Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: h+crTJM7fYdgLycQyR2SVEquPLM4x7R3Oqu56YrxoHM=
Subject key identifier: 20:42:DF:D5:C4:77:77:5F:6B:32:6B:8F:2E:DC:A6:7F:DE:F5:90:77
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019E1EA3712000E0AD161E5BDEB6E15AE87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 14CA
Signing time: Wed 13 May 2026 00:01:28 +0000
Manifest this update: Wed 13 May 2026 00:01:28 +0000
Manifest next update: Thu 14 May 2026 00:01:28 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: Rk75LCO4Jh5or3rlV05myJZym7x2z5V25AFFEBWOXt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:71:20:00:e0:ad:16:1e:5b:de:b6:e1:5a:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: May 13 00:01:28 2026 GMT
Not After : May 14 00:01:28 2026 GMT
Subject: CN=2042dfd5c477775f6b326b8f2edca67fdef59077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:da:8a:76:ed:b0:19:f8:a4:13:32:e6:bf:
b3:21:25:23:9d:ab:70:08:70:a4:a9:27:ed:c9:31:
63:7f:31:cf:ee:db:90:55:e6:1d:e1:0e:5f:3c:4d:
cf:53:67:12:c9:b6:d4:b2:50:f4:72:81:52:fe:9c:
ba:9f:6f:ef:f3:f3:c1:a2:3c:0b:48:6a:56:e5:b4:
7c:de:ee:cf:27:36:e8:af:ec:7c:d3:d0:c0:7c:7a:
af:3d:b6:e1:fd:45:85:f9:da:2e:51:3f:3a:bb:0b:
36:76:94:80:92:f2:0e:e9:a8:00:f0:b4:22:8a:3b:
de:db:d2:4c:12:8c:48:71:2c:dd:33:83:bf:2e:d0:
3c:bd:ea:e6:9b:14:19:8d:95:52:56:da:35:90:2c:
57:65:69:cb:bc:c2:4e:a9:3f:40:41:4a:88:81:4a:
a5:d9:b7:8f:cf:41:ff:43:79:3a:03:b4:81:85:70:
d6:44:0c:f2:0e:aa:2e:5b:43:0b:10:9a:38:bf:4a:
18:f3:52:87:86:87:6c:68:09:47:b9:13:54:51:15:
37:48:3a:11:fd:1c:95:71:d8:61:c8:0a:d3:18:bf:
e7:e1:1c:ca:fd:5f:1f:0c:57:d1:8c:02:ec:0d:a5:
73:79:94:b1:46:ba:17:25:a3:2c:f4:76:12:ae:ad:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:DF:D5:C4:77:77:5F:6B:32:6B:8F:2E:DC:A6:7F:DE:F5:90:77
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c2:e8:3d:d4:db:ba:db:17:f9:2e:6c:93:4b:19:d8:57:e0:
ac:86:a9:e3:f8:74:2b:59:21:f4:df:8f:c0:31:70:a1:c3:4d:
09:0a:96:43:9a:dd:75:2a:fb:9f:16:1b:79:58:0a:e6:8a:ee:
44:48:6e:50:0b:7f:82:49:19:39:59:ab:3f:24:e5:75:bc:5d:
3d:e9:c1:8a:52:3a:dc:fd:3e:1d:55:d9:0d:d0:cc:95:08:76:
f2:0b:9d:c9:d8:11:c9:bc:27:88:f4:92:83:14:12:73:bf:4c:
90:93:54:50:c4:00:f5:63:62:05:37:16:7b:ae:bb:2a:80:75:
2c:87:fb:87:3a:87:7b:be:7c:af:9d:c6:99:6d:c4:b0:48:84:
16:89:ea:9a:95:4c:a4:24:8d:04:1d:cd:52:ef:ba:40:4c:cd:
45:f8:6f:b7:e8:29:6e:9c:e8:ee:da:d4:f5:27:58:a6:85:09:
d6:6a:f3:54:4f:01:76:67:67:1f:ee:5e:36:c1:f9:a8:7c:19:
18:83:92:f3:5d:f7:ae:7f:2c:9d:ea:60:25:d0:7f:6b:b1:89:
44:3e:61:7f:05:5c:e9:0c:8e:a8:b9:df:31:a2:4d:33:2e:d1:
47:92:2b:8f:b3:ea:61:b5:6c:ce:0b:16:21:d8:7d:6d:48:68:
b2:3b:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:12 2026 by rpki-client