Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: N1ohcFjr5aMaXDrs/hKN82F7hvxbLieL7/6e82w8ws0=
Subject key identifier: 9C:2B:16:E3:D3:DC:CC:9F:75:C0:96:C1:8B:2F:F7:7B:08:6D:77:4F
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019CAA58EC8E691AC080520C13FCB963D834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0BF8
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: zEVnBQd4gh9qB2DtlgZZmGNc/WOHlUqdlEWY9n+Ljj4=)
2: Uo2zXb7xDJEIiCoeCYCC8PrL42A.roa (hash: oMrnSqWlYTSclklmzzYM7d3FpGFOzhG3FJDIuAEG0Rc=)
3: vQiZmPMf9IeoKABnozsDY-6d9UQ.roa (hash: 8GXH0TKZLcFAfjc4jnVxVr7204I+TJn5VFuiHQHtpKY=)
4: wbqmfwWmA_mTuxJMrgbcccVRq0o.roa (hash: ikwWrG/vEk9wIu3LnAsVyDpQOVfL5PBtwTAaO84nGNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ec:8e:69:1a:c0:80:52:0c:13:fc:b9:63:d8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=9c2b16e3d3dccc9f75c096c18b2ff77b086d774f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:5a:8f:59:21:0c:2a:48:e1:54:e5:8e:3d:
13:ec:78:7f:64:89:ff:67:23:00:13:54:66:6b:87:
e0:76:56:c4:a7:fb:64:3c:38:71:0f:df:ee:14:00:
77:40:bb:d1:24:ea:5f:52:ad:fd:ce:1a:4c:6e:54:
6b:76:aa:e2:b4:a4:31:6e:5b:60:c1:06:f2:70:04:
db:93:c9:30:84:07:3c:86:17:14:79:fd:d5:52:01:
75:59:48:48:56:f9:74:9e:ff:86:f9:ef:c8:1e:7e:
b8:f5:29:4a:60:0c:c7:5d:20:32:62:04:f9:a0:2b:
e6:ac:14:54:6d:9b:67:24:e9:7b:e4:46:f0:41:df:
61:c4:3d:3d:a3:b5:45:9a:83:e7:7f:10:88:37:99:
1f:cb:bc:94:0f:03:c7:97:34:5b:54:0a:c6:82:b7:
4a:c7:26:8b:fa:9f:de:5b:47:95:1a:75:5c:64:5f:
3b:2b:18:64:a9:43:eb:7a:02:be:e1:e8:23:bb:90:
4c:df:d7:f8:37:e0:6a:32:1c:b9:f3:da:67:34:37:
63:b5:b9:c2:ba:86:31:77:14:68:a2:0c:ac:42:3f:
a4:1f:47:88:d0:b5:48:a7:6b:7e:ef:10:13:a3:9e:
20:2b:d5:cf:25:66:3c:4e:76:ef:7e:59:1b:bb:4c:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2B:16:E3:D3:DC:CC:9F:75:C0:96:C1:8B:2F:F7:7B:08:6D:77:4F
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e0:ab:42:b8:98:cc:eb:d2:a7:d2:0a:a5:41:ad:9a:72:df:
54:c0:c2:7d:bd:2a:d2:24:6c:53:70:03:a4:9d:e4:7c:0e:e4:
e9:c5:93:4d:ca:b9:7d:de:3d:80:13:25:f5:97:34:9a:0d:2d:
f9:e9:4b:8d:89:61:7d:24:7a:02:d9:0e:39:d1:3d:7b:47:2b:
53:b2:44:51:df:c5:bc:8f:35:ad:03:9d:00:40:a5:96:39:69:
da:b5:11:6c:80:1b:e8:37:03:5f:ed:9d:21:ad:4d:02:f1:10:
df:4c:5c:84:8e:fe:77:11:86:82:00:81:f5:b4:b6:15:ae:21:
13:13:ca:c1:31:43:14:55:f4:be:04:ab:03:94:90:0e:d3:75:
24:03:7d:68:57:7c:43:e6:9d:84:86:2c:45:53:b9:93:99:33:
4d:51:c4:d4:96:89:88:e7:bb:66:cd:55:10:e3:5d:d3:f0:e8:
cf:b0:f7:ab:f2:4f:e1:2d:19:fd:d4:ff:4b:a7:70:d0:31:7b:
4e:d8:14:59:06:11:b3:c3:35:3d:93:49:d5:e1:bf:9a:67:88:
bb:02:05:9b:3c:bd:4e:eb:e6:4b:62:1c:61:27:76:83:40:db:
74:f4:8b:68:df:d5:09:24:3f:ff:ac:7f:b1:82:d9:1d:ac:05:
ed:7c:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:41 2026 by rpki-client