Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: cjnpW++6rOKQ+iF/wpv+22UukojZqblpvMMQUaMLCRQ=
Subject key identifier: AD:EA:B7:6E:54:B7:90:D9:50:FA:A9:C9:5C:99:D7:6A:1B:6F:2D:00
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019E1F113FDAEF568E52E2DA435C6606C876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 07D5
Signing time: Wed 13 May 2026 02:01:24 +0000
Manifest this update: Wed 13 May 2026 02:01:24 +0000
Manifest next update: Thu 14 May 2026 02:01:24 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: 3VLecsvNOqJcUWaShKjhn7+ZDtDX4fkTPZ/ZnOSVGDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:3f:da:ef:56:8e:52:e2:da:43:5c:66:06:c8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: May 13 02:01:24 2026 GMT
Not After : May 14 02:01:24 2026 GMT
Subject: CN=adeab76e54b790d950faa9c95c99d76a1b6f2d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:aa:b5:66:e3:71:78:11:4f:80:72:2c:19:
a6:e2:5c:58:e0:ee:58:b5:50:af:4f:d4:cc:04:bf:
48:46:c6:82:46:8f:ee:55:39:ec:43:ab:9b:8a:44:
0d:0d:ca:32:a7:18:9f:a2:6f:88:8c:9e:f4:5d:81:
45:d6:dd:44:a3:16:e3:b1:76:0f:ba:34:eb:b4:61:
a7:5b:10:8e:b2:bd:4c:2b:68:60:49:3c:5c:d3:92:
9c:fd:5c:46:e0:69:b2:31:c8:0e:be:60:68:3b:0c:
e0:fd:72:56:25:e4:4e:67:ce:b1:df:8d:3d:2d:8b:
b4:fb:f4:0c:ba:5f:a1:86:45:3d:27:99:3f:63:32:
f6:66:51:79:61:f5:fd:b5:b1:85:15:8b:d0:40:a3:
e1:1f:39:ca:ba:f3:80:ef:1c:74:f0:39:86:0a:3c:
b2:f4:79:b7:67:9c:73:01:4d:7a:62:5e:66:30:f8:
6d:f2:34:84:13:ad:cf:10:92:e2:8a:d3:53:55:f9:
78:c0:e6:50:9f:1a:c1:9e:f6:f5:d3:bd:4a:b8:f3:
49:2c:c1:5f:84:4d:52:89:aa:e7:51:4a:f5:27:23:
29:96:5d:d7:12:fe:a8:5e:b1:d4:18:6e:a2:97:0a:
c8:9c:c9:e9:bb:5e:f1:52:1f:ef:16:da:dc:b2:42:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:B7:6E:54:B7:90:D9:50:FA:A9:C9:5C:99:D7:6A:1B:6F:2D:00
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9d:56:e5:57:fc:c7:5c:e0:da:bf:4e:18:4c:f8:b4:90:dd:
95:9d:0b:b8:8a:51:10:d1:38:46:09:e0:9e:b2:71:bc:64:bd:
36:4a:5b:bc:99:dd:28:78:a9:61:d6:5d:e5:6c:0e:b9:d6:2c:
88:aa:e1:8b:0b:a1:3d:82:57:9c:03:40:6a:30:08:f8:37:8b:
e8:0d:d0:05:a3:53:53:d2:6b:00:8a:68:ef:90:4d:f1:a8:2c:
ab:7d:e5:29:4b:c2:92:80:65:dc:97:13:b1:66:54:cd:36:f0:
15:cc:69:a7:ee:9e:1e:e7:5d:f7:3b:e9:38:5c:3a:10:e4:c2:
fb:e7:7b:87:e4:16:a8:a5:34:46:26:14:b1:0a:f6:24:4c:8a:
47:39:0c:e9:c6:7b:61:94:8a:b7:9c:0b:dc:ec:66:14:ae:78:
fa:7b:90:71:3c:7d:99:3f:0c:f3:97:f9:57:87:39:0d:72:1d:
44:bc:69:ed:2e:57:57:f8:8c:83:9b:0c:98:9b:e2:3b:23:38:
67:93:78:3b:9f:1c:66:ce:92:c6:a2:0a:ed:13:22:b4:22:e2:
8f:0a:bc:9c:3d:3f:30:85:9b:c7:f6:22:89:fc:85:da:9c:76:
e6:63:a6:4c:a8:46:4d:dc:76:a0:90:04:98:74:91:de:78:c2:
4f:94:e9:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fET/a71aOUuLaQ1xmBsh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjYwNTEzMDIwMTI0WhcNMjYwNTE0MDIwMTI0WjAzMTEwLwYDVQQD
EyhhZGVhYjc2ZTU0Yjc5MGQ5NTBmYWE5Yzk1Yzk5ZDc2YTFiNmYyZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0eqtWbjcXgRT4ByLBmm4lxY4O5Y
tVCvT9TMBL9IRsaCRo/uVTnsQ6ubikQNDcoypxifom+IjJ70XYFF1t1EoxbjsXYP
ujTrtGGnWxCOsr1MK2hgSTxc05Kc/VxG4GmyMcgOvmBoOwzg/XJWJeROZ86x3409
LYu0+/QMul+hhkU9J5k/YzL2ZlF5YfX9tbGFFYvQQKPhHznKuvOA7xx08DmGCjyy
9Hm3Z5xzAU16Yl5mMPht8jSEE63PEJLiitNTVfl4wOZQnxrBnvb1071KuPNJLMFf
hE1SiarnUUr1JyMpll3XEv6oXrHUGG6ilwrInMnpu17xUh/vFtrcskLlFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3qt25Ut5DZUPqpyVyZ12obby0AMB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJ1W5Vf8
x1zg2r9OGEz4tJDdlZ0LuIpRENE4RgngnrJxvGS9NkpbvJndKHipYdZd5WwOudYs
iKrhiwuhPYJXnANAajAI+DeL6A3QBaNTU9JrAIpo75BN8agsq33lKUvCkoBl3JcT
sWZUzTbwFcxpp+6eHudd9zvpOFw6EOTC++d7h+QWqKU0RiYUsQr2JEyKRzkM6cZ7
YZSKt5wL3OxmFK54+nuQcTx9mT8M85f5V4c5DXIdRLxp7S5XV/iMg5sMmJviOyM4
Z5N4O58cZs6SxqIK7RMitCLijwq8nD0/MIWbx/YiifyF2px25mOmTKhGTdx2oJAE
mHSR3njCT5Tp8w==
-----END CERTIFICATE-----
Generated at Wed May 13 07:50:24 2026 by rpki-client