Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: YaL7j6hTP7Ql8Ss3ImHbAw7UjMUVge+huOijgde9qLA=
Subject key identifier: AA:44:8A:24:F9:4F:D2:71:D4:A1:CB:8B:E7:4A:B5:1A:D6:DF:96:B1
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019E1FB5ECE1ED92279DC2F873A275DD79FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 0762
Signing time: Wed 13 May 2026 05:01:16 +0000
Manifest this update: Wed 13 May 2026 05:01:16 +0000
Manifest next update: Thu 14 May 2026 05:01:16 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: KYWtsRkuX4dYVCFD5KRnoeUQ682XZbEmnt90W6j228Y=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ec:e1:ed:92:27:9d:c2:f8:73:a2:75:dd:79:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: May 13 05:01:16 2026 GMT
Not After : May 14 05:01:16 2026 GMT
Subject: CN=aa448a24f94fd271d4a1cb8be74ab51ad6df96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:b5:9c:53:cb:46:35:8b:65:47:33:94:d5:
20:4c:22:41:ee:d0:cf:00:18:38:e5:6b:33:a1:60:
8f:cd:97:0f:75:8f:b8:07:10:5a:6d:01:f4:2a:0b:
44:b2:31:68:95:6c:5d:5b:ba:71:2a:40:16:b8:49:
c8:28:5f:dc:29:7f:b8:9e:32:29:bf:08:42:4a:04:
d1:35:4d:57:b8:6b:7d:17:b5:77:84:1d:56:7d:9a:
75:85:f5:90:e3:3c:de:eb:ac:93:cc:0f:b4:f6:3d:
d8:9d:41:e8:a0:71:f1:52:d3:87:c2:ce:b7:3d:23:
2e:ff:b5:fd:ee:37:0a:f0:fe:84:56:21:05:cb:32:
08:a9:c3:2a:55:09:be:79:61:2c:dc:ba:e6:55:38:
54:2c:7a:bb:db:c0:b7:d5:ad:7a:52:3e:0b:fc:5f:
30:8c:70:72:81:62:70:2d:e7:d9:b6:20:a7:c0:ee:
9d:ac:76:e0:f7:c8:8b:94:6f:57:44:c5:ed:82:46:
39:1d:5c:6a:b2:60:1d:4b:ba:38:a5:73:9c:58:d0:
52:33:c9:86:88:49:99:03:0e:fb:79:ab:20:f9:ab:
e1:24:f4:0b:a5:9e:fe:bb:5f:b6:17:f9:de:f2:95:
86:6f:d1:91:ca:e8:50:3c:12:3f:72:74:cc:1a:ca:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:8A:24:F9:4F:D2:71:D4:A1:CB:8B:E7:4A:B5:1A:D6:DF:96:B1
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2f:67:0f:30:df:b5:c3:0e:76:0e:8f:d0:78:fb:f5:ee:1c:
8d:8b:86:f5:d4:f5:26:fd:95:a9:d1:52:85:28:41:b6:f3:cc:
23:66:78:05:79:32:a3:b8:72:1b:a7:79:f8:b1:31:1d:d5:98:
ad:57:0c:6c:24:2a:ce:b8:7c:cb:68:40:cc:f1:fe:b8:be:d2:
62:84:32:3e:cc:09:b3:52:76:45:86:8b:fd:fd:4c:46:3d:eb:
e7:a6:0e:be:04:f5:62:c9:4b:6e:44:27:11:6c:02:d5:f1:b0:
4b:17:c9:22:a8:7b:f6:6c:98:96:2e:b1:21:e5:4c:f9:ba:ad:
f2:60:e0:2c:07:74:10:5b:ed:79:0b:7d:ee:be:72:c7:2e:d7:
75:f5:1d:51:e4:26:27:19:12:12:00:63:ca:09:0e:7d:2f:db:
6c:cc:b1:e9:91:39:b8:d1:51:04:a8:c1:55:a7:94:e7:1c:6a:
28:d7:68:12:ad:bb:a3:c0:88:97:e4:b5:94:a0:9d:98:09:b3:
55:1a:72:ac:57:f0:b9:04:ed:3a:3f:fc:13:59:31:11:bc:12:
b7:b8:0b:3b:11:f0:a9:6a:be:63:7b:7a:00:fe:6e:b7:ba:fe:
64:49:cd:96:f0:8e:76:cb:5f:64:de:4d:3e:ee:8d:ce:84:07:
56:17:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:59 2026 by rpki-client