Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: 8p5ZNjyYtb1Q+C0OKN2ndZu7A7OsPPDnk9gZreDE5Ls=
Subject key identifier: 65:B0:EC:80:85:D0:2B:62:98:D4:B3:C0:69:FD:83:21:CA:34:37:E4
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 019E1D907F38ACEA773BD40218800EB2F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0C03
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: epkM5me6VO4WBfsP3OBY0X-ejFw.roa (hash: zpYuo9uFqGN49lIwpVPfYA+YcKIr1TU6tf2Nb7fQdzM=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: i5ivizYkOOGpUb8NOurxUTBtZ1UEN3h/Bnpdkm/BcZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7f:38:ac:ea:77:3b:d4:02:18:80:0e:b2:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=65b0ec8085d02b6298d4b3c069fd8321ca3437e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:d4:44:87:3a:bb:69:4a:e4:d7:c0:ea:1b:
04:96:af:42:3a:ce:9b:c4:87:52:55:47:66:2e:bc:
c4:fa:c9:0e:12:a0:1c:2b:b3:37:b9:fe:1b:ad:6a:
b9:56:1d:d7:10:c4:f6:a6:54:76:af:37:48:26:30:
24:54:b4:c9:42:1f:07:b7:e6:04:7b:80:78:1b:5f:
69:9e:6e:f1:04:f9:6f:19:89:fe:f8:ad:bc:92:68:
f2:30:69:dc:20:af:e5:f9:bc:e2:b5:fb:fd:b9:a2:
34:db:0b:9f:29:23:2d:14:0e:da:46:af:b4:d7:49:
c0:a9:68:11:77:8e:b8:c6:b9:dc:68:23:c3:0c:1b:
7a:3a:e7:38:9d:c2:25:b1:3a:05:9c:94:c6:9f:76:
fe:75:d5:12:07:2a:18:5b:70:6e:30:dc:c9:97:67:
ec:2c:9d:a0:97:3f:58:15:73:dc:82:ee:84:a9:4f:
44:59:f7:67:38:6f:b4:b0:f5:0a:a3:90:c7:2c:61:
dc:cf:a6:12:2a:4a:20:5e:91:97:05:18:3f:36:6b:
87:ac:cb:12:17:84:d1:fb:5a:b4:e9:d2:99:42:e5:
6d:c4:20:20:87:21:e9:92:1c:f8:4e:7d:88:05:87:
c6:13:74:c8:cb:84:4e:2b:3b:ac:4a:e2:ac:52:71:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:EC:80:85:D0:2B:62:98:D4:B3:C0:69:FD:83:21:CA:34:37:E4
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c3:93:53:d6:9d:78:0f:cf:d8:9f:9c:48:0c:e1:dd:79:d7:
b1:67:a8:8d:ac:0b:40:c6:d0:5e:73:f9:67:dd:6d:68:5f:5b:
e0:20:9f:69:0d:ac:f1:73:35:1e:ae:87:74:8b:73:f8:20:64:
35:23:dd:6f:33:c0:e6:38:f7:6f:4f:b8:6b:8a:00:66:be:95:
1b:6c:52:54:80:04:5f:a7:33:19:2a:00:a2:27:05:76:99:86:
ad:ab:b4:39:1b:30:77:a8:13:94:6e:6b:7f:ce:2f:50:81:f1:
8f:95:67:2d:6d:79:a1:cf:61:12:58:db:a5:46:3d:c6:85:98:
4c:a0:55:89:fc:7e:01:4d:04:9c:be:ee:0f:3b:ff:08:42:78:
d3:8f:72:1e:d7:c4:15:cd:88:6a:17:18:30:b9:ae:f1:92:dd:
c8:ba:7b:d3:a3:e8:f8:8e:f2:bb:b1:6f:12:57:57:a9:f5:3a:
df:4a:05:db:82:8c:5e:2d:3c:b1:1d:b0:bb:22:d7:63:65:17:
1d:6c:51:de:cd:13:9d:86:aa:8c:23:99:e0:a6:aa:00:a3:c9:
d2:3c:82:ee:ea:42:6e:1e:fb:7d:7c:12:91:a9:be:7f:49:04:
68:f7:55:f2:46:b3:44:a0:c7:00:c3:9b:97:fb:73:aa:a5:8b:
1b:fc:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:26:07 2026 by rpki-client