Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: mlNV3NkhItZEgPor4rRRbEm3ZCLp4iX3rScvsKzCfgw=
Subject key identifier: B7:5A:38:9B:E2:09:0E:91:64:CA:03:4E:19:06:4E:79:EB:1B:9A:3B
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019E20913A07BCC9C94AC7904754943BA98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 09:00:48 +0000
Manifest this update: Wed 13 May 2026 09:00:48 +0000
Manifest next update: Thu 14 May 2026 09:00:48 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: hqvefZKaRIAFpj8f5KhEakimijO8LQ/CmTJ8wDtfZHk=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:3a:07:bc:c9:c9:4a:c7:90:47:54:94:3b:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: May 13 09:00:48 2026 GMT
Not After : May 14 09:00:48 2026 GMT
Subject: CN=b75a389be2090e9164ca034e19064e79eb1b9a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:ff:66:4e:f8:5b:69:f9:c4:af:7e:8a:a0:
4c:e3:e0:14:a0:8d:6a:9f:86:77:9b:84:a7:4d:2d:
ac:54:ae:d1:be:09:80:dd:ea:66:8e:0f:81:46:6f:
bc:03:85:7d:da:26:57:0d:60:ba:45:ee:a1:30:6a:
03:ce:d7:27:4a:52:e6:a3:df:eb:e6:fa:80:50:27:
60:8c:7c:72:2b:2a:83:37:47:34:39:06:32:de:66:
f3:1b:25:45:57:85:cf:97:54:98:ab:58:fa:43:c1:
82:98:53:1b:23:6b:91:1d:c4:2e:26:6f:50:44:76:
6b:17:cd:9e:39:94:2b:a0:57:e0:8c:dd:6f:0c:c4:
a6:66:8a:53:3a:01:25:df:61:c6:dc:e3:8d:47:ee:
d7:0a:5d:a4:90:b4:97:2d:eb:08:08:49:1d:8e:58:
bd:dd:c2:59:68:7e:2c:e7:d0:08:3f:35:2a:9c:c9:
f9:0c:42:cc:b7:78:19:0f:20:f6:8b:4b:e4:f4:cf:
a6:a7:2b:6f:40:b7:38:31:3b:3a:e8:32:42:a4:d8:
65:2d:e8:0f:64:81:d3:79:9b:a2:e8:62:db:26:67:
59:57:df:0e:1f:8f:65:09:fa:23:20:fa:fe:46:92:
d6:a0:19:97:a7:ac:49:7d:77:7b:0b:f9:11:7d:f3:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:38:9B:E2:09:0E:91:64:CA:03:4E:19:06:4E:79:EB:1B:9A:3B
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b2:03:39:08:64:1b:ac:1b:01:ae:49:16:14:c4:03:3a:46:
e2:2c:b6:2c:a5:01:21:d0:4d:e4:e4:64:7a:83:65:ad:3f:57:
ce:91:b6:ca:e3:ad:e6:2c:10:29:3b:ce:80:99:41:99:d8:e4:
30:f1:63:38:2f:ba:45:1f:ac:47:65:d6:b9:f3:13:77:3b:4c:
69:5e:8b:c0:c2:f8:85:f4:86:32:d7:f2:50:69:a2:0e:de:59:
46:f5:bb:79:05:88:62:b4:0b:f2:61:b0:e6:8f:6c:06:a9:6f:
6c:69:ba:57:7a:79:45:ca:34:6d:b3:05:57:8e:72:46:c9:bf:
af:69:3e:19:e8:b5:e5:5c:4c:cc:9a:3a:dc:07:0b:37:7d:60:
6d:7d:43:24:bf:cc:00:c3:a2:cb:86:97:29:b0:3f:b3:ad:93:
32:1f:b4:6a:64:30:07:11:74:7e:dc:26:5f:c7:48:89:a9:52:
1c:7c:58:9c:ca:00:92:66:78:12:cf:b3:f6:b6:19:11:f1:f9:
e1:45:15:3e:97:ad:e1:5c:fb:03:e4:93:00:6f:8c:c1:6e:b1:
fa:a3:eb:49:9f:03:df:e0:7d:84:9b:43:07:6d:c8:fc:65:4c:
3e:5d:9b:3a:ed:a7:34:82:f1:43:c5:3a:b0:ef:e6:9f:8a:de:
c4:58:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:06 2026 by rpki-client