Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: 0AgKY852stY2fz7Eo47kNfMAIXvYOPAUaTV9/vHjvE0=
Subject key identifier: A4:4C:58:09:43:59:31:5F:28:80:D7:A2:21:31:26:58:45:39:A9:EA
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019E1FB58E5E82E33C480EEA9B3DC2BB9A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 05:00:52 +0000
Manifest this update: Wed 13 May 2026 05:00:52 +0000
Manifest next update: Thu 14 May 2026 05:00:52 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: g7XYrSZzPwiOEdsmF1KBnVvlvp5wBRG746QZPoSYeIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:8e:5e:82:e3:3c:48:0e:ea:9b:3d:c2:bb:9a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: May 13 05:00:52 2026 GMT
Not After : May 14 05:00:52 2026 GMT
Subject: CN=a44c58094359315f2880d7a2213126584539a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:88:c4:16:87:40:24:f7:1b:9c:cf:2d:b8:
3c:a3:ab:c6:f1:9f:6b:29:4e:ee:ad:bc:f6:8e:87:
42:e8:fb:fe:ff:c1:37:7a:fc:c6:95:c3:9a:2d:ba:
c1:25:d9:68:70:28:27:4f:ba:dc:44:41:95:f9:2c:
6a:77:60:ff:39:15:79:5a:3f:84:e7:68:c5:c2:da:
b0:35:c0:79:0d:58:44:0e:76:3a:f2:5a:78:56:ac:
c0:fa:88:12:d3:f3:a7:a0:8b:2c:99:98:2d:11:32:
ca:6a:04:93:46:6c:d2:1f:33:15:e5:c6:52:63:93:
10:1a:79:7f:13:0d:1d:43:48:76:0a:55:43:bf:cf:
78:04:38:d8:75:e7:5f:61:f8:b3:07:67:fd:f1:69:
da:93:e0:d8:7a:df:32:53:45:cf:01:00:95:9e:01:
fd:20:46:40:14:53:48:3b:1f:e5:c6:d7:62:31:3f:
a7:85:17:41:c5:71:27:f4:07:b0:4e:46:9c:b8:6e:
53:c2:1e:e1:f9:a0:51:e5:0c:61:92:4c:df:a8:32:
75:04:f6:a5:cf:96:87:e1:cc:b5:c4:1e:3a:aa:0a:
fe:78:c7:6d:1c:6d:0d:9b:7e:7d:9b:51:04:0e:f0:
4c:5c:af:11:05:09:3f:27:ab:be:08:37:7a:2e:e8:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:58:09:43:59:31:5F:28:80:D7:A2:21:31:26:58:45:39:A9:EA
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:79:bd:98:6e:7a:55:fd:fa:ee:24:4b:b9:34:24:03:8c:ee:
f2:59:f2:cd:13:c0:c3:a3:e9:19:03:37:97:a6:88:f4:33:2c:
a7:3a:18:51:19:e4:80:2b:cf:35:b6:27:f1:b7:a5:5e:78:73:
f3:ad:c0:71:ac:00:74:0e:a5:89:56:6a:0c:bb:5e:8d:ff:c6:
ae:83:1e:cd:9a:b2:af:65:6b:b5:9c:96:60:1b:fa:12:2e:9b:
7a:96:20:49:36:d8:95:03:d8:cb:dc:4e:e4:2d:9b:39:5f:b9:
f5:89:46:32:8a:1e:8e:ee:4c:90:08:f5:b2:00:f4:a6:ad:dc:
e2:11:e5:4c:21:93:d8:84:5b:bb:f0:5c:21:ad:0e:83:78:5b:
07:83:25:0c:fe:4c:4a:e0:26:be:45:2a:e5:82:cb:ef:5f:76:
c0:36:18:73:92:d2:4c:eb:b8:40:0e:d3:42:7b:30:1b:0b:9d:
9d:9c:d1:8b:67:0a:15:1a:00:49:2e:03:fd:c4:34:26:44:84:
62:b2:2a:01:0b:76:58:75:9c:e8:b1:b6:e3:27:e4:ca:f2:5e:
f9:88:f6:94:56:be:34:27:58:ee:8e:98:55:00:ec:61:d9:30:
8c:2c:a6:f5:a9:15:cf:91:79:5b:13:db:57:69:d5:5f:09:1e:
ae:c9:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:26 2026 by rpki-client