Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: sFlKiYZEMv6nPS0OrQplxtZhUt71zgIzXHnv6C6B3rE=
Subject key identifier: E4:0F:90:96:8A:82:F6:CA:EA:3B:2A:8C:69:31:05:0A:58:4A:46:63
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019E1F117D7FAF4C4DFCFC5B12F03DB55915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 16E5
Signing time: Wed 13 May 2026 02:01:40 +0000
Manifest this update: Wed 13 May 2026 02:01:40 +0000
Manifest next update: Thu 14 May 2026 02:01:40 +0000
Files and hashes: 1: AO06uJHkVshYcEPLGfhX8Uw9gpc.roa (hash: 5SvwdBIYhvyrwzSR8AKYSXgpfbX0MUkDamcTaTo4pOY=)
2: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: j4vGXN++BLyUxjj+9aDXlPzEygMLHm1RYdbcQlpl6rk=)
3: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7d:7f:af:4c:4d:fc:fc:5b:12:f0:3d:b5:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: May 13 02:01:40 2026 GMT
Not After : May 14 02:01:40 2026 GMT
Subject: CN=e40f90968a82f6caea3b2a8c6931050a584a4663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:83:94:60:93:4a:ef:67:78:5b:4f:18:c3:
a1:07:72:62:0a:51:94:e8:06:79:3c:87:5a:86:87:
10:f5:95:34:7d:a9:ae:54:0e:0b:c1:d7:f9:b4:e2:
b0:27:83:bd:ad:ab:ab:78:d8:c8:cd:20:98:c9:c1:
f8:37:a4:89:26:c3:15:1a:12:dc:17:7d:21:5b:76:
b6:9f:45:d4:b8:9e:53:21:0a:7d:7a:58:d7:d1:1f:
c8:60:5f:99:93:37:72:ee:8c:0d:67:d0:73:55:12:
28:10:7f:5b:93:0f:3f:db:6f:8d:dd:b9:1b:61:57:
89:18:9d:72:6d:d1:b0:0a:5d:21:10:d6:32:5d:6d:
c8:79:0c:46:a0:50:d2:6d:11:96:8d:02:ed:24:ed:
59:63:da:78:d6:8e:09:8e:57:c4:87:da:2d:83:1b:
a5:f9:ee:98:11:09:30:9a:f5:78:43:ea:37:dd:09:
02:c3:8a:96:68:2e:28:99:c1:2a:c5:e0:b3:10:83:
d5:3c:78:15:39:e2:c8:ad:1a:af:b0:26:8c:50:14:
c8:1e:e7:ea:b2:40:6c:67:e5:9b:fc:de:69:c3:22:
a0:19:78:7a:35:18:37:47:50:a6:12:fa:da:6e:8a:
22:b7:6e:cb:4b:a3:65:76:5f:f2:9d:21:01:af:8e:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:90:96:8A:82:F6:CA:EA:3B:2A:8C:69:31:05:0A:58:4A:46:63
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a6:e2:b4:70:40:f1:d6:dd:68:cc:8d:1a:5f:a7:de:1f:5f:
c4:f5:ea:42:29:62:6c:e7:ad:fd:0c:95:46:60:e2:2a:a4:ce:
f7:c4:96:ff:2d:05:de:aa:ce:12:96:46:71:2c:02:f4:cd:d2:
3b:f4:bf:f3:ce:75:e6:5e:59:ec:03:47:ac:86:17:43:83:ab:
23:cf:46:e8:fa:14:26:58:01:3d:1a:3c:e0:31:33:a7:1b:8c:
ad:8e:d4:78:08:ca:c6:b5:3d:30:11:fb:00:1a:0d:3d:4b:03:
f9:79:b9:44:38:28:66:50:09:78:0c:80:03:75:6c:c4:6c:d3:
3d:01:a7:ce:8b:a9:bc:47:d3:3b:5b:02:ed:a1:8d:37:3c:65:
5d:21:e9:21:7c:99:6b:a6:5e:48:eb:cb:b8:b4:d9:42:0e:23:
e4:87:cf:54:0f:3f:70:91:50:d3:36:a0:69:89:bb:da:26:2c:
3e:57:57:bc:e1:15:98:0f:4c:38:38:d0:0e:54:06:3a:67:a6:
08:c1:e0:7d:a3:68:c4:4a:08:dc:65:a6:e9:2c:f2:bc:78:6b:
98:ae:cb:75:f3:71:46:ba:f0:40:a7:8e:13:26:4b:f9:75:21:
ae:de:1f:94:8d:72:b7:0f:ba:53:6a:8b:01:15:00:b8:5b:1f:
22:07:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:17 2026 by rpki-client