Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: l+WYoRVpeOyadnuzTtbRpXy3zsUOjXf5M5dtZDOBzFk=
Subject key identifier: DC:ED:06:B3:6F:B5:29:01:EB:22:92:AC:B7:F2:09:FF:FC:AB:F5:34
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019E216DE7B55EE91931E1EC0E6124483226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 13:01:51 +0000
Manifest this update: Wed 13 May 2026 13:01:51 +0000
Manifest next update: Thu 14 May 2026 13:01:51 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: c+v346D+yh7q3+fX0fqjD54UcIgGPUAdOB7Wf8poEx0=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa (hash: joUgZ1+fSeYV8k7xjRhKW4mLd1zfaAQo+STxOJIkVhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:e7:b5:5e:e9:19:31:e1:ec:0e:61:24:48:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: May 13 13:01:51 2026 GMT
Not After : May 14 13:01:51 2026 GMT
Subject: CN=dced06b36fb52901eb2292acb7f209fffcabf534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:34:8b:85:ba:df:fd:b0:10:48:d6:f0:7f:aa:
5d:79:c3:d9:f6:39:3a:af:5c:65:2c:73:00:1e:ba:
6c:99:a7:bd:92:fb:f8:55:ea:91:ac:ba:bf:33:e0:
39:f0:79:d1:11:de:3c:d3:9b:e2:ed:25:79:0b:42:
87:47:22:e1:78:af:3c:d6:a1:7e:6f:21:5e:96:15:
5f:53:1b:cf:98:8a:63:dd:ef:83:52:97:8e:08:1f:
69:02:d5:b4:73:5a:2f:e9:67:b2:27:27:16:fc:4a:
4a:21:c9:b1:b4:0a:ce:b3:96:e7:82:0e:d7:18:a0:
09:8b:db:f1:c9:be:de:12:43:5b:91:30:87:59:57:
6c:cc:2a:2e:5a:f0:9e:b3:90:d9:53:d7:8c:72:ce:
b4:5a:6d:ec:31:e5:84:aa:8f:9a:a4:07:8d:7d:01:
4b:41:4c:a9:99:bb:25:2b:e8:1c:10:5b:bd:ef:db:
19:a3:ef:dd:6f:c2:8b:0e:6f:2a:72:4a:63:14:a7:
1d:74:99:53:5c:a0:cb:0b:0a:ed:f0:3c:24:dc:0a:
03:ac:4d:a0:2c:2f:31:82:a9:29:c1:d2:f4:48:63:
04:46:cb:57:b3:e8:b7:ad:da:16:a2:b5:d7:e4:93:
4b:e8:e9:67:3e:59:24:02:7d:83:24:08:0a:25:e4:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:06:B3:6F:B5:29:01:EB:22:92:AC:B7:F2:09:FF:FC:AB:F5:34
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4d:29:28:b3:67:f1:f5:62:a1:38:5d:a6:75:66:83:40:1a:
eb:c1:02:dd:a4:78:1e:89:9a:29:83:6c:e0:ad:62:47:c7:00:
b0:98:44:78:08:c6:b9:90:7a:0c:d7:0f:f5:d2:6f:16:21:7e:
43:cb:fa:99:e6:59:f5:0b:ed:f9:3e:f2:36:be:5f:1c:d0:ad:
78:4e:6d:bd:7d:2d:63:b9:35:5d:5a:27:14:48:a7:35:b9:45:
b2:75:ce:99:80:47:8c:f7:45:0a:a6:ac:4f:d2:6b:c9:f0:51:
00:5e:7e:98:00:c8:7e:e6:e2:0e:e0:fa:07:7a:76:b2:92:5a:
7c:97:ae:9d:45:64:12:db:b3:a5:f4:b6:50:8a:b5:32:b4:a3:
d6:dc:a3:cb:de:24:c4:2f:bc:6a:d7:d8:95:9e:72:b1:b9:84:
31:c7:29:c5:3f:48:f1:89:7e:d8:3a:d5:a7:ba:1f:b6:e3:59:
dc:a8:11:ca:7f:a0:e9:88:cf:d2:92:86:7b:26:7f:46:5d:6a:
25:3c:96:e2:60:e6:a8:11:4b:ad:41:a3:39:9e:67:c5:5f:c3:
d0:8a:21:10:ce:db:3d:ff:e9:02:00:19:fb:dc:91:92:28:68:
10:91:89:8a:84:ac:2d:bf:6a:69:59:20:92:cf:90:ab:05:d1:
b0:7e:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:08 2026 by rpki-client