Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
File: kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft (raw, json)
Hash identifier: XPdB5S8inWzwUU3i0VC7tUlfXKLTbRHPbBz0lTPsxOQ=
Subject key identifier: 41:8B:4A:DB:64:34:EA:B5:97:1F:3E:6C:B7:E1:9D:4C:40:1B:B9:DB
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 019E1DFE5673E890E7312627B6B9FB300F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
Manifest number: 26
Signing time: Tue 12 May 2026 21:01:07 +0000
Manifest this update: Tue 12 May 2026 21:01:07 +0000
Manifest next update: Wed 13 May 2026 21:01:07 +0000
Files and hashes: 1: kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl (hash: LDSjx5U/beJsWq/Aegz3O72ISJPxqGOryX1WlSgyAck=)
2: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (hash: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:56:73:e8:90:e7:31:26:27:b6:b9:fb:30:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: May 12 21:01:07 2026 GMT
Not After : May 13 21:01:07 2026 GMT
Subject: CN=418b4adb6434eab5971f3e6cb7e19d4c401bb9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:b7:f8:d0:91:84:5b:f1:2a:c1:94:77:72:
28:8f:61:f5:fa:90:a0:98:ed:57:60:c2:37:16:0b:
40:f8:81:27:93:d1:40:dc:ae:5f:76:f1:b5:41:87:
00:a1:cd:f6:9d:87:95:b8:f2:c4:7e:73:cd:94:f6:
86:05:23:46:0b:34:aa:67:cd:32:ab:a2:c4:db:e0:
2d:b0:e9:7c:ab:1f:7a:06:89:28:3b:66:3b:f9:8a:
57:9f:ec:a0:77:c7:05:3a:68:b2:8e:63:75:e4:0a:
bb:40:c7:bb:e6:7c:43:83:c9:8e:2a:e6:3c:83:fb:
65:07:a0:31:15:fb:d5:32:b6:2a:90:2e:1f:dd:c2:
a8:7a:26:f0:f8:d3:37:dd:25:fe:82:f4:20:c1:06:
a3:c1:83:44:b8:78:b9:16:37:d0:8d:88:ec:d3:13:
98:fb:22:19:2b:41:9c:2c:3f:91:f6:43:c4:0a:ad:
f8:bb:96:30:00:b2:fe:be:64:b5:cd:85:f4:20:44:
3b:87:d4:91:2b:17:b3:ce:73:48:1a:ab:e1:a5:38:
66:d0:a0:72:a1:16:3c:1b:11:5a:21:40:8f:e4:ce:
db:1f:23:3c:ab:c9:f2:84:ba:41:19:85:58:cd:75:
37:36:50:d4:f2:4c:7a:dc:32:0d:fb:3c:6f:ae:cf:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:4A:DB:64:34:EA:B5:97:1F:3E:6C:B7:E1:9D:4C:40:1B:B9:DB
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d6:7d:46:42:78:20:5a:c5:99:ec:5a:64:d0:c8:e0:73:d5:
e0:31:3b:9d:14:91:4c:10:7e:45:ec:b2:d8:f5:db:21:15:22:
8a:08:96:53:bc:aa:08:dd:1b:aa:e2:07:46:06:1d:f9:a4:9c:
82:96:19:2c:42:bd:f3:33:94:89:1b:84:1d:fb:11:0c:06:29:
85:bf:b1:d8:45:ce:de:f8:9a:5f:c2:b1:30:89:81:fa:65:99:
d2:d1:38:02:88:01:98:86:7b:fe:d2:1e:27:4f:49:bf:ce:93:
49:f6:f9:df:8a:0f:9b:12:3a:cd:6a:98:d9:af:13:56:2e:64:
99:a0:40:6c:fb:68:5d:52:1d:df:96:79:30:90:0c:12:e0:8a:
0e:09:b3:32:b4:d1:b8:27:1b:43:96:9b:44:5b:e1:6a:ba:4a:
de:c5:d1:8a:28:ce:d9:ed:63:d7:a1:9f:fc:8c:bf:22:7a:c3:
52:0a:e4:4f:5f:5c:41:30:ba:80:ca:5a:cf:78:29:09:e9:69:
f8:61:ab:a6:5c:00:40:5c:18:c0:cc:64:ac:04:5c:b8:64:fc:
eb:85:e5:cb:0f:5b:5b:8a:37:7b:65:1d:8b:0f:c8:54:5a:06:
ff:f9:b2:e7:43:8e:71:7a:73:c5:6d:bd:00:d3:12:58:f6:86:
10:46:d5:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/lZz6JDnMSYntrn7MA8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2I1N2Q3ZTFlNzY3YjUzZWZkZTRlNmNhMzVlNmVhZDYz
ZWEwZjIwHhcNMjYwNTEyMjEwMTA3WhcNMjYwNTEzMjEwMTA3WjAzMTEwLwYDVQQD
Eyg0MThiNGFkYjY0MzRlYWI1OTcxZjNlNmNiN2UxOWQ0YzQwMWJiOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH23+NCRhFvxKsGUd3Ioj2H1+pCg
mO1XYMI3FgtA+IEnk9FA3K5fdvG1QYcAoc32nYeVuPLEfnPNlPaGBSNGCzSqZ80y
q6LE2+AtsOl8qx96BokoO2Y7+YpXn+ygd8cFOmiyjmN15Aq7QMe75nxDg8mOKuY8
g/tlB6AxFfvVMrYqkC4f3cKoeibw+NM33SX+gvQgwQajwYNEuHi5FjfQjYjs0xOY
+yIZK0GcLD+R9kPECq34u5YwALL+vmS1zYX0IEQ7h9SRKxezznNIGqvhpThm0KBy
oRY8GxFaIUCP5M7bHyM8q8nyhLpBGYVYzXU3NlDU8kx63DIN+zxvrs9auQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGLSttkNOq1lx8+bLfhnUxAG7nbMB8GA1UdIwQY
MBaAFJHLV9fh52e1Pv3k5so15urWPqDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMt
ZTk2MThjM2I1YTk1LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMtZTk2MThjM2I1YTk1
LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtZ9RkJ4
IFrFmexaZNDI4HPV4DE7nRSRTBB+Reyy2PXbIRUiigiWU7yqCN0bquIHRgYd+aSc
gpYZLEK98zOUiRuEHfsRDAYphb+x2EXO3viaX8KxMImB+mWZ0tE4AogBmIZ7/tIe
J09Jv86TSfb534oPmxI6zWqY2a8TVi5kmaBAbPtoXVId35Z5MJAMEuCKDgmzMrTR
uCcbQ5abRFvharpK3sXRiijO2e1j16Gf/Iy/InrDUgrkT19cQTC6gMpaz3gpCelp
+GGrplwAQFwYwMxkrARcuGT864Xlyw9bW4o3e2Udiw/IVFoG//my50OOcXpzxW29
ANMSWPaGEEbV8w==
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:30 2026 by rpki-client