Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: 7YWSnWbZZzE3ZW5pU/35Z63b2x9uEe4DppKcqaIXZ9I=
Subject key identifier: DD:DB:64:D8:86:4D:76:91:68:C0:3F:BD:E9:7C:5C:9F:18:84:1F:85
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019CABD964294830D5D55525C79C1F437D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 1583
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: 1T1EmzuploW8Hli3F6VvN89444c.roa (hash: 0xB4j4LlwM3o7BHqfHhrdF1w4xBf3JBcz4TO0vz2AeQ=)
2: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: 3oqhFQyPrZ+ZTwMoc7Wlgm/6Klgy9XPuskkwuaJTCYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:64:29:48:30:d5:d5:55:25:c7:9c:1f:43:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=dddb64d8864d769168c03fbde97c5c9f18841f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:94:21:45:f5:d3:8b:2c:39:38:eb:80:8e:
f7:07:ba:d1:59:6e:e4:ae:29:c1:1b:fe:4d:29:55:
10:e5:14:fd:d5:4e:19:7b:e5:d3:55:ae:82:e9:b1:
b8:91:ea:42:0e:2a:94:ae:c2:0d:51:f5:45:4c:8b:
48:f5:52:84:65:ad:09:e3:18:74:8d:f7:b1:78:e8:
0c:2f:80:d6:2d:57:37:75:65:bb:4c:d1:90:b1:f1:
fb:d9:a0:e3:b5:da:56:4d:f9:01:e1:ba:d0:c6:72:
5b:fe:4b:32:c2:16:16:ac:21:08:23:43:f9:b3:ec:
bb:a0:5c:2a:7d:6c:cd:64:20:eb:d8:20:cb:de:4a:
d7:7c:91:be:ca:fa:d1:29:bc:07:83:2d:25:57:f6:
00:46:cf:3b:cb:4e:63:49:59:99:2d:1b:36:11:41:
65:e9:fe:78:34:cd:24:92:3e:27:97:82:40:ed:c3:
a8:20:77:b7:1e:b3:70:6e:4c:3f:cd:64:67:51:38:
9e:d6:f5:01:26:75:55:65:23:99:7b:19:64:ea:cc:
be:10:3e:ce:62:57:22:d6:51:6f:f3:4e:35:8f:ec:
5d:d3:21:95:6f:8f:2d:cd:bf:2b:83:66:5a:cc:bd:
9b:03:71:9e:3a:f1:e9:38:d2:f5:93:f8:44:e8:c2:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:64:D8:86:4D:76:91:68:C0:3F:BD:E9:7C:5C:9F:18:84:1F:85
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c4:dd:5c:91:65:d0:13:1d:5e:24:c9:5b:c6:8e:9d:08:c2:
61:ac:02:dc:c2:ef:83:68:23:25:75:19:0d:cc:f0:8d:5c:86:
d2:51:4d:d5:53:8f:3f:72:c1:7a:78:2e:92:45:cb:2b:8e:dc:
2a:c6:d0:84:1d:73:52:22:5e:9e:26:39:fb:c1:59:59:1e:97:
9a:bf:dc:1f:cb:36:5a:8d:8d:b6:0d:aa:f2:6d:57:58:b4:7e:
4e:bc:22:48:d9:89:70:8c:e9:27:6f:c6:02:06:23:ce:79:68:
c3:9a:25:43:16:65:45:f7:56:90:aa:b9:c8:e1:a5:59:ba:42:
18:01:47:42:e8:06:44:2d:10:f9:7b:3b:bc:54:74:db:6a:00:
e7:f6:35:65:22:a6:c1:e7:02:09:53:23:f7:0d:61:2a:3d:9f:
3b:6b:33:26:5b:de:c9:38:b6:77:c3:18:87:de:c0:94:c7:a4:
7a:a6:dc:2c:35:4a:ec:08:30:c3:2c:e0:71:e4:0b:cb:85:0e:
b8:09:c1:6c:f4:f0:64:a4:08:66:4d:f1:a5:66:83:df:38:73:
d7:95:e2:7d:b1:c7:fb:11:89:b9:9a:c8:99:b9:d1:d9:b6:04:
fc:27:c4:9d:62:92:84:48:cc:f2:d5:58:df:ec:2f:77:ef:e0:
10:11:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:02 2026 by rpki-client