Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: E2318amFY2hYGsVgaiPt4qEAmgSZC2uNiViD1BFpmro=
Subject key identifier: 34:C3:E0:30:38:81:1E:2D:86:2D:46:28:CE:57:40:34:CA:89:FC:BC
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 019E20242DECAAD0C0A7F903D47334D59CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 09B3
Signing time: Wed 13 May 2026 07:01:42 +0000
Manifest this update: Wed 13 May 2026 07:01:42 +0000
Manifest next update: Thu 14 May 2026 07:01:42 +0000
Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: dA13qHO/Z2jCFN61kk2e5syKBP1ZZG1LglH4vYwWta0=)
2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:2d:ec:aa:d0:c0:a7:f9:03:d4:73:34:d5:9c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: May 13 07:01:42 2026 GMT
Not After : May 14 07:01:42 2026 GMT
Subject: CN=34c3e03038811e2d862d4628ce574034ca89fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:7d:dc:08:9e:f8:cf:34:bc:e5:51:8b:eb:
48:e4:e0:82:cb:75:c7:e0:cd:56:87:4a:9c:64:16:
d1:af:be:5b:e2:81:51:c3:9b:e6:01:36:18:fd:34:
2c:aa:78:dc:b9:62:06:80:be:1f:c9:8b:fa:8d:ad:
15:a8:b0:a6:f3:ea:74:be:46:32:7a:bc:07:5b:64:
e9:c8:dc:8b:e4:df:37:38:1c:18:93:55:d3:d0:4d:
a7:b1:82:a0:89:ee:a8:31:dc:dd:10:59:3f:77:cb:
ca:63:d0:01:74:0a:69:9c:fe:77:a6:41:71:09:1e:
ab:2e:9b:e5:31:53:ec:be:15:a8:55:7f:aa:f8:6c:
65:08:17:d8:5e:8a:94:f5:8b:1b:9c:63:c3:12:b4:
79:2a:d1:20:b6:1a:5b:fd:3d:0d:98:c7:87:23:83:
b0:67:67:34:68:ba:fe:7b:cc:07:7d:81:15:54:dc:
00:94:d6:04:c3:f3:f3:94:c2:b9:7d:ce:8c:f5:e3:
c8:a9:81:29:e6:91:bb:f4:b7:c8:47:e4:c5:43:f3:
5f:c0:d3:c3:5e:be:31:1e:50:01:1b:b5:54:67:f1:
d1:bc:ed:02:19:e6:d6:e9:2f:86:3b:64:f6:73:d6:
b7:23:7b:2b:37:8d:6c:0b:f4:ab:88:ea:ec:09:f3:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:E0:30:38:81:1E:2D:86:2D:46:28:CE:57:40:34:CA:89:FC:BC
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:e3:a4:58:86:9a:ea:d5:b3:03:14:be:f0:e2:c0:1d:27:
7b:88:17:42:02:db:ca:53:eb:28:9c:bd:8f:1d:54:ab:e0:59:
ee:69:b5:5a:6d:86:bb:9e:fa:4e:15:12:d7:20:59:34:35:97:
37:6b:47:67:b6:11:b4:a2:1b:64:d4:01:0d:8a:84:52:66:85:
98:7e:62:c3:b9:51:2b:e9:1d:93:e0:3c:58:42:6f:5b:c8:14:
a3:5f:15:dd:f8:e1:2f:4a:d6:36:18:e0:e5:99:99:8f:d6:2f:
8a:c0:c6:51:7d:a7:bb:9f:e7:c7:d4:e6:d5:22:a9:fc:93:e2:
f0:70:f6:a9:9d:51:ef:5d:66:59:9c:0a:01:c9:f2:9f:d3:94:
68:e5:a9:f8:dd:c4:41:1a:e6:59:33:71:03:7c:2d:41:a6:fb:
2b:f4:c2:63:7b:c2:9a:c2:09:f1:bb:57:ef:b0:a7:9a:18:84:
49:30:85:16:5e:0d:1c:93:ae:3e:07:d2:2f:30:9c:c1:27:9a:
6c:5e:3f:76:98:0f:ac:48:62:97:e7:df:8c:87:2c:e1:e8:82:
d6:a9:91:c0:79:51:a5:96:f0:10:9f:ef:6a:42:e3:d7:3e:38:
91:c0:97:aa:10:e5:27:bd:bf:4d:7c:03:e9:d6:0b:1f:d3:67:
51:8f:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:51 2026 by rpki-client