Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: IEKGmcbec/fJpX4/7UhgzAyVukGojYtzv1mu9ckAb2w=
Subject key identifier: 1B:E1:FF:A3:BB:93:24:25:DA:30:A5:36:B0:37:8C:D0:19:C2:0E:53
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 019E1DFE9FCFEC89B2C97B9803538B010353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:26 +0000
Manifest this update: Tue 12 May 2026 21:01:26 +0000
Manifest next update: Wed 13 May 2026 21:01:26 +0000
Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: I6VXKawELMJFSNChSNV9tE/hHrVcmeGzoLPwdgSCz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:9f:cf:ec:89:b2:c9:7b:98:03:53:8b:01:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: May 12 21:01:26 2026 GMT
Not After : May 13 21:01:26 2026 GMT
Subject: CN=1be1ffa3bb932425da30a536b0378cd019c20e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:79:2b:f4:f0:7b:05:26:c9:76:cb:79:f2:
a7:c5:46:45:2d:e3:7e:49:d1:26:e6:d3:6e:6b:21:
43:fe:91:77:2d:dd:6e:95:6c:32:6b:71:59:69:60:
03:c7:fc:b9:e3:ae:50:95:83:4f:b3:f8:17:cc:03:
8a:21:f2:92:d4:51:92:ac:a1:a7:7c:1a:5c:1c:32:
67:e9:09:e2:06:6d:b6:58:aa:16:06:49:5c:f8:4a:
b8:30:00:58:18:58:ad:d7:0b:2d:10:cc:11:e4:6a:
1e:48:02:29:66:fb:77:e1:a7:9c:9d:60:92:a2:f3:
0a:bb:14:b6:f5:98:db:ca:c4:02:ba:ee:68:be:fe:
4a:33:8f:70:a5:41:dc:6a:4c:6c:3e:1b:c9:9c:95:
fe:37:d6:5d:fe:f5:71:59:69:8f:91:8c:d9:80:e5:
41:a2:4c:b5:1f:b3:ee:80:b9:50:56:72:e2:8b:26:
e4:86:58:ce:57:b8:a2:a0:2b:f9:96:3a:8e:c4:1e:
01:e8:96:2f:b9:9e:0e:cc:7e:f6:98:21:73:57:66:
8a:7a:c5:d0:15:e8:62:23:b5:b0:c3:9f:87:0a:20:
a1:3d:a9:19:79:6f:e0:86:fd:ef:03:a4:12:98:89:
2d:d7:66:d9:1d:52:c1:8c:3a:f9:8c:e9:76:78:f8:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E1:FF:A3:BB:93:24:25:DA:30:A5:36:B0:37:8C:D0:19:C2:0E:53
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6b:73:01:ec:1e:4f:9a:18:8a:6d:73:81:e2:6d:ee:04:a1:
bb:82:40:46:52:3e:39:e4:9b:f6:45:74:d2:2d:11:d3:e6:79:
e6:be:18:b2:8c:2f:2a:f4:3b:95:4a:64:f4:37:5c:bc:00:0f:
ad:00:73:61:a5:64:18:f1:e0:a2:ca:a0:c3:a2:e2:e7:88:cc:
29:94:e7:7f:eb:e1:d8:fe:6b:c3:4f:ef:1f:14:1e:da:26:40:
72:64:05:2b:40:41:5a:d6:e4:38:65:24:8a:43:b5:7b:6f:97:
0e:d2:2a:a3:37:6b:e5:b2:48:4e:3b:54:5f:2d:82:7a:9e:a6:
62:fd:8b:0a:a7:37:22:bb:42:43:50:75:47:1c:6c:c3:16:17:
f3:32:7c:48:57:bc:0d:97:e1:db:f7:8f:3a:73:af:58:8a:25:
27:6d:fd:f2:7b:d9:e8:07:ea:4b:4c:14:3e:32:77:11:ac:2f:
47:66:be:0a:04:d7:e8:79:f0:2a:9a:ad:7d:fe:d4:8c:e1:ef:
69:de:6e:c4:50:02:a4:85:f8:86:00:62:fd:60:de:5d:a7:f7:
41:75:45:bb:5a:c6:f2:f5:72:25:d8:91:3f:47:3e:04:6d:32:
3b:7a:bd:5a:e6:26:47:8c:02:69:3b:5a:6e:3f:6c:fc:f2:8f:
f7:87:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:05 2026 by rpki-client