Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: 2QUIxgbtUViUEX7mtjICYB/ks1OAWturzxeGpu0qYaY=
Subject key identifier: 07:02:F8:9C:B3:17:A9:1D:8A:48:2D:A8:81:1C:D0:A0:1E:4A:DD:B6
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019E1D599B12C374F4DA24BC760E84AE703A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 18:01:11 +0000
Manifest this update: Tue 12 May 2026 18:01:11 +0000
Manifest next update: Wed 13 May 2026 18:01:11 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: JYWg0rVrzgu30T9l77+Sw/wr8xLddg7rzBIhTEjR6TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9b:12:c3:74:f4:da:24:bc:76:0e:84:ae:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: May 12 18:01:11 2026 GMT
Not After : May 13 18:01:11 2026 GMT
Subject: CN=0702f89cb317a91d8a482da8811cd0a01e4addb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:90:d0:62:67:b7:42:bf:cd:a9:14:e4:d0:
86:25:73:1b:9d:2c:45:03:95:04:67:3c:f6:08:af:
bf:d5:2c:ac:72:b9:2c:ee:41:a0:e1:de:98:62:e7:
06:46:86:94:50:67:12:d0:c2:49:f7:29:2e:9f:8e:
b9:77:b1:2a:85:e9:c0:9f:46:71:be:27:b9:2b:e5:
ce:41:db:85:bc:82:06:7b:c3:81:cc:59:3f:00:38:
e7:df:e8:eb:70:42:38:43:65:20:c2:b9:77:35:49:
d4:ca:cf:02:b1:d3:de:41:06:a4:af:d0:2a:df:49:
ca:02:05:dc:30:6b:bb:ab:f4:0e:9c:2c:7a:0e:68:
fa:7c:55:ef:a2:bd:71:05:6d:d2:34:86:7d:35:37:
50:f2:c3:7f:78:6e:d6:05:ee:1e:0d:58:be:f5:69:
7c:36:c4:65:6b:7c:71:a8:f6:3a:f0:63:c0:f5:54:
69:79:6e:f9:7f:14:1c:3c:2a:39:a7:f6:cb:bd:23:
d4:2a:44:94:40:42:1f:bf:10:2a:94:e1:2b:de:ac:
ae:90:44:49:51:5d:16:ac:2b:2c:73:8f:f0:21:9f:
2c:14:2b:de:0c:cf:ef:40:bc:4c:a5:1b:9c:72:d5:
43:05:9d:a7:22:6f:dc:2f:08:90:cd:b3:98:43:61:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:F8:9C:B3:17:A9:1D:8A:48:2D:A8:81:1C:D0:A0:1E:4A:DD:B6
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:7f:4e:88:50:b0:71:b8:fe:3d:83:e2:8f:15:1f:b5:bb:
5b:ac:14:07:85:f1:9c:f9:4d:f2:92:15:37:24:5a:6d:7a:43:
ef:8c:8d:30:82:16:1b:00:83:e4:8a:b2:f7:49:2a:c0:b8:d6:
85:cb:7b:e0:9d:bb:88:85:26:74:71:b7:df:17:6b:d5:ff:dd:
f6:77:b3:0c:31:2d:b7:cc:6b:ed:9a:bd:b3:67:8b:d5:f3:be:
a4:ff:9f:f1:c8:4b:23:c9:d6:a4:1f:49:66:83:69:86:b7:0a:
a8:65:87:cc:c9:91:65:33:46:4f:16:69:a5:8f:f8:3b:64:48:
db:2d:9c:e9:8c:f9:f4:3b:0f:f8:b5:ca:d2:d4:65:29:50:d5:
55:15:e3:6f:20:4b:40:12:63:dd:8a:53:2d:a6:22:a7:c7:c3:
f3:ce:e1:46:a8:ba:10:88:6c:ad:3d:82:af:90:29:1f:67:bd:
ec:36:33:d1:f6:80:d7:7f:c3:51:51:04:62:aa:36:29:98:9e:
fe:1d:1d:9f:8c:0e:ed:e5:db:f0:77:15:2f:e5:75:9b:d6:80:
f3:7e:82:a6:54:3b:b0:db:36:5b:d4:5d:d3:3c:48:63:2a:b4:
38:fa:5b:27:36:7c:e6:e3:24:17:8f:53:89:c9:45:d5:9f:aa:
53:c1:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:02 2026 by rpki-client