Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: n09iPyIy0ot71tIIv92eTjvooUkmU2F3s7pcDaZZykU=
Subject key identifier: 25:33:DA:BA:E5:58:A1:11:9F:29:DE:C7:9C:F4:F2:93:83:E0:81:DD
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019E1DFE0BB0A5B887CA716DED0EC9EA8A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:00:48 +0000
Manifest this update: Tue 12 May 2026 21:00:48 +0000
Manifest next update: Wed 13 May 2026 21:00:48 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: VcmD5tVimtUlpUkwQR9c219sSJnje/nDzZwkcfnaf3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0b:b0:a5:b8:87:ca:71:6d:ed:0e:c9:ea:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: May 12 21:00:48 2026 GMT
Not After : May 13 21:00:48 2026 GMT
Subject: CN=2533dabae558a1119f29dec79cf4f29383e081dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:9a:42:65:04:7d:b3:6a:26:ea:cd:47:3c:
8d:ad:49:a1:6c:5b:17:44:e2:44:1f:5d:e9:87:09:
7f:d4:03:fa:60:81:05:12:1b:a3:f7:26:64:ca:0e:
dd:ee:9c:d7:13:a6:b2:6c:ed:96:e7:5e:77:07:7a:
30:7b:68:42:02:9e:b5:ce:4e:39:1d:fe:21:ce:23:
d4:aa:b2:ee:79:87:72:fa:4a:c7:9a:7a:08:b1:8e:
8f:22:3f:e4:e7:d2:c1:aa:33:99:3e:94:15:72:12:
39:f8:e0:0b:a0:82:07:a8:3d:d9:6c:7d:4c:52:19:
de:3a:6d:8f:fc:7f:fd:5c:b5:14:08:e8:ef:ec:2a:
6c:ab:92:9c:0e:e8:3e:a7:f0:b8:b2:1d:ec:cb:85:
36:01:92:f3:e1:d5:98:44:41:31:c8:5a:66:03:0f:
32:84:0f:72:02:f4:9f:64:24:f2:dc:ef:c6:d2:0f:
bb:8d:8a:58:e6:0e:76:d9:33:78:4c:9b:e8:3e:54:
f6:ab:85:87:db:21:5f:97:8b:47:c0:0b:22:07:ed:
86:02:84:56:a8:48:e9:7d:ad:57:22:03:ee:00:fe:
cd:d9:8d:9e:4c:31:cb:cc:8e:60:a8:66:fb:74:ff:
22:3a:39:29:dc:ff:b1:82:89:63:de:03:ec:e3:eb:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:DA:BA:E5:58:A1:11:9F:29:DE:C7:9C:F4:F2:93:83:E0:81:DD
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:80:2d:41:01:a5:ab:1e:80:fe:5e:c2:55:97:7d:f0:ad:
60:d5:e2:55:0a:e6:44:cb:96:eb:78:0b:dd:e5:bc:b8:67:92:
89:0c:f6:90:e5:8e:29:5c:e6:e4:d8:4a:86:40:a0:f6:ce:19:
cf:64:18:f7:01:fa:39:82:f4:37:d9:c9:78:82:d0:12:30:31:
dc:a5:64:12:bf:22:e2:73:d9:29:12:f0:f9:5b:40:17:5c:b6:
d5:8c:3d:22:30:00:b9:2d:5e:7c:22:60:3b:b8:09:45:31:b2:
73:d9:3f:cf:f0:0a:7d:c2:46:c2:f2:84:69:39:28:18:9c:13:
15:bf:2d:05:7d:e9:ea:c4:16:15:80:fb:65:b9:9f:f2:fb:3d:
ab:a5:2e:7d:fc:55:dc:f2:f0:1b:ee:99:37:4c:53:12:eb:67:
4d:9f:22:26:a0:d6:48:1a:b5:2b:8b:51:d1:a5:2a:bb:2c:0c:
d2:57:5f:fb:ee:72:58:8f:5a:17:e1:7c:b2:62:97:dc:30:fe:
95:05:57:9e:54:d6:e4:d0:18:19:a7:95:77:6f:5b:df:0b:d4:
12:31:6d:2a:2f:91:09:33:7f:8f:ab:5c:ad:4a:d7:80:aa:5a:
19:b9:e6:c3:20:7c:3a:eb:cb:15:e3:41:3f:8a:da:de:11:c6:
3f:49:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:03 2026 by rpki-client