Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: ww0VS/COHa2fy57RY2LO57EkoJPRC3CaNycviDSRQsk=
Subject key identifier: FA:16:09:0B:2C:69:8F:11:6B:EF:B5:7F:CF:3C:7A:7E:9A:75:8C:65
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019CAD9073A01C01C2DF14527510104E2B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0E9F
Signing time: Mon 02 Mar 2026 08:00:50 +0000
Manifest this update: Mon 02 Mar 2026 08:00:50 +0000
Manifest next update: Tue 03 Mar 2026 08:00:50 +0000
Files and hashes: 1: Ej1NGALUAyZGkeedSA07ESoqQtI.roa (hash: bVGUYeTkungmGZQJc78ekhzyESu4jsfHGMMaJDPhxpU=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: I0Ovn9AXbk6dJooQemP+1MubLvtcH6k3MkqtGyQctC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:73:a0:1c:01:c2:df:14:52:75:10:10:4e:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Mar 2 08:00:50 2026 GMT
Not After : Mar 3 08:00:50 2026 GMT
Subject: CN=fa16090b2c698f116befb57fcf3c7a7e9a758c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:59:85:88:80:29:47:8b:44:9b:41:a9:f2:
15:1e:3e:62:79:c7:73:5b:f5:a9:99:c1:9f:72:35:
ff:8e:50:6a:ba:4f:5a:e6:40:ab:64:e4:65:0d:2b:
04:91:c7:55:7c:ea:83:9f:ef:d7:1a:01:7b:de:8d:
5c:bb:89:d1:3a:9a:9d:eb:f4:19:5f:20:75:ca:df:
20:ec:98:33:26:3d:8e:79:43:db:0b:bd:6d:72:7f:
4c:4d:86:95:1d:39:be:ff:fa:48:7b:88:94:f3:a6:
0f:e7:27:5b:67:28:92:46:f3:a5:5a:8a:1f:84:5c:
82:e2:23:cb:da:f2:87:51:16:a2:9a:20:e3:68:b6:
37:30:53:e1:8c:6c:1f:d8:08:ee:89:0f:d4:cf:bd:
09:10:b1:b7:d5:35:7e:ed:0e:58:e5:a7:ca:b4:92:
74:3a:ef:4f:d7:4f:f5:a8:7c:76:c6:e9:89:76:e7:
a9:a0:19:51:81:62:35:f7:87:52:05:f7:e1:9f:d0:
55:55:9d:e2:9f:c3:98:aa:72:1e:cf:32:f7:93:85:
16:59:59:a8:1a:39:f4:5c:7d:c1:26:0e:07:f4:90:
cf:9e:d0:41:10:28:d8:20:27:55:e9:ad:1a:0b:95:
a4:ba:a9:06:bd:42:b7:f8:a1:2e:7d:e8:4a:ed:b0:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:09:0B:2C:69:8F:11:6B:EF:B5:7F:CF:3C:7A:7E:9A:75:8C:65
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:a6:83:5b:7f:2e:90:f3:4b:e5:aa:6a:75:84:30:66:e3:
25:af:86:25:22:57:4e:c8:f0:87:67:b1:2c:87:ab:3f:e6:b5:
c5:f9:cc:b2:db:76:da:f1:f7:06:d5:2d:23:eb:21:1e:b5:fd:
bd:3f:48:fa:46:66:cd:9b:99:1a:6b:65:d2:5d:75:db:f3:7d:
17:66:d8:23:b2:91:54:77:0a:57:ec:e2:3c:aa:70:45:55:c9:
d2:12:ec:b1:50:4f:dd:c2:cd:48:d3:85:fa:52:ce:ec:6a:9b:
18:7d:7f:30:ce:3f:18:68:1c:f8:95:47:cb:f6:ce:cb:51:68:
5d:c1:b8:99:74:dd:a5:a3:7d:28:33:4d:d7:1b:ed:a8:1c:2f:
e7:0d:20:7a:40:75:51:18:b3:35:1c:f6:06:10:86:92:c0:78:
f9:aa:21:37:96:45:6c:d6:ae:76:bf:58:f8:8e:8d:d9:d9:9a:
0b:cd:ba:05:be:df:f3:b7:04:36:ff:02:65:fc:52:2a:72:3f:
e6:c8:06:c2:99:8c:f0:31:a7:f4:3c:8d:9e:6f:fc:82:46:e7:
fb:31:5f:70:07:68:4e:fa:c5:a9:45:59:12:54:1f:1d:32:c7:
53:91:8c:ee:1d:55:6c:3f:b4:e9:0c:6f:0e:dc:ac:7c:f8:0e:
de:0b:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:06 2026 by rpki-client