Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: kpfLvqsY53WfKAYpvbzSauWc47WCbZICfpTrlkXeqs4=
Subject key identifier: BE:69:B0:2F:3B:0D:94:4D:4D:B2:13:EB:FD:8D:65:1B:ED:8B:03:4F
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019E20FF008EBB31BF6F35AC4D65E790AFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:00:43 +0000
Manifest this update: Wed 13 May 2026 11:00:43 +0000
Manifest next update: Thu 14 May 2026 11:00:43 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: 5mok5xhuQJSKsIAzO3tHIpRmk8TK8LX4v7OJN7z115o=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:00:8e:bb:31:bf:6f:35:ac:4d:65:e7:90:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: May 13 11:00:43 2026 GMT
Not After : May 14 11:00:43 2026 GMT
Subject: CN=be69b02f3b0d944d4db213ebfd8d651bed8b034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:01:31:46:c8:1f:cf:53:8b:fa:8b:c3:78:
33:4d:db:de:a9:ff:a7:19:3b:4b:30:b4:fd:74:1a:
66:96:d2:ab:a9:c3:b0:7f:c6:f1:fa:65:f5:71:60:
33:51:a8:a3:97:71:2e:f0:35:47:fa:af:36:a5:c7:
49:8b:44:6f:27:bc:fb:ca:8c:8a:3c:b0:d7:91:43:
98:cb:a3:d4:41:cb:58:f9:e0:df:62:d6:8c:81:27:
74:77:bc:eb:38:e0:38:d8:31:30:5a:bf:f2:a1:1c:
3f:8c:81:be:0d:b2:7a:95:84:6d:18:2a:04:39:99:
ba:60:1f:83:f1:3b:57:d2:d1:26:25:07:0e:8e:9e:
cd:ac:5d:6f:51:73:f8:4c:d8:6f:27:3f:1f:ee:54:
57:f0:66:9b:0a:86:b5:ab:f7:06:b8:b4:71:57:76:
14:f4:4f:d7:06:27:6c:f7:d7:4b:c0:60:d3:f6:26:
27:26:9c:0e:c3:23:e4:9f:98:48:55:88:f6:d6:c4:
8d:33:50:a2:b5:de:56:96:02:86:ef:28:d2:75:7e:
fe:6b:8c:e0:f2:0f:c2:4a:06:5a:39:c4:d1:91:eb:
14:61:d7:3d:c3:dc:63:24:d4:b9:55:8b:93:fd:27:
72:73:48:85:0a:cc:81:fa:97:4f:8c:5f:94:9f:12:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:B0:2F:3B:0D:94:4D:4D:B2:13:EB:FD:8D:65:1B:ED:8B:03:4F
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8b:33:01:1a:3f:b5:0e:13:55:58:26:66:17:17:8a:38:b0:
26:bb:74:2c:85:27:73:4a:cc:d2:02:2f:01:6f:9f:5c:59:e6:
8f:bd:21:0b:3c:ec:c0:8d:5d:bc:ac:a6:2a:09:10:6f:23:20:
6d:62:3d:90:ab:53:1e:85:a4:58:35:7b:3f:c6:df:7c:26:f6:
11:6d:71:3a:78:00:84:c3:8a:5f:6e:24:2d:d2:79:01:ed:e9:
3c:50:28:c2:18:36:fd:af:25:41:7e:87:86:8a:cf:a9:23:d1:
d3:59:0f:37:60:d4:f0:59:12:99:ad:cd:a5:f5:c8:03:93:81:
3e:33:9e:5d:ec:38:3a:0a:75:b1:fe:be:68:01:f1:d5:44:b3:
8f:d4:2e:c9:0f:53:62:18:43:74:aa:bc:f4:88:fa:c1:6e:e8:
d6:d6:ef:ed:71:c4:ea:1d:73:08:23:c8:70:3a:ad:73:38:8e:
87:d8:01:fc:95:d8:ee:ed:83:a6:49:5f:e9:a3:50:a1:ff:94:
c3:d9:36:e6:7f:95:02:c8:c3:66:58:55:56:84:9a:41:3e:49:
a6:db:95:99:a7:52:54:fb:cf:d6:10:6e:82:47:aa:a3:7b:de:
07:54:6d:ac:5f:98:8a:69:3f:f4:2f:04:14:f1:79:c7:53:00:
e0:ce:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:35:35 2026 by rpki-client