Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
File: ksrhHed02u8FJ0JGPOlU9SHG0nI.mft (raw, json)
Hash identifier: vQ9qLEn8VOKnIAWkDtXSyNJYDWO1OUCwAcH+W7eL428=
Subject key identifier: F9:57:90:A9:C8:3B:A6:79:32:80:3D:9D:F8:F3:EA:71:3E:65:4E:87
Authority key identifier: 92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
Certificate issuer: /CN=92cae11de774daef052742463ce954f521c6d272
Certificate serial: 019CAB6BC8BADF66C15A260DFC085B68EC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
Manifest number: 123E
Signing time: Sun 01 Mar 2026 22:01:33 +0000
Manifest this update: Sun 01 Mar 2026 22:01:33 +0000
Manifest next update: Mon 02 Mar 2026 22:01:33 +0000
Files and hashes: 1: ksrhHed02u8FJ0JGPOlU9SHG0nI.crl (hash: uDUPBzEsd3R7SnXW7lk/reOkFLfV0vBGCVysJz98a2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c8:ba:df:66:c1:5a:26:0d:fc:08:5b:68:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cae11de774daef052742463ce954f521c6d272
Validity
Not Before: Mar 1 22:01:33 2026 GMT
Not After : Mar 2 22:01:33 2026 GMT
Subject: CN=f95790a9c83ba67932803d9df8f3ea713e654e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:83:d4:a5:ea:7c:a4:e8:fb:2e:d5:4f:4c:
08:c1:34:90:e5:ec:fe:dc:09:12:a4:52:d0:a2:ba:
ea:80:d1:4c:52:03:9e:ea:89:22:6b:3d:81:9a:20:
13:70:5b:ca:80:39:c7:45:e4:66:55:6f:53:9a:0e:
34:2d:c1:f3:76:13:51:a2:73:eb:0b:6f:01:18:f7:
97:7a:3a:1c:c3:46:b8:0d:40:cb:89:a7:b6:cc:dd:
e4:53:54:22:0a:73:97:0c:51:f2:19:16:4b:58:dc:
07:f3:0f:73:9d:ca:44:81:e0:ca:2e:46:e5:4f:3d:
13:4b:75:b4:a6:98:37:72:88:1c:0e:cb:17:30:10:
f9:04:97:5d:5b:12:83:fe:ae:86:7e:e9:60:f0:c1:
df:9d:6a:cd:0f:e4:e0:05:73:2a:b4:45:6c:fb:a0:
6d:81:38:2c:65:1c:3c:ab:77:d7:a9:d9:aa:70:b0:
1e:c0:52:a3:4f:23:13:8b:a4:20:f3:7a:a4:5e:5d:
15:0c:50:4a:5c:89:8b:57:f8:50:c8:ca:58:00:9a:
0c:83:7a:6a:38:82:bc:8f:8a:84:09:8a:b3:aa:af:
ac:7f:e9:ba:e8:ba:7c:d1:1a:9e:b4:34:f6:28:e5:
ac:ff:23:f9:27:b6:69:93:90:af:b0:91:c2:0c:c0:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:57:90:A9:C8:3B:A6:79:32:80:3D:9D:F8:F3:EA:71:3E:65:4E:87
X509v3 Authority Key Identifier:
keyid:92:CA:E1:1D:E7:74:DA:EF:05:27:42:46:3C:E9:54:F5:21:C6:D2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksrhHed02u8FJ0JGPOlU9SHG0nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/edf435-1abf-470e-ba6d-eff6fd7d3b28/1/ksrhHed02u8FJ0JGPOlU9SHG0nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b0:9a:57:64:82:91:82:89:d4:be:b0:2a:1b:36:dd:23:33:
93:53:45:ea:1a:58:e8:e5:ab:1d:fa:01:71:57:df:c2:06:14:
6c:37:8b:28:de:cc:16:25:9e:7a:a0:3d:a9:7f:56:04:d0:75:
9b:bb:0f:6d:72:46:ee:cb:57:a3:f0:81:c6:2a:04:19:cf:dd:
8e:ad:a8:27:15:30:89:5a:02:53:ed:b5:27:5c:4e:e5:1c:f9:
e8:66:df:56:9f:be:c0:c0:90:8d:82:b2:46:03:50:53:13:95:
20:1c:6c:b4:6a:ec:cc:79:b0:05:53:16:d1:3e:0b:6a:74:d3:
46:79:a1:7d:2b:1c:79:ce:37:7e:be:e0:7c:91:96:11:84:d6:
0e:2a:55:04:eb:5c:81:75:ad:d2:ae:fc:fb:5f:93:83:ef:13:
27:91:51:29:ca:5a:8f:9b:34:7d:e9:8c:8f:df:36:7e:8b:d9:
66:50:91:f6:88:47:4a:a8:aa:e4:80:e8:b4:70:53:47:b1:42:
6c:32:ce:7d:bf:10:1e:78:50:11:68:c2:59:9e:fb:9e:d7:17:
da:f4:5f:d4:d1:0d:1d:77:64:92:a5:3d:28:76:09:79:45:a4:
02:b2:f5:d6:06:95:f6:c3:7d:a4:a7:36:d2:07:9f:08:5f:d7:
6d:05:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:03 2026 by rpki-client