Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: tVyUrFjTb7fT1ztgtbbD9Ltof/W/r7TYbUbSb7NGdAE=
Subject key identifier: B5:BC:FE:15:56:1C:82:5E:C0:61:4B:00:F4:DD:24:C5:02:55:EA:45
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019E1EA31726D8D46EE686B267041B33FC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 168B
Signing time: Wed 13 May 2026 00:01:05 +0000
Manifest this update: Wed 13 May 2026 00:01:05 +0000
Manifest next update: Thu 14 May 2026 00:01:05 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: QvzKCzZ6c/+sRLl+xE3ybf/OT77huhkYcQckb5dZ7hU=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:17:26:d8:d4:6e:e6:86:b2:67:04:1b:33:fc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: May 13 00:01:05 2026 GMT
Not After : May 14 00:01:05 2026 GMT
Subject: CN=b5bcfe15561c825ec0614b00f4dd24c50255ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:bb:6c:cb:a3:18:a6:0f:ba:fa:76:21:0e:
8d:3b:6c:d2:85:c5:a6:33:29:a7:44:ed:1f:99:de:
04:a2:92:47:e6:2b:07:87:4a:d1:4d:fc:f5:6f:26:
d0:e0:35:a4:96:9d:05:c0:11:e1:49:81:3f:29:29:
07:27:e8:8e:63:e2:d1:e2:4f:ec:d4:bc:ba:42:a4:
97:e3:8f:e3:46:1c:5c:87:83:29:f7:59:2f:55:a6:
41:ad:0a:4f:41:df:2d:8b:c7:8f:96:38:6d:97:84:
1e:1f:3e:40:bf:f6:67:48:db:d3:50:6d:24:bd:f8:
19:1f:83:47:d9:5d:91:35:b1:96:55:f3:89:e7:af:
c3:d8:a0:04:03:53:b8:2e:28:4b:27:99:e6:5a:43:
31:19:49:e2:7b:02:ac:76:d5:39:96:37:f7:56:d4:
2a:de:1f:3a:b3:7e:ac:28:86:5a:f1:b3:b3:a8:79:
2a:e6:97:30:32:3a:35:89:92:6f:cd:fd:81:65:d2:
ec:5f:30:19:e1:58:fa:95:96:6b:d2:b1:4d:da:69:
c5:c7:8f:45:6a:8c:13:0f:14:a7:65:55:fc:56:60:
16:41:1f:82:74:43:f1:c9:a6:a2:16:ac:9b:b3:3e:
02:aa:78:d9:7e:bf:ab:21:14:d1:3b:28:f2:63:96:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BC:FE:15:56:1C:82:5E:C0:61:4B:00:F4:DD:24:C5:02:55:EA:45
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:bd:a3:39:e2:6a:63:d9:2f:07:c9:0b:00:24:1d:de:e6:
88:51:44:7c:52:18:41:e1:ea:0c:8d:a5:62:22:eb:ef:70:30:
0e:fa:6d:df:51:42:53:79:d5:a2:ab:c6:df:da:14:fc:87:b7:
c1:40:bf:79:0e:29:5c:af:76:29:b6:c8:12:7b:95:da:a6:36:
2b:4d:70:e7:e4:f4:e0:9a:56:40:0c:28:35:90:68:4f:34:2e:
94:5a:f9:de:7e:cc:13:28:8e:b3:99:03:49:34:6a:17:e2:b5:
33:fc:13:82:a7:c2:a2:67:3d:3d:ce:f0:e5:63:2f:bb:b7:20:
1a:51:45:6a:a2:28:43:9e:29:94:81:50:4f:59:19:c6:a2:c6:
ab:68:f4:90:b9:21:f9:e3:37:98:bc:34:a0:33:52:a1:68:34:
34:3a:de:71:33:3d:5c:4e:80:c4:08:25:88:6c:0c:57:94:62:
e5:37:b4:39:f8:10:ba:0d:69:ad:ba:e5:c5:76:04:30:cc:be:
75:a3:53:64:e6:94:61:e4:b5:c3:57:24:02:7e:72:6a:ad:24:
11:fc:fd:56:91:bf:74:1e:8a:f0:ed:46:a5:43:60:b0:32:8b:
90:bf:cf:b7:85:af:1a:8a:50:a1:84:43:80:01:64:4a:09:35:
bb:fd:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:25 2026 by rpki-client