Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: DUseAd1KjpgbmhmmenKN4hmcqO2M/ZAuX5+ZFzHBNkA=
Subject key identifier: 47:64:0E:C3:1E:9C:8D:CF:FA:31:74:69:0E:A1:DA:38:B4:47:8D:78
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019E1DFE2137E789B17342B074A039FBD0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 10C6
Signing time: Tue 12 May 2026 21:00:54 +0000
Manifest this update: Tue 12 May 2026 21:00:54 +0000
Manifest next update: Wed 13 May 2026 21:00:54 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: kbvrWVMikXJJkOBjarOpdNv8+vSXffDqCpMugl7RGZY=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:21:37:e7:89:b1:73:42:b0:74:a0:39:fb:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: May 12 21:00:54 2026 GMT
Not After : May 13 21:00:54 2026 GMT
Subject: CN=47640ec31e9c8dcffa3174690ea1da38b4478d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:b2:06:91:9e:26:fa:89:f8:e8:43:1f:01:
11:34:31:01:2c:43:57:c4:fd:6e:fa:25:f5:94:a9:
f7:44:cb:12:60:8b:4d:e1:e0:1b:bb:16:c2:0e:f3:
bf:4e:b8:fe:73:14:c5:43:c5:10:3e:15:56:2c:f5:
69:48:1c:36:65:ce:03:fd:8d:07:7c:ca:a1:61:6a:
85:65:84:50:3d:d0:e5:41:d3:d6:98:14:44:86:0f:
24:9c:62:8f:31:fa:3a:6e:62:4e:34:5a:58:3f:1b:
c6:eb:12:c8:7b:92:3f:a2:e5:5b:5b:dc:2a:09:a2:
39:88:65:2e:c1:bd:57:d4:d7:84:b4:e3:e2:9f:d9:
0f:62:29:ee:42:cf:f3:99:bc:1d:63:90:4a:b7:9e:
01:1b:62:42:60:22:7d:32:4e:51:7c:7e:f5:dd:78:
4b:b2:12:70:5f:93:dd:80:44:f1:e9:8c:82:fe:f7:
ff:f3:58:2a:dc:f8:32:0d:96:d3:17:b8:db:20:12:
f5:e9:32:c9:dc:9a:93:33:ef:69:b5:57:0d:ec:cf:
31:51:3a:d8:18:10:1c:7d:fd:1e:2f:bc:7c:6a:b2:
30:dc:85:20:5e:4a:00:94:62:3f:ad:b2:b0:16:65:
58:c9:78:e9:a8:8a:d6:2f:09:cf:98:10:69:6f:0c:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:0E:C3:1E:9C:8D:CF:FA:31:74:69:0E:A1:DA:38:B4:47:8D:78
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:23:3c:60:e3:b3:c3:d9:88:f3:e9:4f:17:71:0d:ed:a9:
e2:6d:36:7b:05:57:3d:9f:fc:60:86:2e:ec:45:af:72:7f:08:
99:b7:9c:02:46:6f:7d:23:a3:6b:78:12:a6:8e:f5:65:19:e1:
14:22:86:f2:37:d2:e2:63:08:ef:b3:97:0a:72:51:7b:8c:47:
ed:10:52:b0:d4:4e:f9:8a:44:f6:69:33:0d:e7:69:f2:63:80:
23:be:25:8c:61:61:49:fe:27:da:44:1e:18:ca:7f:cc:ca:80:
3a:02:a2:cf:d7:2d:0c:5f:b4:07:25:72:24:74:10:38:16:79:
6e:20:08:5b:d0:1d:05:ab:b1:cb:23:ea:05:23:fb:9a:53:6c:
81:e9:6f:ac:2c:13:0e:01:70:74:07:5d:85:17:7b:80:7b:8b:
2f:fa:24:93:6c:74:99:d2:ed:bd:1d:5c:71:44:cf:e9:8e:66:
0a:6d:ea:cf:10:ac:26:20:b3:69:bd:55:91:60:b4:45:8f:41:
02:ec:a9:5b:12:8c:5f:d5:87:27:b7:e3:30:89:2e:61:78:a2:
16:68:7d:2f:92:9a:af:e6:91:66:f5:d2:ab:d5:41:3d:9f:26:
48:cb:15:c6:42:40:f5:21:b3:5a:bb:c7:07:10:b1:9f:25:a7:
ea:76:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:11 2026 by rpki-client