Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: jQ7upkIO0UWVJkv4eA0mXRD5dxSZN0uXKvZhdGuk2ww=
Subject key identifier: 85:88:CE:D0:ED:9D:69:40:1E:C9:58:68:A0:CE:5A:D7:46:51:E5:FF
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019E1FB6123132BB8A317D60CF226B0B153C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 1158
Signing time: Wed 13 May 2026 05:01:26 +0000
Manifest this update: Wed 13 May 2026 05:01:26 +0000
Manifest next update: Thu 14 May 2026 05:01:26 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: mCOYLTdGkY4WKuDKW5ztDKmZeEFpbqzjeJ5+5vAnh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:12:31:32:bb:8a:31:7d:60:cf:22:6b:0b:15:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: May 13 05:01:26 2026 GMT
Not After : May 14 05:01:26 2026 GMT
Subject: CN=8588ced0ed9d69401ec95868a0ce5ad74651e5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:58:e0:94:a6:56:95:e9:68:ad:bb:2b:8e:
e5:6d:32:31:85:13:83:34:94:89:8e:5b:88:35:b2:
bd:ff:3d:29:27:af:43:90:a1:35:5d:f5:6f:4c:52:
ec:eb:6b:ad:4a:95:d8:76:76:33:d2:38:c2:82:10:
bf:e0:64:1e:05:64:dd:1a:2f:5c:7b:2c:58:e6:d9:
ad:29:31:d8:34:88:70:7a:eb:02:54:a6:ae:1b:e0:
67:ed:fc:32:c6:b1:d0:9b:ea:a7:0f:19:2b:13:fd:
96:df:35:59:30:79:0e:cd:43:84:08:0b:cf:3a:cc:
e9:52:6f:c1:a2:24:07:33:1d:f7:df:d8:94:fe:14:
c8:60:c5:38:b3:6d:9d:f0:d0:cf:b3:a6:b8:82:2f:
57:a8:a8:5e:e6:1c:21:48:b8:25:bf:6f:ca:91:48:
42:72:9a:8d:77:90:42:be:67:6e:89:ac:78:6c:59:
3a:6d:49:b3:8f:4c:49:16:a6:ae:93:8f:32:44:3a:
30:1d:e2:c3:64:0e:cd:a3:c1:b3:a7:7b:2f:c0:64:
6c:d1:b7:f8:92:51:6f:56:ee:53:3b:65:fd:db:43:
df:37:60:02:94:62:b7:24:3b:64:84:4a:c2:32:71:
2e:c5:99:ba:7c:50:db:ae:b5:30:39:98:5b:34:07:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:CE:D0:ED:9D:69:40:1E:C9:58:68:A0:CE:5A:D7:46:51:E5:FF
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cc:83:5e:d6:05:e6:6e:b5:f2:82:db:72:d7:ed:0c:c6:8e:
74:59:08:3d:68:e7:5f:1c:3b:48:9e:40:9b:03:68:e0:63:4e:
fd:99:7d:af:d4:f3:cb:df:6f:18:bc:84:a0:e3:0e:fe:8c:35:
a1:ba:36:27:61:90:c9:ae:6a:2e:21:01:71:29:71:7d:e2:43:
a1:45:ac:67:d4:70:6b:91:bf:12:98:ba:34:09:f8:c3:ab:e3:
7f:39:4f:8a:bf:ec:43:81:72:cf:13:67:95:5e:6c:ec:fa:31:
dc:90:09:72:cf:ff:9a:68:8c:ec:66:ab:6f:49:7e:e5:40:87:
8f:b1:78:ab:5c:2e:09:1a:dc:f7:f0:ae:8e:1d:0f:0d:ff:01:
ea:77:6c:fc:e6:32:ac:1d:25:f0:51:d1:62:2f:66:38:a7:fa:
4f:e0:bf:06:2a:52:8e:ea:1a:39:3a:92:49:c3:be:73:93:44:
c2:00:37:23:fc:50:0f:64:7d:e7:a4:53:4e:bf:f2:f1:fa:62:
c7:ab:61:07:83:0d:e6:e9:ec:08:00:0b:cb:af:5c:95:8c:6f:
38:e9:35:b1:76:39:38:c8:85:27:ab:64:0b:52:78:43:1a:05:
79:e8:18:a6:83:22:6b:d4:5b:30:48:73:9a:26:f8:d7:e4:66:
4f:ef:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:06 2026 by rpki-client