Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: i0szqD1hsnGFn2n9JVSy1lM03d7Shjb+kB/vDxX1v7c=
Subject key identifier: 9E:DE:19:93:1D:4E:3E:69:EF:88:82:4F:8E:BB:A0:68:A0:60:59:BD
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 019CAA8FF91B12573165843B43C1F5CFA1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 050C
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: Rok7bhVcrvMGmCeWCMtB237UrvA.roa (hash: Xpw27Y+b5oWmTMptkoA1gCQxfXLZzXNMTUlev3rzVHE=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: WmxmlpVtr0btA+xdjzZn8mysetLnfZ/uOGDQyXm3Tt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f9:1b:12:57:31:65:84:3b:43:c1:f5:cf:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=9ede19931d4e3e69ef88824f8ebba068a06059bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:9a:cf:7a:08:29:f5:20:dc:72:e2:e0:08:
7a:4d:03:9e:e0:13:63:07:72:3b:71:77:9f:bb:4e:
4a:9f:00:a8:b9:83:9a:c1:0a:6f:28:07:01:c6:1b:
21:b2:91:50:43:11:25:38:f7:21:aa:09:e3:a2:f4:
4d:0c:96:5a:b4:c2:8b:fe:2b:41:07:74:02:4b:8f:
39:61:43:39:75:73:91:b1:04:6d:67:c1:d0:37:32:
11:e7:fd:f4:34:14:33:58:d2:1a:d3:eb:51:37:a6:
5b:76:47:3b:67:63:dc:b2:f5:d5:70:f3:13:7c:61:
42:a6:0f:1f:aa:4b:e7:ac:d0:31:b6:f2:81:1f:08:
57:e4:ef:65:60:1a:ae:1e:1d:91:4e:69:d5:d4:c8:
da:22:9c:81:fe:9d:6c:b4:42:83:39:16:a9:fa:e7:
63:9b:2d:ed:81:37:c3:f8:ba:e0:93:c1:c8:4c:74:
54:61:5b:b2:ec:a9:8e:b2:bc:91:aa:60:dc:22:b5:
40:3c:11:40:56:51:56:71:2a:b7:a6:64:07:dd:7b:
40:96:75:d6:40:14:a1:f1:a9:95:a6:13:07:61:dc:
df:58:2a:fb:69:5f:e1:bf:f6:d6:8c:03:f3:75:49:
b6:4f:4b:56:4e:98:4f:a9:0f:21:e0:6a:dc:5c:f1:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:19:93:1D:4E:3E:69:EF:88:82:4F:8E:BB:A0:68:A0:60:59:BD
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:b5:af:97:60:b7:62:e9:d2:7a:98:af:13:28:f8:f7:5a:
12:c6:25:11:1e:3b:d2:1a:6f:2b:46:d2:f4:04:c0:9c:ae:84:
32:c7:40:23:70:3f:ae:45:43:3f:9d:68:b8:5e:b4:09:00:46:
a4:34:a3:38:a5:cb:93:8d:d6:2b:4e:be:2d:9b:21:f9:2e:26:
2e:79:d4:61:3f:05:a5:9c:03:7a:7a:ed:e9:cb:86:4f:ab:6e:
c1:81:1f:aa:b0:09:1a:d9:6b:b3:cc:dd:e7:14:9d:91:3f:d1:
45:d0:8d:d0:48:55:7d:2d:d5:d2:7c:db:ed:32:1c:cd:85:14:
4f:33:34:9b:0f:0f:44:60:90:5a:58:ed:85:09:f6:44:51:4d:
f0:6d:b9:03:f8:9d:e4:e3:ac:82:49:35:80:53:98:92:39:25:
4f:59:80:88:36:7d:36:cf:2b:ed:32:af:60:1b:ae:2a:af:f2:
9b:5d:60:87:8b:23:2a:35:7d:d0:61:a1:d9:6b:63:e4:4b:81:
95:88:02:6c:d7:5a:05:5b:63:53:88:8e:65:16:42:12:0e:72:
3d:6f:cc:0b:3e:56:5d:9d:fc:a0:75:b1:4c:7d:6f:a1:bc:2e:
ff:b8:ff:b2:76:46:7f:fb:bd:b6:31:9f:16:95:45:e9:a7:60:
d2:4f:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:28 2026 by rpki-client