Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: tfejbSN7+bdvNKNUjP6hCleDUM1EnI2mtlJWEXrL+aA=
Subject key identifier: CA:3B:EC:11:B9:3E:19:3A:1C:A2:15:E7:02:BA:89:6C:E6:2B:F4:FE
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019E1ED9DCC75E75C3C33A20FBE8AD89042A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 01:00:54 +0000
Manifest this update: Wed 13 May 2026 01:00:54 +0000
Manifest next update: Thu 14 May 2026 01:00:54 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: 9jnIqHvoKaA1T9PPYD90T3rNyfPu2Y0JYo+Y+9CLoVg=)
2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:dc:c7:5e:75:c3:c3:3a:20:fb:e8:ad:89:04:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: May 13 01:00:54 2026 GMT
Not After : May 14 01:00:54 2026 GMT
Subject: CN=ca3bec11b93e193a1ca215e702ba896ce62bf4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:48:2a:81:b2:c4:fb:85:6b:ff:3e:82:46:
5b:64:85:db:ea:44:a6:f3:cc:25:70:d5:ff:19:7b:
4a:68:0f:44:6b:9f:6d:d6:2b:1f:55:e5:b7:0c:57:
9f:83:b0:4d:6b:9f:5f:4c:16:cd:2b:5a:a5:25:76:
96:f0:3f:d1:c8:e4:82:0f:de:a8:b8:bc:38:d8:27:
12:48:96:c8:e1:58:e9:b1:8e:6e:81:7a:3f:a9:82:
03:ab:1e:44:7e:d4:1c:67:92:ef:10:35:ea:8d:25:
7c:9f:28:3e:6b:86:e5:b0:c8:d6:fd:4f:29:f8:ed:
e2:39:40:74:11:5a:0c:a5:9c:32:64:cc:02:b4:aa:
bc:7d:fd:f9:7e:20:ad:e0:9f:e2:ee:de:82:68:ef:
51:27:35:08:d8:1f:69:ca:ea:fe:74:31:d1:c7:80:
16:6e:1b:3b:e1:a5:6f:51:f4:84:d9:73:a3:7a:7e:
52:39:aa:2b:e3:d0:d9:ba:b8:ee:02:eb:7e:93:6d:
20:f5:54:6b:2b:46:53:97:1e:d4:ad:25:5e:ee:40:
2e:79:62:25:58:23:ac:94:dd:21:4a:3c:75:f0:36:
c8:65:c2:a7:36:30:ed:c2:22:13:73:d6:73:d2:14:
6e:d4:e4:f8:ed:88:62:66:0d:fe:9b:77:ad:30:ee:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:EC:11:B9:3E:19:3A:1C:A2:15:E7:02:BA:89:6C:E6:2B:F4:FE
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b4:c7:3b:ba:92:ef:2a:17:cc:d3:5d:86:60:3d:d7:45:9d:
46:b7:f9:4a:7d:49:28:d9:f0:e3:f0:90:ae:f2:f6:9c:f5:2f:
f5:3c:ab:91:c9:90:46:ce:1e:97:71:80:6b:8d:b7:ab:19:7e:
f1:4f:66:d9:56:ab:90:31:1b:bf:40:e6:c3:b4:de:c1:d7:9b:
a9:cc:38:d1:4c:95:b5:06:6b:14:f2:e3:25:c6:c3:f7:30:ac:
7d:6c:36:9e:7c:93:46:76:8c:32:75:42:10:06:10:63:73:9c:
a8:f9:5b:43:7f:61:ff:44:52:87:a5:b3:54:27:5d:49:87:9e:
ea:8f:85:94:8e:15:c4:32:7a:20:94:6d:56:f1:93:61:17:3f:
44:75:5d:3d:35:b1:05:fb:af:38:5a:45:18:99:40:c5:4c:81:
b7:4a:8c:db:6e:fc:39:17:8e:f3:0e:b7:60:6c:2b:0d:54:5e:
f4:fa:31:e4:ec:04:a7:84:27:2a:07:0d:df:08:5a:0a:3c:fe:
7e:eb:a2:68:e1:e8:c5:7b:dc:2f:bd:04:6b:e1:02:c6:79:fd:
ae:ae:b3:b2:58:85:9f:37:ba:29:22:97:5d:2a:28:c5:cf:8e:
02:4b:5b:c7:67:07:6a:81:43:37:7d:35:2f:93:11:0b:f4:ff:
d9:49:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:18 2026 by rpki-client