Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: 9RWN2UlWTiIr0y7Xs1Vg4uSk9821EtecEzOBvGCI/PI=
Subject key identifier: 49:E1:18:DB:3C:63:89:6C:A7:20:B1:7E:DB:87:04:53:D3:D6:EE:8F
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019E1DFE69FA8D8AE7DE39FA2D369D766141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 07CF
Signing time: Tue 12 May 2026 21:01:12 +0000
Manifest this update: Tue 12 May 2026 21:01:12 +0000
Manifest next update: Wed 13 May 2026 21:01:12 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: dQu6wJpPeRFw1QRCcp7IKl8HfJl+ChlXT/jozmpAwho=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:69:fa:8d:8a:e7:de:39:fa:2d:36:9d:76:61:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: May 12 21:01:12 2026 GMT
Not After : May 13 21:01:12 2026 GMT
Subject: CN=49e118db3c63896ca720b17edb870453d3d6ee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:0f:db:5d:b1:79:e4:1a:4b:eb:33:a4:89:
d0:eb:50:df:bf:63:70:79:25:6f:63:20:dd:a6:56:
12:f8:3b:89:7c:fe:4f:10:d9:a9:50:85:96:65:d3:
cf:d4:98:65:aa:f1:50:b6:2f:7d:96:9f:fe:9b:8c:
9b:48:bc:85:5d:c4:17:df:3e:8f:39:d7:df:fc:5b:
c9:bf:67:f2:6a:60:e5:77:85:7b:19:b5:86:f6:ef:
91:ec:59:46:24:49:3b:44:76:87:51:17:3d:c3:5f:
b9:ef:6f:ca:6d:13:48:62:5e:ad:91:33:89:b6:47:
c9:e5:17:fd:bc:7c:4d:3a:12:47:9a:3f:3a:43:fe:
f9:52:76:16:d3:cd:fc:0a:24:b2:84:1e:75:52:f5:
44:93:f6:97:03:97:42:be:28:df:0f:65:61:5d:13:
4f:24:4e:d6:55:88:c8:ec:dc:37:b8:c1:7a:d9:07:
90:63:60:93:6e:4b:87:aa:72:44:a1:0d:2e:82:e4:
ac:aa:3d:7f:05:96:52:ae:97:f2:aa:01:20:ec:fb:
1b:a4:47:a2:bf:b7:2d:f3:5a:2d:ef:8a:df:45:f8:
f0:79:45:25:23:a4:f6:40:31:4e:d3:75:86:48:30:
dd:aa:69:e2:e2:92:e0:cf:be:db:ef:e5:c0:91:23:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:18:DB:3C:63:89:6C:A7:20:B1:7E:DB:87:04:53:D3:D6:EE:8F
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9c:a9:48:67:14:de:e9:43:33:a3:00:3c:b6:9b:60:ef:06:
dc:d5:0d:c0:8e:d0:16:1f:8f:d7:af:96:66:f0:69:ed:8e:8c:
2c:1f:d9:14:51:38:04:2f:fc:f6:58:b7:29:54:cd:f1:54:da:
f0:c3:69:02:50:4b:58:60:ae:d4:fe:8a:37:0a:cb:b4:3d:6b:
4c:91:ec:b9:7f:30:56:fe:42:7d:b5:cc:8e:c9:8f:7f:a0:30:
27:a5:9a:40:d3:cc:86:74:60:ee:68:9d:f5:6b:63:18:56:4a:
f0:ef:4f:cb:8d:24:62:6b:93:6a:1e:ea:da:c3:1d:7f:eb:e0:
f2:7c:0c:4d:45:f2:09:07:b3:ef:a7:25:d9:b7:08:60:d7:e1:
98:6f:c2:6f:cc:fa:2d:fe:3b:af:60:6b:e9:e5:c3:b2:66:56:
fd:eb:fd:7f:59:5f:a3:a1:ad:89:9f:e9:60:75:51:bc:24:95:
9c:30:07:f0:e6:f2:6c:a9:68:30:10:f0:70:35:ed:ae:19:16:
35:67:f2:76:f8:11:a3:68:dd:ce:b7:05:e7:35:15:cc:96:99:
e7:b1:1e:96:64:51:60:f0:77:8d:7f:bb:21:cd:ad:36:db:cf:
a6:57:98:8b:f4:7b:34:2b:ec:74:1e:d4:d3:36:7c:4c:90:59:
61:79:97:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:53 2026 by rpki-client