Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: CycAu7uBLD7OnISN9WSScZKYPwLZjdcMrywxrCHCJe4=
Subject key identifier: 3F:68:ED:88:12:28:FF:4B:0E:86:0B:35:9C:B1:93:74:7E:81:56:5E
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019CA869E7F13A925978CC643EDCF6F4D771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 08:00:38 +0000
Manifest this update: Sun 01 Mar 2026 08:00:38 +0000
Manifest next update: Mon 02 Mar 2026 08:00:38 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: LoU/ivsIYxuQEPdyrcV10yoUzhl2mqTV+W/SLE7b9+A=)
3: p0olYKK_67ffAzfvQRoSSz8TiKA.asa (hash: JDzRWVmjvJMNN1HKwXLWsrOkuN3FQ3v+/s9RaitfV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:e7:f1:3a:92:59:78:cc:64:3e:dc:f6:f4:d7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Mar 1 08:00:38 2026 GMT
Not After : Mar 2 08:00:38 2026 GMT
Subject: CN=3f68ed881228ff4b0e860b359cb193747e81565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:49:02:7a:5a:f8:38:ea:1d:19:92:fc:dd:
d2:32:5c:4a:05:f3:ec:c3:94:e7:5d:c2:a0:74:28:
8b:bd:d0:73:a0:1b:79:ec:e7:24:6d:0e:ad:39:9c:
1b:15:d0:df:c7:6a:b2:7e:ff:32:67:52:92:3c:32:
85:20:2a:c8:fe:14:f5:b1:ab:b4:a0:e2:33:91:f3:
fa:ad:ff:28:d2:f8:69:24:a6:3b:d5:83:df:c6:fe:
0d:a9:0e:88:0f:f0:01:ab:40:39:75:0d:14:4b:e9:
aa:a2:15:f5:e0:51:93:94:06:8b:91:9f:99:c0:44:
32:9a:5b:72:55:0d:42:ba:a3:0f:c1:c2:e7:4d:dd:
a2:f6:e7:c8:d2:4a:a4:e8:a5:b6:ea:91:fa:4e:d5:
6d:07:bd:d8:7f:61:7b:e8:a7:9c:6f:d1:cf:61:f9:
22:b0:65:26:10:86:bf:77:53:9b:10:ad:e8:ce:15:
5b:1a:2b:d1:7e:f8:8c:8b:f4:07:09:2d:b8:78:5c:
06:47:c7:81:56:32:1b:12:55:0b:71:e8:be:a0:4d:
e6:7e:24:7d:3f:39:e1:df:ea:10:cc:5b:20:a1:94:
1e:3d:60:43:cf:19:4d:7a:c2:1a:22:fd:e8:91:60:
85:e8:2f:bb:5c:18:e9:86:56:7f:d2:2c:da:71:4b:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:ED:88:12:28:FF:4B:0E:86:0B:35:9C:B1:93:74:7E:81:56:5E
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:78:a3:a2:f3:11:8c:00:fb:e6:22:02:3c:05:33:61:62:7f:
f7:47:db:de:45:25:03:23:99:f9:ff:54:dc:2a:1f:25:1d:70:
7b:4c:35:ac:bc:26:76:5a:40:17:4d:58:3c:6a:ca:5d:d9:83:
6f:82:0d:aa:be:87:b4:8c:87:21:88:cc:80:e8:d1:d7:8d:4e:
cf:bf:e5:d3:48:81:f2:03:dd:bc:c1:71:2e:df:e2:0b:91:60:
1b:50:b5:66:c7:c3:cc:b1:dd:d9:74:b6:a8:89:b1:e8:14:a9:
e8:13:cc:5c:12:8c:74:7e:11:f3:3c:06:bf:ac:ff:f3:39:90:
a0:b3:4f:ad:4c:65:42:37:ab:eb:ef:07:76:67:e5:a7:da:4a:
6b:a1:21:07:7d:68:89:6e:40:28:56:1b:8b:95:20:1f:9f:7a:
ce:62:84:a9:c9:64:33:31:e2:c8:bd:70:6a:48:75:d5:5e:a1:
f7:b3:0d:cc:dc:46:69:ec:c5:94:bd:df:de:47:1b:a0:a1:96:
82:ff:bb:77:72:d7:58:a6:b7:00:01:57:80:1a:2f:c6:5d:97:
cd:05:69:89:63:d7:48:12:7a:c2:d0:d4:3a:19:f3:7c:9d:ee:
72:cb:3b:c5:91:af:01:ed:47:cb:80:08:0a:0c:ea:c6:65:ac:
e4:55:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:43 2026 by rpki-client