Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: tGCNE5bHp81kq6iLFDIZpGWf40QW4Z2hAVnSzwrWxB0=
Subject key identifier: E8:5B:A7:94:B2:65:B4:79:8B:6D:AC:F5:F2:0D:8F:53:A8:E1:0D:B0
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019E1DFE781AB2077418E89384D832DA1611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 18CE
Signing time: Tue 12 May 2026 21:01:16 +0000
Manifest this update: Tue 12 May 2026 21:01:16 +0000
Manifest next update: Wed 13 May 2026 21:01:16 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: T3roOwDi+9LiHJNArd2cXobuLt1vywaB0k25F+K7fYg=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:78:1a:b2:07:74:18:e8:93:84:d8:32:da:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: May 12 21:01:16 2026 GMT
Not After : May 13 21:01:16 2026 GMT
Subject: CN=e85ba794b265b4798b6dacf5f20d8f53a8e10db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:b8:72:bd:de:a5:a3:76:b2:d0:49:5d:65:
6a:bc:09:2a:a3:71:db:92:cf:fe:40:f2:7e:a2:93:
d8:eb:f1:61:1f:b1:14:d8:dd:4e:e1:ec:87:ce:d2:
fb:f7:77:be:02:29:7d:a1:68:9c:0f:a5:1a:5c:20:
f6:81:cc:35:d0:d5:c4:5d:df:dc:7a:4b:df:a0:22:
41:87:9c:ba:c9:ae:a6:f6:50:0f:47:fe:cf:e4:4e:
d7:79:e5:a6:f4:24:bd:cf:f0:f3:b7:da:06:36:bb:
fc:92:25:39:c4:1f:43:8f:90:27:ba:f3:f1:fb:fa:
ad:47:4b:48:bf:5f:ca:56:5e:dd:36:0f:06:b6:76:
1c:e7:d1:13:46:cd:e0:97:2e:fb:48:0b:80:58:bd:
04:24:11:6f:cf:3f:a5:8b:47:d9:52:92:e4:0f:58:
c9:ac:50:18:4e:fd:ca:bb:a6:7b:aa:7f:dd:76:e8:
01:cf:86:5f:2b:b0:38:1c:3a:f1:8f:e0:9e:24:e1:
30:79:6d:fc:75:7b:41:de:48:d7:74:a9:dd:29:8f:
f8:57:df:39:cc:60:d0:1c:b8:97:89:e9:f5:9a:cf:
fc:2f:e6:32:c8:20:52:17:e4:63:b8:a1:8c:ab:f2:
ad:52:21:27:8b:e5:76:93:14:10:71:f9:0e:fa:5c:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:A7:94:B2:65:B4:79:8B:6D:AC:F5:F2:0D:8F:53:A8:E1:0D:B0
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cb:9f:d4:82:f3:18:29:e7:62:ce:b1:10:46:49:78:48:f6:
38:7c:42:42:e5:7b:90:fe:d5:6c:c5:c5:bc:2f:a4:cb:02:4c:
38:57:47:87:89:36:b6:21:87:d4:3a:f9:35:f7:b8:09:c5:f0:
ce:fb:20:f0:ac:fc:34:b0:53:fd:12:8a:c5:4b:be:43:96:ef:
69:38:26:89:c6:64:81:16:27:9b:5b:a4:bf:cf:4e:06:e5:85:
b4:ab:1d:14:c1:7a:97:1a:19:ba:9f:f2:4d:52:9c:18:99:3a:
c7:89:70:03:e8:c4:29:2e:b3:2b:86:14:83:ee:19:08:00:00:
e1:33:3a:15:9c:54:63:f1:3a:8c:73:85:22:eb:88:7f:ef:88:
d6:d9:12:dc:4e:3e:0a:b9:8a:8e:2a:5f:45:81:16:c8:ae:b6:
40:ae:78:6d:70:ae:66:5a:e8:12:2a:a1:4a:9e:3d:5f:ed:52:
ed:fa:58:97:48:06:be:90:9c:b9:ec:83:2d:60:64:01:47:36:
d2:28:b0:88:02:44:a1:58:b6:fa:e1:1c:aa:35:a0:1a:58:64:
f0:ae:cf:7c:ad:9a:67:f0:07:9f:63:03:f4:25:2b:fd:dc:e6:
04:bb:1f:43:69:0c:e1:6b:45:cf:9e:d5:7c:ee:fe:35:4a:4f:
0c:22:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:17 2026 by rpki-client