Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: kUoc4ON/V0mBENoQSzoiyrCotkDRHn9pAE9rWiinSdw=
Subject key identifier: 29:34:78:6E:BC:E2:28:13:69:28:4E:A9:5A:8A:FE:40:DA:70:4B:DE
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019E1EA2DA30FC945F339263E81EF42E8767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1575
Signing time: Wed 13 May 2026 00:00:49 +0000
Manifest this update: Wed 13 May 2026 00:00:49 +0000
Manifest next update: Thu 14 May 2026 00:00:49 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: AKqCmvtowBwsztkDP9y9Hul8VcaVNRezu1mpVMzFVVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:da:30:fc:94:5f:33:92:63:e8:1e:f4:2e:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: May 13 00:00:49 2026 GMT
Not After : May 14 00:00:49 2026 GMT
Subject: CN=2934786ebce2281369284ea95a8afe40da704bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:57:5c:9b:69:0d:ed:17:49:6b:9d:1f:66:
16:23:a8:a1:9f:55:04:76:c7:55:35:6a:fd:82:aa:
80:d9:68:f7:c0:62:7b:5e:31:ff:62:94:a7:6d:66:
c5:9b:89:7d:dc:01:65:08:ee:9e:67:9b:96:1f:e3:
35:b3:ac:a2:c2:35:a4:53:1f:06:d6:e0:2c:e8:c6:
dd:d4:01:19:cc:10:bf:72:52:ca:9c:c2:53:68:08:
0e:46:bb:6b:7f:a3:c6:a1:cb:82:9c:ac:b9:1a:35:
5c:36:85:02:48:c0:04:5c:87:bb:28:01:ec:92:6c:
3f:2d:f4:e8:78:e7:fc:d2:89:41:c2:6c:95:79:26:
5f:95:17:6e:fb:51:52:92:dc:85:ef:30:7e:78:1f:
d8:66:00:38:95:97:79:f5:0e:84:6c:bf:68:9e:51:
dd:11:c9:c5:35:33:32:20:9f:b6:62:73:0e:4c:93:
62:8e:00:02:9b:89:70:50:d9:b7:1f:b2:be:7a:5a:
df:63:43:21:04:1f:41:15:7f:ef:c6:1f:8d:19:0d:
fe:bf:27:58:71:4e:91:a6:85:1d:fc:3c:24:04:f6:
ab:2f:63:36:f0:1d:d5:40:91:51:d9:28:af:e5:8d:
df:86:e6:ae:82:9e:ff:df:43:f8:48:de:db:0b:15:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:34:78:6E:BC:E2:28:13:69:28:4E:A9:5A:8A:FE:40:DA:70:4B:DE
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:44:4f:d9:31:90:f4:ff:54:93:e5:b4:94:49:d7:20:58:
d4:20:2c:23:36:82:22:8a:b9:c4:45:bf:a7:6d:2d:0d:25:ec:
ff:e4:43:6f:72:10:8c:b5:54:6f:9c:5c:2b:90:0b:3e:67:a4:
24:97:b9:5a:9d:95:08:78:08:0a:e4:6b:eb:ba:18:88:9c:66:
43:f5:8e:55:82:55:64:65:be:9e:5e:0f:f1:51:7d:a0:d1:f8:
c6:38:8a:cd:9c:88:18:26:2b:86:2e:42:15:92:14:a9:f7:b5:
75:f5:7f:33:9d:06:6a:cb:0b:2a:81:c0:6a:b8:21:5c:c3:26:
dc:83:f9:9d:ab:48:0c:1c:ea:1a:03:f1:30:95:9d:51:bf:2e:
e9:15:b4:7a:50:05:fc:f7:62:8a:e9:f4:1e:54:66:1c:e1:9a:
92:e9:b9:0b:41:81:0d:fe:9d:2f:44:1e:f3:0b:96:c5:93:60:
83:a7:6e:1d:33:cc:b3:1a:7a:c8:49:46:de:18:71:80:63:57:
2e:d9:ed:ef:44:c5:f5:7c:5c:60:73:f0:9a:7b:8e:9e:13:8a:
38:8a:b0:a5:af:57:c9:21:18:08:f1:ad:f7:2c:ba:a3:b2:f4:
b8:cc:28:88:d3:8c:aa:de:f1:ab:bb:12:9a:9f:c3:61:d9:ef:
60:0b:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:13 2026 by rpki-client