Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: xEIpaXREITiPPk+uqr3NkQtNCSWCJUSBs4rUq9S+9L0=
Subject key identifier: 9B:AC:58:80:1F:3C:3C:EA:AC:60:5A:6C:A9:97:D5:55:F2:F3:89:49
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019E1CEB66B16A9F0029CF09D8570C737D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:00:49 +0000
Manifest this update: Tue 12 May 2026 16:00:49 +0000
Manifest next update: Wed 13 May 2026 16:00:49 +0000
Files and hashes: 1: 5PEM24BMPrcvxY-cL8Z6QKGwr1U.roa (hash: 9iefR/dFPM3ozUCII4KvIo+RC9gYE16NJW6hpn8+KmU=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: WrhMsXSkKs87uotGJwifipSXerzIVd31rb0MLaJpVFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:66:b1:6a:9f:00:29:cf:09:d8:57:0c:73:7d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: May 12 16:00:49 2026 GMT
Not After : May 13 16:00:49 2026 GMT
Subject: CN=9bac58801f3c3ceaac605a6ca997d555f2f38949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:da:f4:58:90:98:a0:52:ee:29:9e:fc:ef:
63:9b:94:20:a2:d8:c5:67:15:26:5e:1c:1a:6b:2c:
1e:8c:3f:a7:ce:6a:6c:a4:e0:a4:3b:ad:4f:33:ee:
2b:ea:da:1a:3a:62:9d:5e:da:5a:ca:ef:ce:89:8f:
5f:5c:10:db:aa:37:b8:ea:3f:4e:01:45:6c:44:6e:
29:6e:b4:8f:1f:30:a8:9d:17:83:dd:82:b0:1e:54:
a8:db:80:4a:e3:39:65:46:45:cf:73:51:2b:d7:bb:
a8:6c:5e:1d:df:1b:e3:31:c3:83:eb:8d:0a:19:a7:
af:b1:cc:e7:0b:61:07:96:ef:26:74:11:4d:d7:d7:
7c:ad:ce:7c:f1:30:9d:7e:1d:4a:0d:d8:a4:01:36:
1f:b1:26:70:c9:f2:38:20:fc:32:95:b3:72:4a:0f:
c1:40:3a:ca:fa:3f:bd:73:ea:f6:fc:29:b4:1e:95:
54:b2:84:e6:b3:ad:0f:2d:4c:e2:33:02:92:e6:10:
cc:24:1c:87:7f:d6:a3:4c:7a:eb:df:78:1d:9e:ca:
e0:f8:ee:e7:ae:28:af:b6:20:18:68:8d:66:6f:fd:
59:ea:31:65:d8:c7:ad:3f:56:00:c6:88:17:52:bd:
f3:27:83:51:e0:9a:87:1c:ac:58:d8:3c:14:c3:b5:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:58:80:1F:3C:3C:EA:AC:60:5A:6C:A9:97:D5:55:F2:F3:89:49
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7d:c8:7d:e1:fe:08:c6:88:7f:49:46:5e:99:1a:9e:ed:5d:
68:cd:73:85:f6:e9:03:cc:26:d5:af:7a:db:9d:be:32:88:d6:
37:de:d0:75:f9:93:61:28:de:db:ce:91:aa:22:d2:0e:e4:cb:
e9:87:f8:53:9a:0d:7f:ad:e8:4f:81:58:23:86:ea:43:d1:ec:
0e:8a:8e:55:0b:ee:23:4e:9b:4e:8a:be:59:7b:c2:eb:39:43:
34:9a:a1:c9:8e:bb:c9:ec:29:21:f8:c9:0f:03:01:34:38:50:
23:f2:91:fd:08:b7:9b:f1:a6:b2:d5:76:94:b6:f9:b1:48:6e:
1f:5a:09:52:d7:c4:65:25:09:d8:5c:ff:55:06:d7:e6:50:4b:
63:e6:ca:25:3f:92:79:47:ff:6a:17:f6:23:ca:34:85:2f:57:
2d:4c:53:6b:b4:1e:37:95:21:09:a5:09:43:42:63:b1:ec:a0:
90:d9:24:04:23:9c:4c:28:ef:4a:67:23:f8:ec:9b:6c:21:5f:
80:a1:b2:41:99:47:20:0b:bc:23:df:57:40:ea:c1:57:fd:0a:
d6:3c:d1:27:e8:74:c2:bf:8a:65:ee:ba:39:b4:4c:a1:f9:bd:
06:a4:56:15:dd:93:cc:ea:fe:87:8a:6d:4b:24:12:b4:1d:23:
a2:24:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:32 2026 by rpki-client