Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: WqDJMqZha1wwb+dzD2dKffCnXn7TxZbczosdkDAxLTQ=
Subject key identifier: CC:97:00:ED:33:D3:7E:AE:DB:59:FF:CD:1D:52:E3:E5:08:62:25:C6
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 019E1DFDEB39D266ACF6CBA03BFE116B8348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:00:40 +0000
Manifest this update: Tue 12 May 2026 21:00:40 +0000
Manifest next update: Wed 13 May 2026 21:00:40 +0000
Files and hashes: 1: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: r0b8k9r1QvpAGjDzno0uTZ3S/4cO8U8GGLJ4FdensFA=)
2: REbjg5M_8wpI3i_HlGLahpeL73s.roa (hash: Wg9GMppGq5pv2FgNgfdIsx4UTmxfeIHOeiAi7ZSNSIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:eb:39:d2:66:ac:f6:cb:a0:3b:fe:11:6b:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: May 12 21:00:40 2026 GMT
Not After : May 13 21:00:40 2026 GMT
Subject: CN=cc9700ed33d37eaedb59ffcd1d52e3e5086225c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:f0:24:ae:d1:46:95:e7:f1:44:1d:55:32:
61:a3:9a:b5:3e:e3:70:3d:51:6d:d6:4d:8d:a8:cc:
6d:13:01:11:46:80:a1:2d:96:cc:73:96:27:c0:8d:
46:fb:c9:41:06:22:cc:92:37:03:75:72:97:17:e1:
d0:55:d5:da:1f:81:d1:1b:f1:96:f0:55:9d:79:d8:
08:cb:d4:9f:04:b7:3c:cb:0d:0a:60:6a:cd:1e:ef:
d9:d6:b6:12:7b:c1:92:02:45:37:2e:77:c7:b3:26:
f8:41:d5:cf:5a:2b:18:91:84:f1:bc:29:7c:ba:0e:
e9:a9:8f:65:4e:cf:f1:28:40:ff:7d:90:69:03:ac:
84:4c:04:08:14:bd:71:22:0e:6a:8f:38:33:dc:7f:
82:97:a0:d9:e6:fe:ac:34:bc:9d:b7:c2:e3:82:28:
96:77:81:92:c8:3e:d6:55:fe:7a:ba:ff:b7:03:29:
2d:7e:fe:9f:f9:76:ac:bf:35:c5:7f:50:ab:d0:23:
1f:85:39:0f:a1:c1:9f:00:65:57:12:02:89:5a:7a:
c3:bb:55:90:be:54:10:31:c7:86:da:4a:29:ad:59:
9d:f5:e5:8a:f2:e5:da:fe:d4:0f:5e:35:d0:0e:7d:
a8:c8:50:ab:3e:31:e0:c9:7f:25:f7:74:e3:8e:74:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:00:ED:33:D3:7E:AE:DB:59:FF:CD:1D:52:E3:E5:08:62:25:C6
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:c0:99:e0:11:ed:64:98:21:b7:80:4d:ca:54:0b:b3:e7:
db:bc:68:70:5f:4a:f4:03:ee:92:99:7b:34:f3:1e:af:b4:4a:
2a:7c:03:41:d6:06:09:4d:0c:e4:be:c8:04:de:cf:21:c2:84:
b0:78:0a:3b:22:48:e9:00:d5:0b:4a:5d:b6:56:b6:ac:af:e0:
81:29:0d:6b:12:c4:29:fc:3e:f9:12:78:f9:3f:58:60:96:3c:
90:76:15:8a:db:ea:8b:f5:f8:f2:bf:ad:f4:3b:0e:9c:1c:68:
a9:3f:32:75:a4:04:04:00:0f:4a:de:d4:01:af:73:71:39:d9:
cc:61:55:94:45:0c:dd:54:84:ac:6f:63:a9:ea:ea:26:67:9e:
8b:c0:70:f5:53:c9:9d:8c:82:7f:1d:9b:37:40:47:c6:25:c3:
35:7f:e9:2e:0a:87:5f:79:46:1a:b6:3f:9d:53:5e:50:43:57:
a7:7b:98:78:05:2d:05:19:09:30:9d:69:2e:9e:19:da:4f:a6:
25:b7:64:3d:2c:a9:12:22:a3:12:f8:29:b3:04:79:1f:d1:c8:
7c:50:c4:e7:96:d1:ad:b7:f0:44:d7:25:97:19:6d:e6:2d:2f:
4c:cf:26:d4:4f:57:7c:28:ff:9c:10:28:6e:1a:27:7e:ca:1f:
62:af:5e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/es50mas9sugO/4Ra4NIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzE3MGQ5OGI1ZTM1ZDdkNTE1Mzc2NzFjNjA0MGE1MTUx
ODg0YmMwHhcNMjYwNTEyMjEwMDQwWhcNMjYwNTEzMjEwMDQwWjAzMTEwLwYDVQQD
EyhjYzk3MDBlZDMzZDM3ZWFlZGI1OWZmY2QxZDUyZTNlNTA4NjIyNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tfwJK7RRpXn8UQdVTJho5q1PuNw
PVFt1k2NqMxtEwERRoChLZbMc5YnwI1G+8lBBiLMkjcDdXKXF+HQVdXaH4HRG/GW
8FWdedgIy9SfBLc8yw0KYGrNHu/Z1rYSe8GSAkU3LnfHsyb4QdXPWisYkYTxvCl8
ug7pqY9lTs/xKED/fZBpA6yETAQIFL1xIg5qjzgz3H+Cl6DZ5v6sNLydt8LjgiiW
d4GSyD7WVf56uv+3Ayktfv6f+XasvzXFf1Cr0CMfhTkPocGfAGVXEgKJWnrDu1WQ
vlQQMceG2koprVmd9eWK8uXa/tQPXjXQDn2oyFCrPjHgyX8l93TjjnSwzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyXAO0z036u21n/zR1S4+UIYiXGMB8GA1UdIwQY
MBaAFCnBcNmLXjXX1RU3ZxxgQKUVGIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGIt
YzQ1ZTk0OWU5Y2Q2LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lMjVhM2MtZGVmNi00MjI4LWExMGItYzQ1ZTk0OWU5Y2Q2
LzEvS2NGdzJZdGVOZGZWRlRkbkhHQkFwUlVZaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTDAmeAR
7WSYIbeATcpUC7Pn27xocF9K9APukpl7NPMer7RKKnwDQdYGCU0M5L7IBN7PIcKE
sHgKOyJI6QDVC0pdtla2rK/ggSkNaxLEKfw++RJ4+T9YYJY8kHYVitvqi/X48r+t
9DsOnBxoqT8ydaQEBAAPSt7UAa9zcTnZzGFVlEUM3VSErG9jqerqJmeei8Bw9VPJ
nYyCfx2bN0BHxiXDNX/pLgqHX3lGGrY/nVNeUENXp3uYeAUtBRkJMJ1pLp4Z2k+m
JbdkPSypEiKjEvgpswR5H9HIfFDE55bRrbfwRNcllxlt5i0vTM8m1E9XfCj/nBAo
bhonfsofYq9eOg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:53:47 2026 by rpki-client