Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: VKNBPU5fSWKFnnw9AIUu/6iTdhKJQ8DFOFp97BsH7Fg=
Subject key identifier: 9E:B0:98:3B:19:F6:06:C2:80:9C:19:07:C7:B3:CC:79:24:96:1F:40
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019E205AA4001FA0CC8AE1D76E8375F40318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0CB5
Signing time: Wed 13 May 2026 08:01:11 +0000
Manifest this update: Wed 13 May 2026 08:01:11 +0000
Manifest next update: Thu 14 May 2026 08:01:11 +0000
Files and hashes: 1: 61jEoPY3BUG6j9cu_lF8RKNi7JI.roa (hash: 4WzEHJ+ROSfn7ovwc2eGPGUGeBlvLhI0622lMwFDYa0=)
2: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: XwFRiX59dtzVhXVBFCZTYxSLHeIkKbLfUAjsKWuyzSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:a4:00:1f:a0:cc:8a:e1:d7:6e:83:75:f4:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: May 13 08:01:11 2026 GMT
Not After : May 14 08:01:11 2026 GMT
Subject: CN=9eb0983b19f606c2809c1907c7b3cc7924961f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:4f:7e:fa:57:01:78:db:7f:a8:b7:49:c7:
7d:80:90:04:3e:23:5d:f3:44:9b:ae:42:4e:5a:00:
af:fb:fb:d5:4c:33:3a:5d:05:db:61:58:71:97:65:
87:49:8d:25:0e:b8:5a:37:dd:fa:61:b2:9a:4e:67:
e5:e1:e5:c4:67:77:34:eb:90:36:d3:4b:6a:cf:60:
2e:f1:45:56:03:f5:11:8c:6e:d9:bf:6e:9c:c3:19:
86:0e:9b:69:c8:bc:f4:d9:29:31:0e:a9:e4:5f:50:
c3:2a:8b:94:e4:8e:62:ef:83:e2:40:ea:37:bf:3c:
51:68:8e:43:96:b2:8b:b8:16:85:fe:46:da:3a:ad:
7c:de:f6:16:86:e1:38:05:9b:b9:f7:e7:10:9a:a7:
ff:f5:db:c2:8d:1a:c9:f9:b3:84:70:0f:25:48:15:
e7:ec:b8:78:b7:80:b2:12:99:06:19:26:bf:d7:1b:
0e:49:32:2e:59:fb:0d:5c:1f:49:04:6e:64:fc:d2:
28:7e:72:50:39:0d:08:f9:2b:38:5f:2e:06:01:8b:
6b:fc:f5:b5:9c:49:b8:11:8c:f2:e7:53:90:16:b2:
02:b4:ca:3e:18:fe:c8:ae:6e:e0:3d:84:c3:ac:ca:
fc:bd:2b:ca:d0:98:c1:48:b1:7b:8c:08:49:33:56:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:98:3B:19:F6:06:C2:80:9C:19:07:C7:B3:CC:79:24:96:1F:40
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:d9:fd:9c:ad:3e:0f:59:85:1e:11:b7:09:a3:32:8d:bc:
90:2d:ba:cb:da:1d:fe:24:4d:a3:aa:53:f3:0c:79:a3:b5:95:
5b:cb:76:2e:cb:ad:de:79:a6:13:14:3d:6c:1b:fa:d1:0d:20:
62:f6:41:fb:d2:e1:38:1f:58:3c:8c:bf:42:ea:fe:4b:d3:5e:
8f:e5:c6:6f:da:b8:49:ca:65:c5:f6:9f:15:4e:5e:bf:45:84:
4f:e0:12:59:4e:94:1a:9f:79:6f:da:23:a7:e1:7a:5c:78:66:
f0:a7:de:97:d1:65:67:88:23:7f:d9:02:f1:2d:ce:8f:7d:d4:
44:4f:54:ac:45:b3:32:f2:cc:cc:cb:3a:f2:bd:1b:36:27:9f:
70:32:6d:a0:a4:eb:bb:5c:0c:8d:3b:6b:8a:36:be:18:35:e2:
0c:d4:57:10:5f:69:7a:b5:90:79:62:e0:e8:68:98:29:42:12:
f4:ae:75:c6:92:e1:bf:9b:f0:5d:26:85:bb:3f:6d:45:7f:7b:
7c:cc:a1:ff:29:0c:ef:f9:13:88:52:6e:cd:23:c8:0b:cc:05:
36:66:7c:2d:1e:b0:57:49:e7:ad:6f:17:ac:4c:76:87:4e:cc:
3f:cd:87:7b:6f:73:d1:3d:9f:0c:49:7a:20:be:c8:87:75:30:
fe:aa:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:39 2026 by rpki-client