Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: Ahj9qussFStqaQheM9m3nAQcDUK8bH3aAPbRHOYHjwk=
Subject key identifier: 38:BB:7C:79:3A:62:F0:1E:BD:65:71:04:72:23:28:16:30:2D:74:C1
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019CAC46B02CF8E0D45C2B0967D55B70B2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: +ROG0ML8r3MigFQEUXaaIIPTC+Wg6NbIe8PECGrXZgw=)
3: p0olYKK_67ffAzfvQRoSSz8TiKA.asa (hash: JDzRWVmjvJMNN1HKwXLWsrOkuN3FQ3v+/s9RaitfV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b0:2c:f8:e0:d4:5c:2b:09:67:d5:5b:70:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=38bb7c793a62f01ebd65710472232816302d74c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:c7:4c:d5:6c:67:d4:e6:22:fd:82:3d:67:
d9:da:19:e9:c8:58:20:b2:a0:db:95:9b:b9:58:ef:
9d:2c:69:06:d6:7f:fc:d2:b0:80:11:3f:2a:35:95:
bc:c5:f7:7c:9b:e1:86:e0:71:d3:12:af:6f:e0:a1:
dd:5f:52:76:ce:d1:8c:ca:5d:8f:95:40:52:c1:b7:
18:a9:f6:4d:e8:c3:c6:65:2c:ee:75:75:40:c9:1e:
0a:a5:b7:c1:e5:98:23:ba:5a:79:68:7c:67:86:77:
ee:2d:f1:9a:1f:61:4d:ff:f8:51:d4:b8:2a:cf:eb:
08:de:10:b3:e6:f1:31:ac:ce:35:1d:c8:a4:78:94:
1d:ec:66:80:9a:72:61:c0:78:af:07:e0:50:1a:1b:
f1:cb:c4:a1:ef:00:5e:93:8f:76:4c:e5:0a:b1:c7:
0a:f0:ff:2b:45:e2:e8:72:c5:46:c8:4d:1a:0c:3c:
23:a9:84:cb:f1:24:8a:2d:22:e5:cc:69:c9:e9:d9:
26:0a:3f:92:b0:22:32:86:3f:71:a6:3a:a0:26:63:
af:84:0f:0b:55:a8:3f:65:60:ed:62:ac:46:cf:1d:
30:f8:c4:a2:2e:95:1d:b8:7e:7e:a7:ba:1e:f4:98:
33:d1:0e:ad:5c:dc:f6:eb:35:97:6a:db:37:e9:a8:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:7C:79:3A:62:F0:1E:BD:65:71:04:72:23:28:16:30:2D:74:C1
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:03:9b:eb:13:13:80:29:d8:c3:48:7e:b6:bd:7e:e1:53:11:
6f:cb:fb:53:98:16:d5:f3:93:51:a1:01:39:5d:85:60:22:1c:
26:ef:9a:ff:c4:a6:80:58:d4:f7:ee:7b:73:a4:56:6a:8b:08:
e0:cd:27:f0:28:f1:75:04:d8:df:31:f6:1e:37:02:2f:f8:de:
e1:78:06:f3:b9:fc:60:4a:5e:af:3c:a1:b9:b2:02:71:c9:43:
2f:58:a9:db:4b:4d:f3:5e:c2:c1:7f:68:e5:7e:b8:71:01:5d:
08:27:3d:ea:66:d2:64:d3:0a:b4:90:32:34:58:7e:f6:2d:8c:
6b:0b:fd:8f:97:2d:f5:60:54:d3:f1:fa:c6:63:af:85:e2:b9:
6c:9d:cd:e0:53:c5:2f:1b:2a:8c:7b:e4:e4:87:ee:d1:b9:da:
a3:28:b5:c0:b6:fa:e1:f7:2d:36:31:00:5f:e4:e6:f5:5e:b3:
06:44:94:4d:67:fd:cd:73:68:2f:71:5c:72:7c:d3:9c:6b:74:
69:d2:91:b7:5b:da:29:a3:ba:59:bb:a2:fb:dd:49:95:20:0b:
85:73:5a:e1:ea:ea:7e:48:88:75:0f:ca:c2:ac:fe:02:57:cb:
f5:4f:41:9a:9b:c3:fb:e4:3b:d8:2c:4d:cb:f4:52:c3:54:fc:
9e:7c:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:46:00 2026 by rpki-client