Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: fifbrwwrEtpGPi+220kWZ/NvbJamN+WzACEj3+SwzJ0=
Subject key identifier: 33:6C:A7:34:09:FA:1F:77:E3:A6:16:49:51:7A:02:39:BB:1C:4F:92
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019E1F117E42C17A92ABC602CF8832A16443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0CFC
Signing time: Wed 13 May 2026 02:01:40 +0000
Manifest this update: Wed 13 May 2026 02:01:40 +0000
Manifest next update: Thu 14 May 2026 02:01:40 +0000
Files and hashes: 1: AeZuHYO0mULsrI-c-YIMMNHmKvk.roa (hash: E13pkVsdNOEH/6Nn+/0O/foSnJKfkBMXITwoCcEEiuI=)
2: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
3: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: NShpv96lHZvHiL31xFYoqe7luDyiQjtgM6Qz0en2xA0=)
4: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7e:42:c1:7a:92:ab:c6:02:cf:88:32:a1:64:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: May 13 02:01:40 2026 GMT
Not After : May 14 02:01:40 2026 GMT
Subject: CN=336ca73409fa1f77e3a61649517a0239bb1c4f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:b6:1e:fc:7a:59:57:8e:a6:b8:9c:89:bd:
99:79:44:53:47:18:49:41:d2:cb:c6:38:6c:6c:9c:
4b:0d:2c:0b:e0:95:8c:44:4c:ec:39:26:be:c5:22:
84:46:cb:21:fe:6c:c9:5e:57:5d:8f:63:49:18:bb:
84:5e:76:99:06:74:d9:7c:f2:05:bd:e5:38:ad:30:
6e:a7:d8:7e:1c:11:31:0a:48:28:2d:03:4d:c4:4a:
8d:36:53:b2:4b:82:59:54:74:4d:64:ea:91:88:df:
fe:4a:a4:9c:9a:46:19:39:0d:f4:49:a4:04:4e:cd:
b0:ed:f8:c0:fe:1d:9a:04:6b:05:2f:fe:0f:f4:c8:
5a:e7:50:1a:0b:36:09:28:95:bf:34:f5:de:17:b0:
ba:1f:25:0e:0c:5b:11:22:f0:24:45:f1:b1:da:4f:
23:a3:76:ee:ce:23:ea:b0:a6:31:0c:fb:61:5f:eb:
2b:7c:9b:7e:de:8e:4f:89:7e:1a:24:99:7e:f3:11:
75:05:0e:5a:39:ab:ae:81:13:f7:ec:e5:10:a5:a3:
46:d7:ab:9d:65:cc:8a:9d:b4:39:af:c4:28:8b:2f:
c5:85:46:2e:41:c4:4f:fb:dd:b1:cc:4b:46:6d:7c:
47:a0:96:24:20:96:3f:9e:12:34:20:c6:57:71:bf:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:A7:34:09:FA:1F:77:E3:A6:16:49:51:7A:02:39:BB:1C:4F:92
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bf:d6:5b:d1:13:5b:37:cf:74:92:32:cf:57:7c:6e:c1:87:
53:2d:a0:88:7a:49:8f:4a:65:22:62:af:b7:dd:e2:6d:2a:37:
ee:13:15:84:9c:80:4e:0f:5a:4b:32:f2:45:d9:33:db:fc:af:
18:5d:9a:0d:36:c7:c8:ae:d5:2e:9a:41:50:de:55:4c:e1:a4:
de:a2:25:a4:5a:d7:b7:c5:c6:7f:64:b8:74:74:ed:ab:d3:14:
f9:6d:70:f1:26:46:3f:44:2e:48:57:c7:08:68:28:bd:84:54:
a3:c5:c3:ea:92:4d:94:7f:fd:43:16:01:91:9f:aa:90:be:80:
5f:78:4d:1a:42:47:a5:d4:73:2d:b2:63:32:28:34:e5:91:8d:
90:59:8e:63:72:87:7e:4b:7c:79:6c:a6:fa:8b:f1:bf:43:fa:
f6:3b:41:e5:10:ac:79:b0:8e:e0:25:60:04:c0:fd:19:5e:3f:
c5:7e:0c:29:2e:32:62:df:36:2f:16:fe:01:24:34:34:d6:c0:
63:41:e1:7b:ed:6a:dd:79:ee:8f:36:e0:d4:43:a4:45:cd:25:
5c:6f:13:5e:17:32:cb:e2:b0:1a:6a:fd:59:2d:25:d2:89:ac:
8f:c4:d7:12:59:35:77:54:70:02:35:07:79:55:6e:26:c5:6a:
9f:f8:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:23:31 2026 by rpki-client