Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: WB1ASe4yb2NQPUXQSk3k8zmumFiQbR+I3iEnnVBjyc4=
Subject key identifier: 97:6E:06:41:05:6A:60:50:79:9A:67:52:EE:60:DD:B3:B2:4A:9C:97
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019E20C8221A29FC5FE310CB80334D7CE2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 10:00:47 +0000
Manifest this update: Wed 13 May 2026 10:00:47 +0000
Manifest next update: Thu 14 May 2026 10:00:47 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: OGbJA4O22qVEeWJ7qH16BxJFgEvJHv0T1G7rZ07PGhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:22:1a:29:fc:5f:e3:10:cb:80:33:4d:7c:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: May 13 10:00:47 2026 GMT
Not After : May 14 10:00:47 2026 GMT
Subject: CN=976e0641056a6050799a6752ee60ddb3b24a9c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:56:fa:ea:f3:f0:23:be:af:07:83:11:a1:
a9:9d:23:c7:82:88:fb:c6:7e:e7:e3:12:42:ef:8f:
61:6a:07:0e:d1:8e:2d:21:73:09:d4:4f:c9:5b:42:
17:55:58:cf:8d:65:1b:2f:19:15:85:e3:7f:24:b7:
af:13:7f:74:7a:a0:16:9c:01:8c:28:db:2b:48:60:
e0:42:71:1f:4b:7a:2d:7d:ff:bd:41:06:93:b6:e0:
a8:17:5d:87:b7:bd:96:ce:9b:a0:52:72:9d:10:94:
1a:ea:62:f7:9e:da:ab:10:9d:53:7c:e7:5d:0d:3a:
06:be:44:40:14:cd:27:68:47:33:3c:b3:00:b2:fe:
f2:b6:2f:2d:b6:f3:bf:59:8f:b5:1c:1f:34:94:ee:
b6:b8:45:16:c6:dc:d2:04:f7:d7:b5:f4:53:80:0d:
3e:a4:5e:19:8e:4a:4b:12:4e:4b:c1:6f:c8:60:5b:
9e:8a:ee:d9:0c:25:4b:78:85:dc:9f:21:12:b9:f8:
e0:78:65:b3:59:d1:25:cb:e7:40:ab:26:9c:9f:44:
40:62:42:a1:90:e5:5d:14:da:84:b7:8f:8a:f7:ae:
a9:9a:b2:ae:c0:1b:d7:10:71:c6:d3:3e:cf:1a:16:
24:d3:fd:b7:f5:1d:d7:0d:c3:05:3d:0d:8a:bb:82:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6E:06:41:05:6A:60:50:79:9A:67:52:EE:60:DD:B3:B2:4A:9C:97
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cf:b5:53:47:9a:1e:2d:4f:a8:0c:0b:c1:9c:6e:24:73:2f:
b9:53:c1:d3:5f:7f:08:aa:b9:98:6a:ef:7c:df:f3:63:90:ff:
62:b9:9c:8f:89:57:1c:42:28:95:87:de:ad:81:58:c5:c0:06:
fa:ee:5e:32:72:c1:b6:33:22:f8:e4:7a:b7:97:f3:ff:47:52:
dd:33:69:4c:2d:39:ad:50:d0:49:a0:be:19:e3:f9:27:88:5f:
f6:1e:74:45:fa:04:00:ca:5b:ff:33:92:29:d8:0b:95:c0:81:
6b:ac:b5:1c:c9:9b:0a:e2:75:2c:34:d9:f6:c1:38:0f:de:e0:
cb:9e:5b:50:f5:01:0c:62:9f:79:ee:70:5c:31:79:fe:05:96:
38:62:ab:1a:17:54:8f:e3:14:f8:0f:25:05:91:ad:84:81:71:
3d:02:6f:aa:58:e8:7a:e8:e6:e6:44:bc:b9:01:8d:07:87:9a:
c6:79:a9:c1:9a:d3:1f:9f:d5:da:18:7b:7f:25:00:4b:94:c1:
25:b2:b0:38:5f:ff:4e:32:77:53:98:7a:93:84:f1:58:6e:80:
f1:b4:ab:6c:a7:e3:a5:80:88:af:a2:01:a5:02:db:94:f5:48:
17:31:5c:70:ad:63:c7:85:51:4d:17:ab:cb:5d:93:78:01:b6:
83:ee:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:45 2026 by rpki-client