Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: CfUUa5zGui1nkv1C9eocKv3AZwkn3KXh2nWTJNAEoug=
Subject key identifier: 09:D7:89:4B:0C:08:56:DA:A1:32:5E:2E:38:22:86:D7:39:82:63:DF
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 019E1FB591132A1CAE04E736843BA7CD5E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 05:00:53 +0000
Manifest this update: Wed 13 May 2026 05:00:53 +0000
Manifest next update: Thu 14 May 2026 05:00:53 +0000
Files and hashes: 1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: B3Xu6deC69+NVk9ItoFWWkt/bClnHUE+DdqBbzGabHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:91:13:2a:1c:ae:04:e7:36:84:3b:a7:cd:5e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: May 13 05:00:53 2026 GMT
Not After : May 14 05:00:53 2026 GMT
Subject: CN=09d7894b0c0856daa1325e2e382286d7398263df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:f1:95:d0:f5:8b:4a:95:d4:21:c2:b4:8e:
18:b9:c8:e2:99:3d:55:7f:a7:f3:4c:05:cb:2f:ca:
ef:49:b3:76:63:66:f3:0e:8c:63:56:42:bd:75:1b:
be:6f:e6:29:26:3f:d8:a9:93:4c:b4:26:8e:f8:c8:
b9:44:90:89:2d:ed:74:9f:a3:9c:7d:81:1a:f9:bf:
b8:91:3b:0d:5f:3d:e5:9e:8e:96:d4:b6:5f:2f:69:
6b:72:e9:37:4a:35:70:da:f3:09:b1:fa:be:ce:7f:
40:f0:60:84:a1:78:0e:7a:76:32:33:1b:b9:85:90:
3b:84:38:7e:e3:26:76:9d:5d:c2:b3:90:74:5f:e9:
d3:72:da:01:b0:41:e3:89:dc:2c:55:a8:63:35:5c:
aa:bc:6c:38:7b:db:aa:79:6d:06:ab:12:64:80:22:
fb:5d:4f:a0:53:b2:09:9c:1f:60:4b:91:5f:b6:1e:
15:c5:ed:50:76:63:52:ac:9a:d9:59:4f:a5:95:9c:
ca:4a:99:a2:1f:3c:c6:3f:72:2b:1b:d7:36:c2:db:
a4:13:55:99:03:7f:9f:83:e9:ba:30:ca:60:49:71:
51:57:2b:9d:80:6a:f6:21:56:cc:63:99:4d:5f:69:
6e:03:fb:e2:d6:0e:5c:c2:d4:76:21:40:40:72:88:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:89:4B:0C:08:56:DA:A1:32:5E:2E:38:22:86:D7:39:82:63:DF
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:c1:95:24:4a:84:32:aa:52:08:c0:d4:2a:70:eb:0b:7c:
64:4e:9f:e2:83:4c:00:3c:39:31:86:e3:c1:30:bd:b3:6f:48:
4a:6e:23:6b:cd:38:18:0b:e5:f7:92:1c:18:9a:e6:a2:29:ab:
67:1e:21:5d:0a:85:88:54:23:1e:f0:2d:be:dc:0c:2f:56:76:
3f:64:19:2c:cd:17:58:04:9b:d6:33:e0:52:ec:5c:13:85:46:
05:6f:43:1a:86:45:87:c8:d4:aa:77:33:fb:64:7b:eb:d0:32:
ce:10:ea:40:99:ef:2e:ed:cb:6b:a2:41:af:b2:45:78:b1:17:
59:bd:79:dc:51:97:54:5f:00:d5:ef:42:8a:05:ec:f2:f6:44:
b2:6a:bf:bb:f0:e7:08:fb:44:ac:07:27:05:f6:55:c2:be:e9:
11:09:c7:0c:b9:87:27:d8:6f:a3:1e:75:f1:39:e3:ca:02:c3:
c1:f7:1f:54:a8:41:da:fd:48:c4:1c:eb:0e:fe:57:93:6d:62:
47:c8:5e:a3:3a:cd:46:8b:a6:fa:06:86:23:da:02:13:fe:a2:
41:a6:bb:40:b8:45:b6:0c:1d:37:58:90:7a:83:41:e4:4d:d2:
dd:a8:e4:1d:03:e9:86:51:d0:a3:10:02:fe:33:69:ab:3f:43:
5b:5a:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:38 2026 by rpki-client