Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File: kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier: mH6Fd1/LiUU7YXckoCoC2XXX7s1irmnOHO0bcHyFhbs=
Subject key identifier: 10:7E:28:8D:B7:78:66:0F:87:5E:A1:82:73:65:FF:07:56:16:9A:C0
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer: /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial: 019E1EDA0FD8D7E2003BCA805825251CE15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number: 3C
Signing time: Wed 13 May 2026 01:01:07 +0000
Manifest this update: Wed 13 May 2026 01:01:07 +0000
Manifest next update: Thu 14 May 2026 01:01:07 +0000
Files and hashes: 1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: NyoFAN3KOSFjDTeZYwavtRW9SNMF/sGLuAOjnONELP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:0f:d8:d7:e2:00:3b:ca:80:58:25:25:1c:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
Validity
Not Before: May 13 01:01:07 2026 GMT
Not After : May 14 01:01:07 2026 GMT
Subject: CN=107e288db778660f875ea1827365ff0756169ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:cb:44:ca:ce:ce:a9:7f:20:9b:07:5e:08:
60:75:38:f4:11:45:57:b1:33:39:f2:5f:7b:26:bc:
d3:6d:4f:f4:d8:0a:e1:67:54:ca:2f:27:b8:27:fe:
41:6e:5f:e8:fd:c2:bf:cc:fb:e2:3d:30:87:4a:5a:
81:94:6a:26:8c:6c:14:24:c3:3a:fb:5b:8e:78:e3:
32:2d:e8:ba:c3:2f:9f:28:19:78:f8:89:a6:5b:c1:
d2:02:6b:54:1a:b1:e4:7f:f8:a4:8d:cf:7a:0c:e3:
9c:1a:c5:16:f8:29:cf:c6:5e:46:06:01:e2:7c:0c:
65:1e:6d:90:a5:07:ff:cc:6e:b9:cf:bd:ee:60:73:
2c:b9:48:38:f4:89:c0:74:81:02:3c:ba:84:62:d4:
12:aa:a9:91:e0:4a:b9:dc:da:94:dd:1f:07:fa:ce:
26:39:d6:e5:aa:a8:57:5d:f8:62:6c:95:49:dc:68:
65:91:cd:e2:db:39:14:37:ee:2f:a5:89:55:bf:7a:
3f:31:11:d2:4b:55:54:a3:31:6e:ed:bd:b4:a6:4a:
01:52:6b:98:88:42:9c:b6:22:36:6c:2d:f7:87:69:
8b:01:66:9f:c1:6c:09:23:32:b2:75:03:a4:56:2d:
9e:2d:47:7f:33:2f:cf:29:43:31:db:27:ca:9e:f8:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:28:8D:B7:78:66:0F:87:5E:A1:82:73:65:FF:07:56:16:9A:C0
X509v3 Authority Key Identifier:
keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:fe:26:67:a5:b1:e5:58:a3:11:0d:a6:bb:d6:96:62:8f:
74:63:6e:80:fc:4a:d3:5b:4f:ef:d0:06:50:89:7d:55:99:09:
44:f0:b0:bd:5d:6a:89:80:b6:b7:13:b6:60:0e:47:d9:dd:fc:
5e:45:bb:a9:bd:dd:d3:d9:25:6d:42:4f:72:6a:be:75:d6:40:
d4:8b:e1:6c:28:58:7e:2a:00:4c:c1:f9:9b:74:14:fb:76:9f:
ab:20:6f:e6:09:f9:e3:f3:a9:67:55:0d:8b:4f:6a:8d:f2:c8:
a1:6e:c0:14:08:0e:67:d9:aa:36:9b:74:6a:74:a3:39:4c:a4:
e1:35:47:47:d5:66:49:ef:72:c4:42:f7:72:13:a7:0e:54:70:
68:a4:45:f9:bf:08:32:c8:66:f8:b1:e5:af:ad:57:7d:f2:7c:
f2:52:41:df:16:c5:45:a3:e8:86:ea:4b:88:0e:0f:da:53:eb:
25:3d:ef:00:32:cc:fb:86:da:2a:2d:de:f5:cd:88:75:97:56:
73:d0:48:a3:af:2c:68:be:27:09:13:bf:b4:7e:71:c6:23:40:
d3:4c:4a:de:d9:52:b0:03:4e:fa:c3:16:fc:fd:be:b6:32:f0:
79:28:a9:45:95:01:db:1e:22:0b:87:56:16:b1:cd:a6:8f:74:
5e:ec:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:46 2026 by rpki-client