Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: wFQkOxZqOfwKkAafrYoKWIUIa8PsCaha0V+uG0R9tQM=
Subject key identifier: 2E:5B:63:97:3A:C4:64:42:45:A1:A4:DA:8C:14:9D:60:91:12:0C:97
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019E1D901EA39D6841032BF886AC33A13808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:00:44 +0000
Manifest this update: Tue 12 May 2026 19:00:44 +0000
Manifest next update: Wed 13 May 2026 19:00:44 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: AoDYykKh5wvQ4gHe5YZ7EHzHJ9tsvcSV4leCMxdewVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1e:a3:9d:68:41:03:2b:f8:86:ac:33:a1:38:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: May 12 19:00:44 2026 GMT
Not After : May 13 19:00:44 2026 GMT
Subject: CN=2e5b63973ac4644245a1a4da8c149d6091120c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:59:07:6f:bb:b2:89:4a:d1:f2:d1:76:c3:
82:ef:f0:0d:4a:d3:fb:4b:ab:ae:7c:bb:9e:ee:aa:
6f:25:41:3f:48:ff:10:b2:4c:20:d7:8c:dc:dc:51:
cf:8a:f8:71:a4:d7:15:9a:9f:58:ce:2e:37:e9:66:
f2:dd:0d:36:66:93:5b:ab:6a:85:aa:93:76:8c:ee:
36:56:2e:d4:84:e6:e6:3d:1a:b3:bc:2d:af:f7:95:
2e:b7:c7:23:10:75:08:48:c7:af:98:00:1c:ed:b3:
cf:43:ef:f9:a1:1e:50:71:bd:a7:d6:32:8c:73:3a:
44:05:69:0d:f6:8c:ac:54:b3:54:1b:34:a6:af:18:
1e:2b:ac:37:6a:32:4a:e3:1f:6c:1a:2d:40:4e:51:
06:9e:e4:fa:1c:63:0e:ec:0c:2f:e4:a6:70:19:26:
ea:15:d8:cd:16:35:d3:11:72:04:80:01:3b:be:10:
b0:ea:00:a0:0e:b7:5d:02:05:a4:56:f3:fc:21:d2:
71:08:69:57:10:e7:07:d6:dc:b3:61:62:e6:a0:45:
cb:a0:78:d3:c1:49:7b:ef:7f:f4:af:15:8a:1e:16:
dc:60:4a:19:14:25:ad:1f:6c:bb:e4:93:fa:63:0d:
e9:88:4d:df:f5:10:65:01:58:ce:b2:f3:4c:35:5e:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:63:97:3A:C4:64:42:45:A1:A4:DA:8C:14:9D:60:91:12:0C:97
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:48:0e:73:b3:ea:d9:0c:80:6e:a7:74:5d:44:99:5f:97:56:
05:00:32:32:9e:ca:06:a6:3a:b8:3a:f5:ee:28:7a:ec:a8:ef:
0b:e8:9d:06:f0:45:28:c0:21:11:15:82:4f:74:95:d4:c1:33:
73:08:ff:a3:e4:fe:50:29:af:70:fc:62:7f:25:81:41:7f:a4:
af:93:3c:16:4d:14:5f:02:22:d8:41:d1:43:94:03:a3:a7:5c:
97:d6:f3:14:bd:b6:c2:6c:31:ea:a6:3b:12:00:ab:4d:23:25:
1d:8c:69:a4:00:fa:05:82:da:c9:8f:74:4e:3f:26:94:1c:7c:
f1:d1:48:03:df:a2:8e:d0:da:c5:b7:f4:46:c5:49:7c:63:ee:
ac:f8:b0:17:bb:73:ea:38:40:0c:90:c4:91:04:58:57:56:56:
d8:c3:b2:a1:fc:c9:5e:df:d4:b3:4c:61:0c:50:a5:35:fc:12:
8d:de:85:bd:1c:7c:d4:ef:f3:7e:ce:81:6d:b7:72:f8:ae:91:
81:ef:e7:4d:f1:9c:e5:3a:39:55:06:c3:8a:91:b2:b6:d5:f5:
30:59:b0:8b:b8:5a:f4:b1:ac:6e:04:91:4a:7a:9a:0b:ef:ed:
6a:84:42:b9:b7:8f:6e:c8:c3:7e:aa:d6:34:7e:72:4a:f6:80:
a5:4e:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:42 2026 by rpki-client