Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: 92it9F2R99/HMVHA8jbV5t6iAgymYnTTJVWOm5FkSu4=
Subject key identifier: 88:25:6E:D9:AB:E4:7A:B4:3F:24:36:B1:2A:73:89:20:8B:2A:35:68
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019E1EDA4E1BEBEAEDE32C0DF6E14B588CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1776
Signing time: Wed 13 May 2026 01:01:23 +0000
Manifest this update: Wed 13 May 2026 01:01:23 +0000
Manifest next update: Thu 14 May 2026 01:01:23 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: YH1Z7dfHn7vBKNUbSamHDP3FHglgMf680h2mVw8Wk7w=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:4e:1b:eb:ea:ed:e3:2c:0d:f6:e1:4b:58:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: May 13 01:01:23 2026 GMT
Not After : May 14 01:01:23 2026 GMT
Subject: CN=88256ed9abe47ab43f2436b12a7389208b2a3568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:f1:e9:0e:bc:54:1a:7a:6d:cd:f5:ac:2c:
16:46:96:94:6e:7e:d9:31:b6:cd:fd:05:58:54:83:
25:16:4a:bb:7f:26:17:a8:b6:4e:43:94:22:ac:11:
5c:41:f9:0e:6c:3c:9e:8e:ec:29:e7:b9:ac:2e:05:
ba:5a:e0:e6:37:22:58:a9:b7:f4:24:78:9b:32:21:
de:7e:49:6d:13:44:bc:e2:a4:2b:ea:72:9c:2e:2b:
e8:fd:1e:b8:89:c6:57:ef:22:83:0c:71:15:a9:eb:
af:60:c1:50:e3:2e:f5:9a:ed:4f:c4:a4:e2:a7:38:
bc:dc:4c:e2:18:e6:3a:c3:79:f2:f0:53:e7:ed:70:
01:79:bf:6e:01:e3:6b:42:c2:98:5e:71:52:c3:a7:
fd:14:c6:d3:e8:cd:62:06:99:db:b3:54:5e:c3:f9:
85:6a:e2:aa:bc:fb:e6:b9:f6:1b:06:bd:8e:ac:ee:
01:3d:23:e7:db:59:b9:c7:d4:b9:11:b8:3d:0f:a2:
c6:ca:a6:9c:af:ac:1d:98:c5:aa:27:af:7d:73:dd:
af:e2:6a:69:01:28:65:2d:77:67:f6:7d:5a:64:66:
fc:56:7d:e0:e4:94:0a:56:f2:d6:12:4f:c5:af:eb:
b0:48:a6:ce:28:ce:22:eb:61:20:2c:94:c0:fe:4c:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:6E:D9:AB:E4:7A:B4:3F:24:36:B1:2A:73:89:20:8B:2A:35:68
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:d9:8c:99:af:32:5b:d1:21:04:a2:50:ff:38:16:bf:13:
9b:ba:8e:fe:b6:f8:be:4d:f3:e8:c5:c5:89:3a:9c:0a:5a:e0:
12:9f:87:01:5e:c5:8b:79:ee:77:12:63:aa:a9:9c:15:f2:86:
bb:a6:81:0d:75:32:d6:9b:f6:41:43:f8:63:86:8b:a2:f1:06:
07:39:cc:e6:71:6d:d2:17:6c:b6:c2:43:5a:90:3c:d5:1d:9e:
ea:9f:43:d9:ab:33:b7:4a:cf:c7:d3:c3:c9:16:b5:dc:98:52:
d8:24:fc:04:4a:7a:6b:24:f2:36:49:13:7a:f9:c9:05:cb:54:
87:2f:28:76:d9:dd:1a:73:ce:af:eb:68:af:34:fb:52:94:c0:
ae:5e:0b:bc:71:6c:7d:18:d0:84:5a:0b:67:bb:f2:0b:01:21:
62:2a:ad:fb:ae:5c:71:32:3e:53:79:f2:6d:77:da:7a:da:70:
5d:20:9d:92:23:39:bb:ef:6a:17:18:01:36:26:88:16:36:bd:
50:d2:7b:63:6a:bf:43:c8:25:a1:f7:22:01:93:b7:ea:28:50:
d6:52:8a:0c:ef:f4:b6:e4:e3:76:b9:c8:fa:c6:33:28:88:ad:
19:95:b8:a3:51:2a:33:a3:86:ed:64:89:eb:80:6a:8c:68:a5:
f8:ad:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:13 2026 by rpki-client