Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: WbziF1N51jV0Vbl7GJ+QVeH9GUp+MK3GuOy/ETGBBvs=
Subject key identifier: D5:32:32:29:A2:33:8D:13:04:71:0A:03:1D:96:DD:22:8E:CA:07:5F
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 019DA3E6A0A2452C73E857BCFA99B09DCB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:01:33 +0000
Manifest this update: Sun 19 Apr 2026 04:01:33 +0000
Manifest next update: Mon 20 Apr 2026 04:01:33 +0000
Files and hashes: 1: CNKO1AJeRZSp_3kQ19ptZSb9qxw.roa (hash: L6OclFsXAbkjxZSlLKINJ4WzPa71QpYW4ACfx2HTL/4=)
2: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: z9z4IKNMk3mApinLpx3SqQ2tpx8qs2ON2GufA2QW7BE=)
3: NUW_ZH_EIIHERuITZzYR2weW90Q.roa (hash: Y1z/FtrJMczt8aV1zB8hcs+HmFMUQfSmWahrrb+QcEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:a0:a2:45:2c:73:e8:57:bc:fa:99:b0:9d:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Apr 19 04:01:33 2026 GMT
Not After : Apr 20 04:01:33 2026 GMT
Subject: CN=d5323229a2338d1304710a031d96dd228eca075f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:71:d7:49:f8:2c:36:d9:f9:a8:94:3e:b2:
23:a5:12:9b:7b:af:ce:ce:56:cb:f5:5f:6e:c9:5c:
5b:24:a0:8a:7c:95:37:fa:3e:ad:7c:44:14:db:ca:
a9:2a:c3:0f:78:5d:0f:74:d2:f3:05:98:39:0d:e0:
ad:8b:37:95:60:82:67:90:63:b0:14:c0:fa:d4:f6:
89:2c:20:62:10:e4:ca:c7:1f:e9:ca:07:51:bf:b2:
aa:02:d0:95:54:f1:99:94:23:13:e9:16:4d:ed:55:
5d:90:9d:08:df:86:0a:61:fe:78:a1:3c:46:6a:5f:
e6:09:e7:60:fe:fc:98:9e:8d:cc:a3:3f:5a:71:5c:
14:47:87:6b:bd:e8:7c:c9:50:82:45:e2:e6:36:d6:
28:2d:af:87:51:67:e0:ea:8c:65:18:68:99:bb:2e:
7b:10:7b:52:ba:6f:df:5a:cd:02:5f:c0:4b:60:3e:
dd:ef:84:8f:af:3e:97:01:1a:dd:0e:15:10:ce:df:
19:1f:a3:96:d4:ea:58:73:bf:db:08:c4:b9:dd:f6:
e8:9b:4b:f8:b6:5b:c4:3b:64:9b:52:99:95:85:c3:
5c:7f:6d:6d:23:cc:7b:52:1a:2d:f8:9c:d4:5a:72:
4f:02:98:dc:1e:97:a7:84:16:59:36:a2:38:b8:c2:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:32:29:A2:33:8D:13:04:71:0A:03:1D:96:DD:22:8E:CA:07:5F
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:8a:59:46:95:bc:a2:dd:8e:11:91:02:9e:0c:39:85:4e:
fb:e6:c0:56:c5:ae:f9:e1:4d:cc:28:87:a1:89:b8:8e:97:44:
48:c9:cc:0a:fa:86:c3:c1:6e:0c:0d:33:3e:c9:84:18:ff:81:
ff:61:4e:6d:23:e0:76:c8:d0:28:fb:9a:ad:9d:e9:33:19:b3:
2c:4e:0f:50:22:ae:fe:22:fc:9c:26:0d:9a:50:05:67:d3:29:
40:3c:96:6d:cf:13:0f:9f:a5:9b:b6:9c:68:86:93:23:a1:6f:
2f:fe:b8:a5:f1:04:a3:13:23:c9:24:f5:32:18:a9:15:95:46:
38:42:a3:2b:0a:52:25:cd:19:6f:d5:3d:9b:0b:34:61:e4:93:
6a:20:0c:82:e2:ba:75:ff:08:8c:93:22:16:c2:dd:de:24:b0:
ad:46:f0:56:51:d8:71:cc:c7:26:fb:9f:07:f7:8e:49:e9:87:
ba:2d:a3:53:e1:ca:cb:21:76:5f:07:d5:26:ec:68:48:0c:da:
ee:a1:ff:36:df:47:f3:4b:08:47:6d:dd:a8:43:87:4e:3f:28:
02:c8:25:bf:39:a0:da:35:fc:61:af:57:f3:d7:eb:3d:14:c1:
7e:ee:36:73:1a:f1:66:2e:0b:2d:2f:7d:45:eb:bb:aa:23:ae:
9e:70:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:35 2026 by rpki-client