Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: UH4NKfU3KHdT5SsAOemW8MmM2IqCrR85RsRMie0HwS8=
Subject key identifier: EB:08:5E:A1:9B:6B:5E:93:3D:19:82:63:58:C7:7E:9D:F2:2E:B4:2B
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 019E1E34DF5ACF9158DDBABD58F579662FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 1202
Signing time: Tue 12 May 2026 22:00:41 +0000
Manifest this update: Tue 12 May 2026 22:00:41 +0000
Manifest next update: Wed 13 May 2026 22:00:41 +0000
Files and hashes: 1: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: 8BN6TJOThSomxPFnk6ilNONIK9DNoWhdLylJGIJrsAQ=)
2: T3EGh-bdCIIZhG5HJojpnlqKL2c.roa (hash: bufDKb7bJ5Yg3D29mO4Y90yES19oPGAgCv9pA/tjktA=)
3: iUyBvay1HB04jjUCqmLzofikeiI.roa (hash: YQOqKVVvW96raR8LDZq/96IB++aevKxnzXinzAloqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:df:5a:cf:91:58:dd:ba:bd:58:f5:79:66:2f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: May 12 22:00:41 2026 GMT
Not After : May 13 22:00:41 2026 GMT
Subject: CN=eb085ea19b6b5e933d19826358c77e9df22eb42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:f5:8d:7b:4c:c7:aa:a9:26:62:00:c6:74:
cb:0f:4b:d6:30:01:85:20:aa:a9:2e:e4:82:80:e6:
03:80:4e:f3:6d:2e:82:3b:6f:95:6d:3e:ac:66:7a:
b9:4c:21:91:7b:da:8b:4c:dd:2f:f7:80:a4:92:ae:
e2:3b:99:a1:30:a2:bf:62:99:ea:e7:93:bd:5f:5a:
df:df:da:4a:48:f1:79:b5:e0:8a:3b:8b:3b:b3:99:
d9:53:7e:9f:ff:2c:16:54:c6:cb:75:46:45:fb:5d:
21:07:b3:ba:db:7f:e0:11:b6:0e:a4:5f:c2:53:db:
c4:45:7c:48:0c:5f:a8:3a:bd:01:02:78:07:62:e5:
db:36:f0:c2:ad:28:e8:61:36:80:65:62:8b:2d:33:
bc:ed:7a:7e:79:a3:28:c3:25:2d:54:3a:34:00:a9:
4e:c9:f4:b5:25:f0:9e:9f:06:a4:01:f4:1d:e4:e4:
ec:f4:30:ee:77:58:10:02:a2:73:9d:e8:90:d4:bc:
21:ef:a6:21:fb:17:98:42:f6:8f:83:f0:4f:c5:2e:
88:6a:7a:20:f2:38:59:8f:69:4c:64:81:56:63:0e:
c7:73:aa:77:88:2e:5b:a5:30:21:6c:85:9c:82:af:
81:c3:63:d6:06:5e:29:0a:66:1b:a2:26:0f:ea:85:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:5E:A1:9B:6B:5E:93:3D:19:82:63:58:C7:7E:9D:F2:2E:B4:2B
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:26:34:97:84:41:30:d8:3a:b6:f8:ca:15:33:87:87:b1:83:
54:43:04:52:16:9b:fc:3c:58:9b:1b:40:a2:25:bc:b2:00:d8:
73:62:1b:a9:67:ad:f3:3a:ed:be:ca:fd:fa:5b:b3:61:5f:89:
79:63:cc:ac:d4:47:e1:b3:3e:9f:9d:18:18:59:b8:9a:87:cd:
b8:fb:67:47:1a:7f:d5:52:47:9b:4d:b0:e4:24:62:8f:a1:68:
b4:a4:cd:a9:23:c7:87:09:7e:f9:fd:e3:c7:b9:f8:fe:98:92:
44:f9:94:47:72:91:2f:34:e8:03:1a:fd:7c:22:80:b4:04:48:
9d:c3:d1:db:1a:15:25:6a:3e:14:85:f3:01:37:56:a6:db:44:
e7:85:ca:30:90:44:9c:45:e8:cc:1a:4a:68:42:6e:c6:2a:68:
b1:c9:2d:fc:84:89:ef:16:c7:9d:41:61:5c:1d:ca:98:fe:f4:
bc:19:a9:f7:53:6e:7f:78:f9:dd:ed:b9:fa:49:54:a5:fd:47:
3a:fc:ed:63:23:07:4c:41:00:61:e0:57:44:1d:93:fa:ea:40:
84:4c:a7:5d:88:81:08:54:85:88:ce:6a:16:bf:42:db:06:94:
18:61:22:8c:5f:c6:d4:c4:6e:23:bf:2b:b0:c5:46:cb:12:61:
65:03:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:34 2026 by rpki-client