:7f:ef:9f:6d:2e:4a:48:8f:a8:90:89:4b:a4:1a:45:13:
0e:dc:8a:44:1e:02:1a:c9:ee:b6:a3:b0:89:b1:f0:cb:38:e8:
ca:02:cf:28:3b:2c:a3:f5:70:ed:bc:47:77:54:38:aa:50:5c:
37:0a:3d:06:81:37:42:60:fb:6c:80:48:07:26:51:3a:27:c7:
62:8a:06:7f:fd:18:70:7d:47:7c:24:35:8b:19:db:50:d4:e3:
87:84:2d:1e:7d:ea:02:b4:59:86:70:f3:0c:90:1b:d6:24:73:
17:2f:78:9a:75:5f:23:cf:1f:b2:59:23:67:80:a7:03:8e:55:
1f:8a:3c:ef:06:a6:b3:9c:f1:13:1f:7d:5d:ee:82:a1:9f:71:
4b:01:5e:83:16:b7:91:21:6a:df:44:ee:be:b5:10:cd:78:3b:
70:a8:5f:6d:ce:fe:56:d4:09:de:84:c9:b8:53:5b:33:d4:c8:
6d:c3:1a:13:66:fd:79:5b:88:54:6e:db:e0:45:52:98:9f:df:
5e:08:79:85:2a:c8:dd:3d:8b:3c:c3:bb:d9:32:6c:aa:f9:ca:
fa:59:53:ee:e9:41:c0:5c:97:1d:d7:d7:2c:ea:f4:d4:af:a5:
b3:ff:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:08 2026 by rpki-client