Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier: S4vbAfx2IobV7sv3tla9CRXQ2vixh6RjvzFgdgRv7bg=
Subject key identifier: 89:45:FC:18:FB:2B:A2:39:CB:10:9A:FF:46:0A:42:13:40:B7:66:BE
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 019E1F7E9DB632093360F7AB0B0F05099137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number: 0F06
Signing time: Wed 13 May 2026 04:00:52 +0000
Manifest this update: Wed 13 May 2026 04:00:52 +0000
Manifest next update: Thu 14 May 2026 04:00:52 +0000
Files and hashes: 1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: N0aB3Gt8b+SA289kPxCiRRviYOy6AEw4lcVZ9mG0Yow=)
2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:9d:b6:32:09:33:60:f7:ab:0b:0f:05:09:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: May 13 04:00:52 2026 GMT
Not After : May 14 04:00:52 2026 GMT
Subject: CN=8945fc18fb2ba239cb109aff460a421340b766be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:d3:30:e3:1b:b3:29:7c:e6:3b:1d:17:06:
d8:da:8d:18:c0:3c:cf:3b:af:27:43:9a:3d:22:52:
6b:10:b4:ee:d6:2c:bb:b0:d8:f4:11:26:06:b8:88:
65:f0:71:06:69:ef:9d:d8:66:2e:16:74:26:5e:a3:
db:72:37:8a:90:a3:25:7a:c2:75:ac:3a:05:8d:af:
52:e6:6f:cd:2f:d7:05:6f:6f:3e:f0:b3:e9:f6:7c:
49:98:cd:a1:63:ae:c8:83:4f:c1:2d:10:73:f7:46:
31:af:65:79:ba:b5:ac:88:69:20:26:31:af:9b:76:
63:3d:fb:3f:3e:c6:fc:65:a1:93:c7:6d:e4:b8:c8:
b5:71:6e:bc:c8:b2:08:54:43:ce:da:69:d6:b4:b7:
db:30:bb:b4:e0:4c:82:b7:5c:bc:e6:3f:5c:6a:36:
68:11:e0:2e:2c:98:90:54:05:67:71:c4:e6:e1:18:
c1:88:f9:fb:ab:1a:8b:4d:4c:5b:88:11:51:55:b7:
9d:e5:f8:86:dd:9e:51:3a:e6:53:ae:1c:06:46:cf:
eb:19:32:36:88:f9:2b:b9:f4:60:0f:6f:c5:28:8d:
22:bd:9b:ec:55:b1:fd:7a:11:90:87:0f:0e:53:74:
4c:68:2a:2d:e9:35:1a:e2:34:3c:d9:98:a0:c9:ab:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:FC:18:FB:2B:A2:39:CB:10:9A:FF:46:0A:42:13:40:B7:66:BE
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:4b:94:c6:b3:e7:1e:65:cc:bf:2c:e2:e4:9c:1a:df:b6:
cd:5f:5f:8c:7a:5c:97:f9:20:25:ab:05:e0:f4:bb:82:f0:99:
20:15:cc:20:c8:d5:7b:74:14:33:b5:6b:11:91:06:f7:09:46:
bf:5d:30:30:7b:c8:e5:4d:ff:d8:96:3f:27:dd:19:99:f7:0f:
ab:98:42:6c:fc:20:d0:71:84:70:5a:ee:78:e7:96:e8:a2:ee:
80:86:f7:d8:68:55:9c:01:0f:7f:96:c5:a1:6d:cf:26:c1:fd:
34:c6:5d:b2:78:09:56:10:4e:07:05:69:03:aa:3a:69:1d:8b:
ed:e7:de:ff:0f:df:06:30:d7:0f:b2:d8:f4:13:ab:c0:cf:ee:
e8:94:e0:c3:5a:08:31:1b:95:eb:c1:73:aa:41:c9:5a:74:a2:
33:c8:1c:24:1a:27:68:b9:71:14:83:99:31:87:bd:95:ed:ec:
cd:11:19:09:6a:61:02:3c:a4:5b:6a:d1:19:e7:bf:81:a1:5b:
5b:eb:b9:a7:df:dc:61:fe:e1:75:39:18:2d:63:66:d1:68:0d:
ce:01:62:89:0f:81:4e:da:ca:da:40:d8:71:56:e5:86:d8:ed:
59:c3:c2:c1:fc:f1:a7:9c:fb:05:7f:ce:92:89:eb:ea:5b:54:
7c:1f:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:13 2026 by rpki-client