Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: McCIKffnW3qWtyivzhSrSKtqcgYA8ac47q1zc5ROuD0=
Subject key identifier: B4:75:EE:51:FC:0A:96:BE:8E:7E:53:C3:0C:62:97:27:3D:EC:73:EB
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019E2023D81F614FE5B0BF10C6A749D8C0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 07:01:20 +0000
Manifest this update: Wed 13 May 2026 07:01:20 +0000
Manifest next update: Thu 14 May 2026 07:01:20 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: WqOuJGecJEX2pjzUcDODWDCTg3LvB4IPvyo2gOFCQPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:d8:1f:61:4f:e5:b0:bf:10:c6:a7:49:d8:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: May 13 07:01:20 2026 GMT
Not After : May 14 07:01:20 2026 GMT
Subject: CN=b475ee51fc0a96be8e7e53c30c6297273dec73eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:d5:46:2c:c0:90:f6:69:d0:46:42:04:d0:
27:25:d0:73:d7:4c:b9:78:db:07:66:8c:d1:80:7e:
c1:2b:b0:d6:51:0a:2c:a4:8f:34:b9:67:16:8f:de:
63:03:dd:bf:74:0f:61:99:18:56:ac:59:be:52:b4:
64:69:15:db:ea:32:48:42:ed:8f:b6:bd:87:9b:f8:
2c:5f:f5:34:67:3e:6b:f8:66:53:ff:ca:d9:f8:a3:
c1:c9:fe:c3:ee:9c:c9:82:36:4e:b3:0a:a7:58:f9:
72:3f:f6:e4:a7:aa:a7:71:03:7e:88:ca:ba:37:fc:
5b:1e:3f:db:40:ea:8e:47:21:70:65:bb:ed:4f:f8:
17:0e:d6:4c:e1:a8:d7:27:6f:5a:28:9e:78:11:09:
f9:e6:03:ec:32:f2:1a:28:be:1e:19:2c:0c:75:06:
ff:d3:dd:12:e0:9b:d7:e8:df:23:23:7c:f2:02:f7:
2d:87:cb:c5:99:dc:93:4a:56:c2:b8:65:5c:e7:ae:
50:0e:a3:7b:b7:75:8d:b6:b4:2a:7c:b8:61:d3:ef:
37:3e:2e:29:9e:3a:fa:e7:a8:a4:bd:25:08:09:28:
29:f6:63:56:8f:66:7d:de:62:68:c3:f9:fc:33:c0:
69:63:6a:56:87:01:83:e7:57:67:55:0d:7f:28:f0:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:EE:51:FC:0A:96:BE:8E:7E:53:C3:0C:62:97:27:3D:EC:73:EB
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e8:3a:8b:fb:61:18:2b:b5:a2:bc:59:89:af:b0:f9:0e:ac:
da:11:a9:71:e3:37:2f:f7:cf:09:7f:d6:7c:33:a1:1d:f2:49:
0b:57:9b:7c:85:87:ab:96:17:02:2e:bd:1d:54:ea:d2:cd:eb:
4c:62:41:7e:d2:b4:37:43:dc:f2:a1:88:0e:be:8d:3b:d9:72:
25:7c:58:b2:17:2e:d9:ed:30:46:33:ae:0a:4a:a8:97:33:73:
3e:82:8e:22:ee:cd:78:11:40:5f:90:b4:2d:c1:20:40:d4:90:
e0:fe:7d:50:9d:9e:75:c8:75:dd:42:64:6f:fc:93:f4:e3:b9:
12:aa:e7:75:f7:68:52:9b:1c:29:7b:22:fc:6e:b7:d9:93:10:
b5:7b:24:85:33:d3:d5:7e:c7:3d:72:e1:fe:60:ef:a7:51:d0:
ad:d1:f5:39:61:7a:4b:ce:71:67:22:15:9c:1a:d0:24:ae:c9:
83:d9:d2:84:ea:d8:17:29:f9:93:ec:cc:9a:74:e4:54:4c:d7:
dc:7b:89:74:af:0e:54:7f:cc:53:f3:74:dc:17:fe:bd:3d:0b:
35:c9:7a:17:4d:51:ed:ad:a9:3d:df:21:83:f0:7f:34:7b:d8:
b6:96:73:d4:06:84:67:ed:1b:9f:74:fb:30:eb:a6:dc:82:22:
b0:65:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:48 2026 by rpki-client