Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: ew54i/9IkAZEukh3TnMtcpQWCAMnr7pidhC6JIdGSfY=
Subject key identifier: EA:57:39:CA:D0:23:23:38:0E:88:4E:2C:AB:4F:3D:41:B0:88:05:03
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 019E1EDA237752939948A1C2CBCB8CF70B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 01:01:12 +0000
Manifest this update: Wed 13 May 2026 01:01:12 +0000
Manifest next update: Thu 14 May 2026 01:01:12 +0000
Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=)
2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=)
3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: MT7+ImmQxb8lrhcufQkupBkzNP1OBA8XyenRFcMecrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:23:77:52:93:99:48:a1:c2:cb:cb:8c:f7:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: May 13 01:01:12 2026 GMT
Not After : May 14 01:01:12 2026 GMT
Subject: CN=ea5739cad02323380e884e2cab4f3d41b0880503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:35:bf:58:93:eb:fa:09:cb:8c:cf:23:88:
5f:5a:ef:10:65:03:82:09:56:c1:08:3a:47:e8:97:
8a:2e:fc:78:40:53:8b:03:86:27:b3:84:f5:83:80:
96:b3:89:92:8c:b5:11:78:6e:6a:37:0a:07:11:68:
89:8b:1a:e5:8b:79:76:f7:3d:23:45:2b:3d:10:3e:
2f:86:d0:de:7b:76:05:d1:33:39:40:78:f8:62:ac:
07:bb:8d:ad:1f:57:8f:7a:7e:00:e3:c6:38:da:cf:
a6:d9:0b:28:28:06:70:d5:40:24:ad:9e:5f:46:e1:
7c:8f:fc:bb:f3:3e:38:2a:83:a2:b3:59:f0:47:a4:
9a:77:c6:cd:b8:6c:76:98:7b:aa:7a:fd:ff:6a:3b:
01:5d:ff:15:c7:b8:cc:4c:ce:51:1a:ed:b7:f0:32:
9a:d7:60:91:4f:99:6d:73:76:12:be:c8:d4:14:58:
9c:36:7d:38:fa:96:a2:39:ce:e1:3f:3a:d1:15:54:
ef:a4:5e:72:9e:8c:d0:4d:6b:b2:56:f0:d0:38:f1:
bd:7b:e1:15:59:67:0a:2b:3f:5a:74:4d:bc:c1:9a:
8c:5c:e3:f8:f2:45:9f:ec:ed:37:e7:87:87:4d:5e:
bc:d1:8c:9a:f0:83:9a:f5:ac:6b:7e:43:8e:3e:46:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:57:39:CA:D0:23:23:38:0E:88:4E:2C:AB:4F:3D:41:B0:88:05:03
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:35:5a:92:56:ee:a0:03:d7:67:03:fc:3c:47:1a:78:0b:
0f:a8:e8:4e:25:74:d2:09:db:35:9f:ad:5b:6f:d2:6d:7b:3b:
cb:4b:46:4a:3b:d2:2e:83:e7:69:af:8e:9d:f7:4d:8b:47:6a:
60:d0:cd:93:30:dc:51:14:5b:2b:99:fa:76:b6:7d:17:3b:87:
aa:0d:8c:ad:62:cc:09:78:ba:62:47:65:4f:1a:32:76:ac:ab:
b2:9a:17:97:15:20:95:63:48:7f:66:db:11:6d:3b:d9:6a:cf:
f4:f9:59:e6:91:de:9e:17:a8:76:b6:ea:1c:7f:fc:b8:86:91:
1b:5f:28:6d:67:3e:49:d5:11:57:8d:cc:9e:60:89:e6:3a:c2:
ed:9e:ae:4b:7c:38:bc:68:01:a7:e1:ef:55:e4:75:25:50:bb:
8a:de:3b:80:98:73:40:92:f3:50:87:b8:41:68:15:08:ff:47:
b3:b2:bc:d0:f7:b1:09:62:3d:04:ad:79:54:bb:cd:84:7f:dc:
df:1b:8f:3a:2b:d5:1c:80:21:c8:1d:83:1a:aa:48:a2:85:8d:
59:34:c3:cc:5e:7d:39:46:a9:ae:d5:d8:15:3a:2c:c4:13:b3:
89:01:13:25:64:7f:66:f4:73:82:93:e4:e5:93:94:c7:0e:55:
a8:bf:64:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:32 2026 by rpki-client