Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: DsJq78enq4ZzhpTcvwGg9GDczCaAeSgWcZwLgGyYchE=
Subject key identifier: E7:9E:3F:12:57:92:6F:1D:6B:D0:D5:96:1F:DC:0E:85:16:82:5C:06
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 019E1D5990194AE9D4658DAAF39F047846F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:01:09 +0000
Manifest this update: Tue 12 May 2026 18:01:09 +0000
Manifest next update: Wed 13 May 2026 18:01:09 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: KWReMNuL2de3IAT/1/DTn6UFNdZAyt+0IUiFlvOGESE=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:90:19:4a:e9:d4:65:8d:aa:f3:9f:04:78:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: May 12 18:01:09 2026 GMT
Not After : May 13 18:01:09 2026 GMT
Subject: CN=e79e3f1257926f1d6bd0d5961fdc0e8516825c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:c0:b4:66:ef:72:4e:fe:1a:33:a3:e3:60:
01:7f:7c:32:b5:70:dd:bc:49:fe:5d:f0:a0:41:9f:
7a:63:e3:c2:58:a0:cc:24:89:0d:01:ca:56:0b:98:
ab:0c:41:9e:0e:8d:2d:bf:9f:ae:b1:82:3a:6e:4f:
43:35:89:7e:8d:7a:0a:4b:64:cb:c7:ed:d0:c1:38:
cf:8b:67:3d:56:c1:21:6c:8c:01:67:e7:dc:d3:2f:
05:d1:2e:18:a6:50:df:a6:9c:ac:5c:fa:42:5f:0f:
db:56:25:5f:b0:4a:d5:46:de:00:d2:75:ae:f2:ad:
20:31:58:de:53:31:98:66:86:6c:29:ce:14:80:c6:
a7:54:7c:87:b6:73:44:6c:48:e8:ac:9c:93:7d:d7:
33:48:dd:d6:22:f7:38:b3:a0:54:b1:b3:99:99:6d:
e9:4d:3d:3f:05:39:78:ee:b1:01:6d:2b:1b:ea:0c:
ff:71:d5:bb:e8:a1:a7:31:25:d7:7b:98:71:b3:33:
2d:28:cf:44:f8:f3:66:ec:af:1d:83:5d:08:22:0e:
3e:ba:c1:e9:4c:ba:c8:7e:a8:d0:fc:cc:a6:31:2c:
f3:40:95:73:ea:ad:df:65:5b:97:6f:bf:ff:40:f0:
a0:21:bc:c5:ef:8a:59:4d:54:8e:cc:22:74:39:5d:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:3F:12:57:92:6F:1D:6B:D0:D5:96:1F:DC:0E:85:16:82:5C:06
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:17:4e:8c:32:56:d1:e0:b4:ee:19:c2:c5:33:89:61:15:5b:
27:46:20:bd:b0:46:26:1c:65:05:c8:76:71:b0:43:5b:93:58:
6b:00:25:5c:60:dd:c0:6e:fa:be:57:cd:d2:26:84:33:30:f0:
30:bc:d2:16:c0:8b:42:ff:ab:0a:f5:d5:23:4a:aa:4f:18:65:
f3:5d:0f:a6:f4:6c:72:8d:00:e4:92:92:a4:72:c7:f0:a9:24:
75:18:57:fd:3d:01:96:71:93:a0:fc:6b:7f:9f:d8:60:c4:0a:
80:97:ff:be:3a:81:e8:03:83:e6:fb:8c:d6:37:35:cb:b5:b2:
32:5b:54:0e:a3:a0:bc:cf:e1:25:89:72:61:eb:3c:f4:66:b5:
cc:d1:b6:2a:2d:eb:a2:02:11:3f:d5:5d:e4:c2:16:7f:cc:86:
1f:23:8f:13:de:b6:33:79:2f:02:17:5f:7a:7c:d8:26:0f:1b:
37:dd:5f:b5:76:4a:d3:9a:59:84:39:9d:c9:14:26:28:5e:af:
3e:53:9f:b5:18:1a:86:c3:ef:2e:71:9c:6c:a6:24:3a:f7:08:
6e:e1:6e:54:7b:b1:5f:6f:bd:57:d7:ee:21:e7:6f:6f:4b:42:
d2:ec:ac:24:ab:9e:e7:78:55:61:ad:b3:e8:c6:f4:9f:fd:13:
54:83:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:56 2026 by rpki-client