Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: lQRhkUuj3yeNFzSibEw7KeGTZoHcLEa/XbAcb87fYN8=
Subject key identifier: 81:47:BD:30:D7:97:88:7B:AC:25:2D:9F:8E:C6:DA:A6:FA:CF:12:C5
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019E1D9035F75FE096587D738425F4254BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 1263
Signing time: Tue 12 May 2026 19:00:50 +0000
Manifest this update: Tue 12 May 2026 19:00:50 +0000
Manifest next update: Wed 13 May 2026 19:00:50 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: BgOxIn9wOKOprylzfslk+Do/LVDFfEpNIPIYu3orCAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:35:f7:5f:e0:96:58:7d:73:84:25:f4:25:4b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: May 12 19:00:50 2026 GMT
Not After : May 13 19:00:50 2026 GMT
Subject: CN=8147bd30d797887bac252d9f8ec6daa6facf12c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:3d:a8:76:c4:86:6d:ea:df:dc:9b:80:c7:
55:39:83:b9:e4:b9:49:e4:9a:b6:98:21:af:b3:7d:
ac:08:8e:b4:e2:ec:8a:33:0f:56:86:6c:f0:03:e3:
ad:c6:51:ec:0e:72:b8:93:02:14:4b:ef:ee:fb:b0:
dd:f3:35:d1:0c:49:26:79:be:02:53:12:20:da:68:
be:0a:76:cd:1e:08:03:85:38:78:9d:27:09:f0:06:
98:41:4b:13:a0:85:38:7e:82:87:d4:2d:93:54:41:
23:13:5c:c4:e1:7b:c5:2f:4c:9d:1f:79:56:5e:13:
51:b0:45:ac:2d:c5:24:98:ab:94:28:6d:b1:03:01:
03:7d:22:9e:cb:29:fc:4c:8b:52:3c:0a:ea:51:d6:
13:da:fb:af:44:b0:8d:21:95:f0:4a:e4:c0:06:c9:
a0:e0:4b:53:fe:e0:a9:8e:2d:08:ed:6d:d2:f2:ae:
ab:1a:09:68:bd:80:3f:48:42:bc:e4:89:c0:a6:2e:
e5:b6:3e:fb:ee:b5:ae:5c:bb:b9:b2:d9:25:f6:ea:
08:db:37:e0:eb:64:fe:f8:17:cc:dc:b7:57:86:9c:
44:0b:97:f0:f1:fa:e7:b5:21:42:cd:42:4d:9a:0d:
9f:c9:8c:22:d1:2a:b6:c6:21:fe:47:12:7f:ce:74:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:BD:30:D7:97:88:7B:AC:25:2D:9F:8E:C6:DA:A6:FA:CF:12:C5
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3b:78:5d:6f:10:38:cc:d1:63:fc:53:68:6f:dd:55:f3:d8:
d2:14:64:34:2e:8d:8d:4b:25:b5:c0:b0:8e:b6:42:17:c5:01:
f6:3d:0b:e8:20:2f:31:71:05:93:1b:d4:73:2e:73:98:15:b1:
7d:44:63:aa:bc:c7:f8:65:d4:0e:9f:86:87:0d:fc:29:ef:4a:
f9:82:42:4e:a5:f9:7c:27:7b:4f:02:7f:f2:e2:6c:5b:38:ce:
3c:1d:14:dc:57:75:cb:de:79:61:0d:e4:60:fb:c1:da:0f:6c:
d5:b1:4c:6e:cd:44:25:7f:35:db:86:96:68:9d:c0:ec:11:da:
9c:a4:1c:d5:e6:1e:b5:e7:11:2c:c9:70:91:06:cd:1b:cc:b6:
25:2e:1d:82:3f:4f:5c:4a:ab:68:fd:a9:95:40:22:ee:2c:dc:
8e:83:03:1e:b3:74:e1:6d:9f:dc:81:1c:41:e6:5b:95:2d:da:
2e:b8:04:16:32:30:c6:b6:8a:dd:22:2a:07:ac:cf:08:75:fe:
90:bb:76:eb:7d:18:ac:40:f5:5d:d0:af:d0:31:11:5e:38:ef:
68:6e:06:08:d5:66:0e:82:5a:39:a1:24:10:87:dc:e5:3b:2e:
a8:cf:c4:6a:3b:10:48:1d:7e:5b:28:2b:a1:9e:56:45:9b:b2:
72:32:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:15 2026 by rpki-client