Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: Wj9JqzOGJwzYvj5853l4gJl9cClqKPKQsxbEgP4Rndw=
Subject key identifier: 23:D4:F4:03:3D:F4:45:A7:09:9B:61:80:90:4F:15:F4:3C:29:C1:9F
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019E1CB55C9CAB20D6FDB5C21BA1195E30EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 15:01:48 +0000
Manifest this update: Tue 12 May 2026 15:01:48 +0000
Manifest next update: Wed 13 May 2026 15:01:48 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: aOIB9EStz9INgqU7CaINwxaJwCI.asa (hash: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: Rzy6In4U0o98YxvsiZYpW2erud0oCkSDd03iJ+tBuiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:5c:9c:ab:20:d6:fd:b5:c2:1b:a1:19:5e:30:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: May 12 15:01:48 2026 GMT
Not After : May 13 15:01:48 2026 GMT
Subject: CN=23d4f4033df445a7099b6180904f15f43c29c19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:a5:a0:46:10:34:56:87:1b:cb:08:f7:a8:
c0:97:7f:bc:83:e3:c5:c9:e1:58:5f:45:64:79:3c:
b4:41:99:a5:fc:e8:9b:cc:00:00:e2:cf:05:cc:04:
41:89:36:12:19:38:cb:a6:50:5b:8b:6a:fa:78:66:
50:f9:dd:88:b1:55:f5:f6:ec:92:a8:f9:4e:76:5e:
c3:84:e0:9f:c9:f5:3b:f4:e7:7e:1e:07:6b:77:64:
eb:6f:ea:fe:08:fa:4e:c8:fe:53:1f:09:5f:25:05:
59:76:79:1f:e5:cb:1a:ba:db:83:98:cd:c9:b8:b2:
3c:f4:2c:67:d3:be:9d:2c:51:62:ea:6d:cc:2f:52:
2c:34:ba:59:62:31:b3:3d:32:7a:e3:4d:a5:94:d9:
9c:19:4e:33:25:f7:d3:b3:5e:a1:76:1a:16:09:7f:
19:11:57:8b:f5:a7:70:fd:2d:18:f1:de:80:fd:52:
7d:e2:5c:0b:f0:e5:2c:92:aa:73:83:a2:af:48:69:
c9:8d:cf:ca:6f:ab:de:7a:43:c0:10:89:7c:90:7f:
6c:fb:e1:af:0d:1c:3f:1e:a1:5b:95:4f:bf:0e:6c:
21:a2:53:af:62:59:8b:49:13:96:b8:21:41:e5:e4:
e5:26:c2:dc:db:64:9e:11:45:a4:c6:e4:52:07:8f:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D4:F4:03:3D:F4:45:A7:09:9B:61:80:90:4F:15:F4:3C:29:C1:9F
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:52:8c:04:28:ec:fd:27:51:b8:12:84:b8:fc:9b:34:8a:d8:
02:3a:06:21:83:93:5a:99:08:f4:85:33:86:64:b4:0b:d8:b8:
e3:b3:71:02:3f:7b:13:99:0e:64:62:d4:d5:32:0b:6c:a7:ee:
ee:02:e4:f9:02:b0:77:64:25:65:78:67:89:96:15:16:55:98:
68:85:a3:94:7c:93:cb:2e:d1:3b:30:86:da:22:88:21:53:ff:
d7:fa:40:a0:6c:b5:18:13:21:c5:fe:de:a2:25:36:fc:55:82:
48:1c:1f:47:42:04:a9:a5:ed:86:b8:1b:33:62:b5:04:b0:4f:
1c:94:c1:66:ac:96:3b:b2:a8:7d:cb:3f:c0:f1:c2:c1:bb:68:
64:5f:ed:bd:c8:38:7b:5f:53:3b:7e:59:52:87:37:2c:f5:23:
88:bb:01:f7:14:75:68:00:36:45:a1:63:94:2d:fc:fd:bd:98:
d2:1a:ef:67:fa:33:5f:87:10:2e:1f:63:23:ed:fa:a9:aa:86:
57:9e:25:a3:db:6c:49:f6:4b:0f:cc:ca:12:63:16:70:83:c5:
d4:2f:6a:e6:6f:01:70:e6:f4:8c:d8:19:06:76:96:68:80:ff:
19:25:ec:94:12:24:31:6a:83:5d:4f:02:74:cd:67:5e:fc:f9:
9d:ed:94:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctVycqyDW/bXCG6EZXjDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj
OTc2MDEwHhcNMjYwNTEyMTUwMTQ4WhcNMjYwNTEzMTUwMTQ4WjAzMTEwLwYDVQQD
EygyM2Q0ZjQwMzNkZjQ0NWE3MDk5YjYxODA5MDRmMTVmNDNjMjljMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0uloEYQNFaHG8sI96jAl3+8g+PF
yeFYX0VkeTy0QZml/OibzAAA4s8FzARBiTYSGTjLplBbi2r6eGZQ+d2IsVX19uyS
qPlOdl7DhOCfyfU79Od+Hgdrd2Trb+r+CPpOyP5THwlfJQVZdnkf5csautuDmM3J
uLI89Cxn076dLFFi6m3ML1IsNLpZYjGzPTJ6402llNmcGU4zJffTs16hdhoWCX8Z
EVeL9adw/S0Y8d6A/VJ94lwL8OUskqpzg6KvSGnJjc/Kb6veekPAEIl8kH9s++Gv
DRw/HqFblU+/DmwholOvYlmLSROWuCFB5eTlJsLc22SeEUWkxuRSB481GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPU9AM99EWnCZthgJBPFfQ8KcGfMB8GA1UdIwQY
MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt
MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx
LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVKMBCjs
/SdRuBKEuPybNIrYAjoGIYOTWpkI9IUzhmS0C9i447NxAj97E5kOZGLU1TILbKfu
7gLk+QKwd2QlZXhniZYVFlWYaIWjlHyTyy7ROzCG2iKIIVP/1/pAoGy1GBMhxf7e
oiU2/FWCSBwfR0IEqaXthrgbM2K1BLBPHJTBZqyWO7Kofcs/wPHCwbtoZF/tvcg4
e19TO35ZUoc3LPUjiLsB9xR1aAA2RaFjlC38/b2Y0hrvZ/ozX4cQLh9jI+36qaqG
V54lo9tsSfZLD8zKEmMWcIPF1C9q5m8BcOb0jNgZBnaWaID/GSXslBIkMWqDXU8C
dM1nXvz5ne2Uww==
-----END CERTIFICATE-----
Generated at Wed May 13 01:19:42 2026 by rpki-client