Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: qKC4zsib/V2+rHEioGe5/ivICUbSG7gXE+wFkQrKjHU=
Subject key identifier: 66:BE:88:FF:44:79:9D:F9:1F:7A:8B:A2:84:9B:70:4C:3B:30:6F:DB
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019E1F477CCC8096D08158CEEC125896F4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 03:00:39 +0000
Manifest this update: Wed 13 May 2026 03:00:39 +0000
Manifest next update: Thu 14 May 2026 03:00:39 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: p+cSfi1MsJOlgdu3DKy4mjCsKKzdfT74ffE2Lq9ewwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:7c:cc:80:96:d0:81:58:ce:ec:12:58:96:f4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: May 13 03:00:39 2026 GMT
Not After : May 14 03:00:39 2026 GMT
Subject: CN=66be88ff44799df91f7a8ba2849b704c3b306fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:56:11:67:47:00:17:6f:f2:1c:4f:63:c8:
36:d4:a6:74:89:e3:45:eb:66:47:18:ca:1f:2e:47:
67:c4:48:d3:20:86:30:08:4a:34:a2:b5:d9:8f:40:
9d:ab:e0:a2:16:fe:65:2a:21:5b:c7:d3:91:e2:d9:
85:9d:7c:34:ac:08:da:f0:af:89:15:3f:99:5b:b1:
6c:03:e7:f6:8f:e5:85:39:e9:94:86:76:be:9a:fe:
d3:89:a7:cf:8c:65:53:14:41:5b:78:78:80:46:13:
19:41:c8:c8:1e:f5:a0:27:28:06:ca:b1:5f:4e:69:
97:be:03:ee:be:7c:f2:3c:e4:60:74:14:c8:76:98:
84:1c:8d:78:ca:e4:6c:fe:1e:e9:e8:31:0b:b2:54:
9c:f0:d2:51:9f:98:30:e2:3e:fc:a0:3a:ae:f2:47:
46:2b:13:96:bb:6b:d7:e7:c2:97:bd:79:13:ae:26:
74:74:81:ce:ee:be:bb:7b:4c:b7:94:e3:49:83:2f:
a0:c0:dc:15:75:0d:5b:0a:21:32:39:fc:b3:a3:11:
ed:03:43:0b:15:15:90:d8:fb:f9:7f:16:85:e2:4d:
c0:38:f2:a3:ba:f5:46:d1:86:e0:44:93:a0:d3:02:
64:88:4b:98:b3:f7:70:4b:00:1f:f3:45:de:0f:db:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:88:FF:44:79:9D:F9:1F:7A:8B:A2:84:9B:70:4C:3B:30:6F:DB
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8c:67:1a:ce:d0:4b:2f:8e:17:3a:73:85:66:e4:5c:67:3f:
0a:6b:84:25:1c:43:8a:7e:db:93:f5:d7:6e:03:8f:4a:0b:e1:
2d:c5:e0:8c:e2:cd:8e:02:28:8c:94:df:db:cf:a5:c8:3f:9d:
fc:32:67:b8:84:b8:57:32:13:7b:e4:63:21:4e:70:dd:72:68:
bd:c6:ac:cf:31:73:d1:e2:07:7d:d0:90:99:2c:7c:61:fb:8b:
58:3f:22:49:90:54:2f:77:fa:1a:5b:9f:6d:bc:a1:f8:a2:8b:
d3:5b:1a:b8:bc:28:ef:83:a4:56:bd:f2:0e:af:38:82:33:33:
f8:00:f6:d7:09:e8:62:ed:09:38:ae:07:41:4a:cb:22:80:c9:
be:18:32:33:5a:e2:78:1b:93:7b:19:97:53:a7:31:ba:c2:3b:
90:12:f2:52:53:a8:25:3b:f8:ca:df:f4:40:29:95:d6:90:b9:
e0:54:bb:14:97:27:21:b1:3c:9c:02:c1:2b:ae:02:d6:bc:b1:
d6:e7:3b:a2:96:da:22:82:23:35:0e:48:4c:9f:57:e7:b6:df:
c4:12:13:6a:b8:6d:1c:61:68:bf:19:76:6d:cf:5d:a5:de:3d:
a1:b5:51:9d:88:dd:e4:a3:3a:ff:ba:0a:81:52:5e:e8:28:f0:
9d:38:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:37 2026 by rpki-client