Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: WnpRNNClsBGDKrahV7vPUGEOUb4Jk2E3GdOlpIJe8Xg=
Subject key identifier: 7C:4B:4E:C1:FB:13:18:81:34:F8:DA:8F:CA:70:A2:D1:9F:72:E4:4F
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019CAC0FE70FC441AAA1C377DDB84BB01186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 1136
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: cM14D+HpDtAaHo9mMmWvI4CrXwXw+SSHKSYEusDoXTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e7:0f:c4:41:aa:a1:c3:77:dd:b8:4b:b0:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=7c4b4ec1fb13188134f8da8fca70a2d19f72e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:ee:8d:e7:d5:28:8e:41:e2:c8:92:0c:49:
69:5a:c9:33:06:1b:7a:65:e6:46:86:63:79:94:e0:
3c:72:ba:b0:55:2b:72:6d:51:43:66:a7:9b:cd:c7:
c3:b0:e2:5d:0d:32:65:c2:4d:a4:00:87:8f:12:7e:
68:97:65:48:76:f1:2b:fb:4a:57:5e:68:6d:a6:2d:
c8:ea:01:01:78:22:02:ff:c6:a1:ec:d2:5e:41:a8:
0a:24:76:d7:86:8e:5a:a9:eb:0d:55:23:6a:4c:06:
17:45:06:c2:35:7e:2a:02:b8:66:ac:39:78:cb:9f:
24:17:6c:77:ad:b1:f1:4f:77:0c:50:31:21:d1:6c:
7e:53:8a:f0:42:a9:a0:83:96:de:c8:c8:11:5b:87:
41:28:ec:82:48:e4:a0:57:c1:e7:d4:d8:f8:ca:7f:
94:57:d4:53:52:73:f6:be:18:cf:cd:c3:97:4f:cd:
56:7e:78:ff:40:7c:7f:06:7b:0e:a6:1a:d7:85:e3:
cd:ed:65:e5:0d:f7:cf:fc:5e:5c:0b:f5:fa:95:85:
34:bb:8f:da:d2:0f:d3:2b:63:d2:3c:2d:ae:d7:a2:
45:71:d2:7a:a1:af:e8:bd:62:1a:6f:46:d9:31:9a:
0a:6e:69:d3:dc:72:c3:4e:6e:ee:b6:71:4e:85:78:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:4E:C1:FB:13:18:81:34:F8:DA:8F:CA:70:A2:D1:9F:72:E4:4F
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:02:c7:2d:86:45:3f:6a:c3:2a:7b:ea:bf:dd:bb:20:f4:28:
ca:d0:40:96:e5:4f:bd:ec:05:07:f4:3b:01:61:7b:83:bf:36:
1a:7b:e2:fa:11:ed:d4:b4:a9:b1:a7:72:b3:8c:83:1f:6c:61:
da:68:81:e5:5c:15:cb:6c:4e:d3:41:cc:f1:6c:c4:91:92:c5:
3d:11:6c:8e:c5:a0:b2:37:12:b3:23:10:c1:07:a9:32:f8:c1:
26:88:e8:19:6d:e2:b4:b4:fd:9f:cc:c9:c6:4d:b4:df:48:49:
ad:1a:47:af:e9:a8:84:86:0f:96:e8:47:b7:45:6f:98:40:00:
c5:e9:07:bd:2f:e3:c4:19:38:14:1c:df:03:8a:11:0f:07:b0:
04:08:62:7c:60:99:8a:4c:f7:a1:d0:1f:78:09:cc:1a:8e:3f:
43:51:d0:c7:f7:c9:4e:88:66:c4:e0:a8:ad:75:78:74:e4:8c:
44:56:50:46:8e:12:9a:8d:7a:f9:7f:79:13:c1:a5:fb:bf:47:
72:dc:10:35:f1:fe:2b:d7:4f:ee:fa:7e:c9:f4:b9:fe:98:9b:
84:3f:62:c8:cb:ed:8a:e5:4b:87:04:2e:38:e4:cc:92:7a:20:
5c:c6:2c:09:a3:a5:a1:83:55:9f:45:29:7f:23:f8:8d:fc:a3:
c2:a5:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:25 2026 by rpki-client