Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: rMEC6ZLrrhVNpjJZl4vxjCckSm3po3Smoo3Qdknc/z8=
Subject key identifier: 0B:17:DC:69:84:F7:26:B4:DC:BA:75:F7:60:4D:A9:38:F0:72:44:3B
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 019E1EA3CCAD2343A676F9708697507506E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: IldFYq8Kh3OIkXZcp4cmCMgXnH5tbf0k+DQg/+cVxZM=)
2: TSModa-LABny3OYpVDVxvacd8aI.roa (hash: hIqc5amM31Tv3k4RRh8nzbd5nZLZypZmgW9WNaeRtgs=)
3: u8wfrBPP_bxqtWNVJcNz551H_3o.roa (hash: KJpAbjudf9h7GbmiPhF4TzDU9L0KhquOeIK1wF+fmEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:cc:ad:23:43:a6:76:f9:70:86:97:50:75:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=0b17dc6984f726b4dcba75f7604da938f072443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:c7:85:63:53:7b:a5:d5:77:c5:1c:25:1e:
d0:8d:55:bf:ba:a5:2f:b9:2a:70:f1:54:e6:fe:ea:
09:75:e3:4c:88:13:b8:82:30:8d:8f:da:fa:32:f0:
57:d7:16:e4:bf:47:60:aa:5a:97:9b:4a:cf:b2:96:
2f:d3:60:1e:6d:12:b9:43:16:5d:c2:3d:28:b2:fa:
f9:a3:1e:a0:cb:16:b2:ad:d9:04:8d:06:21:89:2c:
c5:66:59:da:ab:41:96:d8:5f:51:68:73:8a:38:43:
3b:35:36:b2:f7:b4:bb:8c:da:b3:ca:01:f9:60:e9:
ae:dd:f5:aa:46:2b:a0:d0:10:fb:aa:17:55:bc:14:
22:5a:1a:92:2d:ba:51:4e:88:9b:ae:d4:06:97:48:
64:ca:94:57:a7:e0:bd:1b:9b:9e:3f:79:de:6e:3c:
49:1f:bd:b3:18:dd:49:64:5e:a5:83:28:6f:60:7f:
0d:a4:e0:c3:b7:c5:58:76:bc:fd:51:39:aa:bf:67:
3c:48:75:da:40:22:eb:aa:ba:01:d3:82:24:fa:23:
f0:dd:0c:62:69:f3:af:77:bb:3d:ee:f4:99:0c:f6:
a5:7b:af:5a:79:96:45:23:40:de:40:68:49:23:3f:
92:1b:b8:ce:2b:e0:d7:9a:63:32:eb:e6:52:c9:82:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:17:DC:69:84:F7:26:B4:DC:BA:75:F7:60:4D:A9:38:F0:72:44:3B
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:3e:15:42:0d:c5:cf:9e:f1:35:5e:2b:38:ff:ee:c0:98:
ae:f2:ac:07:39:78:96:45:2d:a8:e7:0e:e7:10:aa:1b:1b:e6:
51:9c:c5:53:4d:cd:d3:c1:26:40:ea:78:94:69:23:15:2d:b2:
7f:65:6e:e5:12:44:d7:03:75:33:95:85:2b:e6:30:da:7f:7e:
3b:70:f4:47:f9:3d:1b:ce:5c:9b:11:fc:02:67:fb:61:0b:44:
fc:fe:fa:cf:ee:53:e0:ac:43:47:9f:06:b1:e6:ad:1e:0c:7d:
53:bd:18:9d:05:33:5a:b1:2d:db:db:11:7b:ae:fc:3f:63:0b:
ee:f9:91:5d:79:8b:fc:8b:4d:ac:91:dd:c7:08:58:71:cd:2a:
66:44:35:83:0d:88:b9:56:17:19:24:f2:c5:23:c7:13:61:d7:
cc:5a:7a:56:d5:6a:f8:13:5d:2d:2e:2d:36:85:a4:fa:78:08:
93:32:c0:22:93:1b:78:25:82:6a:d7:3c:82:b7:74:a4:b7:7d:
dc:6d:d9:f7:6c:3e:c5:77:2f:2e:e7:38:e5:ad:6f:fc:77:0a:
a5:15:ff:16:2e:1d:b3:9b:25:1d:ad:ff:8d:c6:0e:a1:e4:43:
cb:eb:c6:65:40:6d:c5:da:c5:b4:48:b6:e8:38:33:d7:e0:49:
a9:44:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:39 2026 by rpki-client