Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: HWzuaRBK8dLLbWt+2Odk29OjVHoQjcYO2NrBKwAtrEw=
Subject key identifier: C0:73:B3:53:43:AA:C8:FD:E1:FF:F6:03:6A:71:71:03:25:F3:AA:4B
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019E1F114DD376AA93890AD8A659DDA855D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0DAB
Signing time: Wed 13 May 2026 02:01:28 +0000
Manifest this update: Wed 13 May 2026 02:01:28 +0000
Manifest next update: Thu 14 May 2026 02:01:28 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: SoNzg3tiyfWqv3yFYjEGSFkb3UiNlHp9061Ah5HGDAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:4d:d3:76:aa:93:89:0a:d8:a6:59:dd:a8:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: May 13 02:01:28 2026 GMT
Not After : May 14 02:01:28 2026 GMT
Subject: CN=c073b35343aac8fde1fff6036a71710325f3aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:10:77:3e:07:79:b4:43:e9:27:f2:bf:f5:
e5:98:55:18:fd:bf:42:e9:0a:9b:47:8e:85:2a:94:
4b:a2:33:2a:c1:7b:a0:bf:00:34:d0:6c:9b:b4:55:
f8:d9:ba:28:b7:8d:dc:bc:4c:db:93:93:02:e4:52:
c7:f3:04:79:c8:16:9d:c1:03:3b:67:9a:85:49:2c:
fe:aa:dc:dc:99:7b:75:98:6c:2d:7e:48:b9:51:fa:
bd:56:ec:56:d7:ec:25:af:78:c0:9e:01:07:e2:41:
60:0b:cd:45:3a:ac:83:7d:7f:3e:e4:3a:7e:ba:53:
97:c6:bf:85:5e:af:06:b0:4d:f8:4d:b9:fa:63:56:
98:12:10:c1:44:a7:af:ec:57:6f:c5:7b:79:d3:cc:
fe:20:b7:17:bb:af:51:17:02:8c:58:d0:09:78:2a:
82:4c:52:4d:8f:0a:6f:d4:0c:17:af:96:6a:f0:60:
61:25:b8:1c:79:42:9a:af:90:b1:94:d6:ea:1b:b4:
4d:ce:ea:a6:83:80:36:a5:05:e3:d2:0f:9d:13:9c:
2a:49:73:3b:95:e2:6b:15:84:2d:f2:56:6c:72:20:
4a:36:8d:78:98:f1:ca:9e:73:f5:76:6d:bf:d6:e4:
f4:5e:cb:07:95:17:3b:74:b4:32:8b:a4:c8:4b:5b:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:B3:53:43:AA:C8:FD:E1:FF:F6:03:6A:71:71:03:25:F3:AA:4B
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:83:66:2b:36:5f:bf:9a:0a:d0:95:53:9f:38:d1:49:6f:49:
56:19:b5:06:fc:48:26:f0:87:bf:cd:d3:39:65:2e:bf:6f:cd:
ab:7c:39:98:16:b8:4a:40:c7:97:e7:65:25:67:73:d6:5f:61:
cf:18:e7:0f:f7:87:f7:02:9f:cc:d3:47:7c:c7:ca:26:26:5d:
79:05:5c:5f:87:eb:4c:b4:ba:3b:34:31:47:76:5a:61:c4:7d:
e1:1f:4a:a8:f7:1b:f6:07:41:84:64:27:ff:20:c5:17:ad:d2:
8b:50:85:e9:ff:31:1b:d7:c8:62:79:be:68:eb:93:bc:7b:f5:
0d:96:17:47:62:fe:6b:06:0f:c2:c7:35:d0:e1:90:3a:46:b3:
b8:f6:c8:b9:12:0a:b4:3c:e7:13:45:4a:fa:d3:00:dd:5c:d5:
3e:12:4b:8b:af:0b:38:2a:32:91:ba:31:87:37:9d:0b:1f:45:
c2:63:0a:bf:93:01:98:36:f1:48:5a:0c:02:e7:d9:a1:11:b1:
61:76:63:3a:f0:2a:dc:4a:8d:59:a6:b5:a4:8e:85:6a:1f:f1:
9b:d8:fb:de:b7:66:29:50:49:4f:18:d1:34:c0:98:10:6a:aa:
2a:67:9f:bf:96:51:92:f5:2b:31:1f:8b:0f:ae:ae:52:ba:d6:
a3:eb:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:14 2026 by rpki-client