Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: FAjw8xjoRn4KHzOab+TngeM4z32kxwTTGn3I7AQfKgI=
Subject key identifier: 15:0B:D5:8D:46:53:3C:2A:0A:44:4E:AD:34:C3:BB:56:30:71:BC:79
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 019E1FECF14FE1732595BD97F7E75A921ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 12DA
Signing time: Wed 13 May 2026 06:01:22 +0000
Manifest this update: Wed 13 May 2026 06:01:22 +0000
Manifest next update: Thu 14 May 2026 06:01:22 +0000
Files and hashes: 1: fEyQPPeKri3xxIwF-GK2DK9OO9c.roa (hash: 7YArpvgzsRn7tFDaYlxf0t+umiWwVKrDBhvgYPCrlAc=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: DtHoQFaoWNVHnPXvWBFTP0uUyru+Rn63hsBe/QaSouY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:f1:4f:e1:73:25:95:bd:97:f7:e7:5a:92:1e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: May 13 06:01:22 2026 GMT
Not After : May 14 06:01:22 2026 GMT
Subject: CN=150bd58d46533c2a0a444ead34c3bb563071bc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:3f:d2:c9:da:20:b4:4f:ca:82:ff:bd:e3:
cb:0c:af:bd:2a:f5:ff:7c:12:b1:02:82:31:04:19:
a1:1a:68:ee:4b:d0:f9:88:cf:83:38:78:a3:32:d2:
f4:5c:ee:9b:4c:42:06:64:8f:b2:f4:c3:05:96:f1:
50:7a:39:04:c3:ff:09:ed:0e:32:da:fb:f5:ff:5f:
a9:4f:2d:86:80:06:a3:65:ab:37:9e:01:1a:ba:cc:
c1:1c:2a:61:b3:53:0a:ed:76:ed:bd:d1:df:8f:2f:
5d:2f:7f:ff:31:cd:95:60:c0:63:1e:c2:fd:90:c2:
9a:6d:c5:35:6c:0c:90:55:d4:a0:2b:3d:db:46:a0:
2e:50:87:6d:00:e2:00:60:ab:c1:cc:4c:23:9b:7e:
c8:16:75:75:51:93:e4:e6:88:16:24:bd:f7:b9:c5:
77:f0:da:f4:2a:72:b4:f1:dc:e8:e3:b3:40:b1:25:
47:a9:86:80:db:5f:12:77:af:f7:92:7e:d6:13:75:
a6:ef:74:fd:0d:f2:93:ab:70:fb:80:3f:b3:d6:e6:
a5:b5:e3:59:46:5a:09:b2:25:ae:88:6f:57:4e:7c:
b0:2f:4e:29:35:70:58:51:ab:6f:fd:55:e1:84:b5:
e7:8e:be:6a:83:97:a7:87:12:a9:7c:54:e7:1f:ef:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0B:D5:8D:46:53:3C:2A:0A:44:4E:AD:34:C3:BB:56:30:71:BC:79
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c5:6e:55:3f:25:bd:57:f3:42:78:75:c4:e2:5f:8a:30:e3:
67:c4:cb:fc:2f:8c:65:e1:22:a9:1a:80:49:dc:11:75:20:47:
c9:e0:f5:27:00:ff:ef:51:ac:18:d5:00:d8:0a:e2:a3:39:8b:
ae:5f:37:32:75:f9:dd:bc:69:06:fc:af:1a:5f:e6:d3:b7:2b:
2b:ed:e9:ab:2a:e4:12:2d:58:8c:46:cf:6d:32:33:08:e7:01:
f1:bd:98:bc:f5:85:44:c8:a7:15:1a:53:01:e3:89:f1:fb:ab:
4e:da:2c:f9:7f:3d:bd:05:07:1a:03:97:f7:46:50:f2:93:ab:
cf:9a:86:11:9e:50:0a:11:52:e1:93:32:08:8f:54:cf:2b:a5:
d0:ed:a2:47:70:d8:49:cb:89:00:6e:65:01:e7:79:f8:6f:39:
fb:b9:31:59:7e:d7:34:5c:35:79:b0:a6:56:d5:8f:5f:f3:fa:
13:27:3d:4d:55:b1:40:11:ba:d4:58:30:2a:c5:ce:fa:e0:72:
29:d0:1e:cd:84:7e:d5:36:58:e2:09:be:ff:89:b1:bc:b9:be:
9c:1f:d3:bc:a9:58:ef:9f:70:22:ce:6e:ee:92:4b:2d:84:a9:
2c:eb:51:0c:70:50:d7:7c:ef:e2:8b:a4:ed:ec:bd:74:61:04:
64:29:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:38 2026 by rpki-client