Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: n86aWw1bNastduyZlRa1JsGbh6+Hw1GaGR9PuMy4JlE=
Subject key identifier: 2F:41:D3:D3:EB:F8:E9:AA:2A:40:FA:C1:AC:FE:71:50:AA:18:4E:E3
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019E1DC77E58B0AB6115E839D44DC19C5962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 20:01:13 +0000
Manifest this update: Tue 12 May 2026 20:01:13 +0000
Manifest next update: Wed 13 May 2026 20:01:13 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: ug76yiw2gExWk7yvrABsgsXIy3gPsD0vtpwwUcdKtC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7e:58:b0:ab:61:15:e8:39:d4:4d:c1:9c:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: May 12 20:01:13 2026 GMT
Not After : May 13 20:01:13 2026 GMT
Subject: CN=2f41d3d3ebf8e9aa2a40fac1acfe7150aa184ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:08:d4:a0:87:02:7c:29:9a:3a:ac:a3:df:
dd:c4:93:c5:38:cf:d8:ee:c0:e0:96:74:cc:af:fb:
2c:7b:87:65:49:ae:df:1f:80:40:e5:ee:82:c0:64:
9d:56:80:7e:ad:7f:d1:de:b5:72:af:c1:75:12:c9:
24:e7:a3:87:ed:65:bf:86:9d:54:5b:ab:db:85:e7:
65:9a:1c:26:a2:72:5f:0a:53:95:f0:e8:47:73:f3:
e7:4b:3f:ab:1c:16:33:20:1f:ad:48:3c:14:44:57:
6a:4b:d4:43:80:1c:90:41:71:17:cc:fe:02:7e:69:
c3:23:18:99:8d:ab:fb:22:b7:2d:3f:b0:36:08:0a:
59:55:04:f9:02:b4:56:79:6d:60:34:4f:42:91:97:
03:07:cd:c4:3d:c1:c1:00:e9:ec:52:d3:e2:46:d1:
9a:a9:7c:f0:e6:2a:a7:92:82:01:12:4c:07:08:cd:
98:c5:1e:29:b8:2a:ce:15:3d:5c:96:bf:66:26:b0:
c5:c2:7c:6e:26:ab:6e:c6:3e:6b:0e:bf:1b:e2:4a:
5d:c1:8e:33:0e:c2:3a:0f:13:8b:df:84:c8:e9:ff:
d9:01:fb:33:d5:84:f4:3e:fe:cd:0b:01:cc:3d:bb:
4b:9d:75:3e:d9:a6:d2:be:f8:26:60:b0:98:c8:df:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:D3:D3:EB:F8:E9:AA:2A:40:FA:C1:AC:FE:71:50:AA:18:4E:E3
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:3e:f6:19:67:12:f1:23:65:47:e1:40:47:89:c0:91:d8:
28:ba:d1:17:54:d2:65:14:09:57:10:26:63:a0:29:66:6e:28:
84:5d:47:f2:3b:dc:37:ba:0b:3e:74:2e:ad:ff:4d:9c:b3:c3:
68:1a:eb:14:e2:e1:2b:b2:27:a2:72:e1:55:66:47:90:8a:ee:
fb:ce:01:a5:52:99:44:ad:f4:09:70:0b:8c:9e:d1:b8:5f:23:
a6:c4:54:7c:d4:41:25:06:67:21:40:10:7f:7e:2f:b1:8d:d3:
0f:85:52:e0:f8:d6:04:a1:fa:15:d4:5f:b5:38:32:17:cb:12:
71:48:51:cc:a1:fc:b8:fd:64:57:98:80:27:4e:0d:9a:3c:7e:
e6:60:9b:a4:27:37:86:d2:d3:4f:32:e0:a6:84:f3:f2:01:03:
56:69:aa:f0:b8:41:d6:76:da:3d:ab:17:e9:05:40:ce:c8:dd:
08:3e:64:65:a6:6d:85:65:7d:a8:b4:e6:77:e7:01:8c:b5:c0:
fd:4d:e7:7a:2d:dc:65:19:03:f1:bc:aa:82:0c:a2:01:48:db:
e1:de:74:7d:45:2d:a3:e0:1b:61:48:1a:11:bc:15:73:c7:95:
4a:7f:43:8a:48:ea:26:d7:f9:eb:d9:31:db:f0:42:19:6d:03:
cd:48:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:05 2026 by rpki-client