Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File: KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier: U4vcJj9foHBvK8/Til9jIgHloelAyYXwwSb3nyxghOM=
Subject key identifier: 47:35:ED:F2:66:ED:0B:3D:2C:EC:09:63:B0:65:20:22:75:C5:E2:2F
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 019E1D90116FCFE0792A447CDF45D4167695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number: 0E67
Signing time: Tue 12 May 2026 19:00:41 +0000
Manifest this update: Tue 12 May 2026 19:00:41 +0000
Manifest next update: Wed 13 May 2026 19:00:41 +0000
Files and hashes: 1: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (hash: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=)
2: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: hv/NnSJnIqdJ4ZoFdf5ot1fwQNBRokkYkE9jTXoR+LY=)
4: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
5: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
6: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
7: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:11:6f:cf:e0:79:2a:44:7c:df:45:d4:16:76:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: May 12 19:00:41 2026 GMT
Not After : May 13 19:00:41 2026 GMT
Subject: CN=4735edf266ed0b3d2cec0963b065202275c5e22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:1f:c3:67:99:7b:3d:6c:80:e2:68:92:da:
a8:9c:eb:55:09:dc:aa:6e:5a:cb:90:e4:d3:f0:ef:
e6:82:e1:5f:4a:d2:71:7f:06:95:86:7a:a9:26:7a:
7b:9f:c1:41:91:fb:bb:32:bd:b3:da:34:82:59:28:
96:80:8d:b4:25:7d:fe:95:66:b4:0b:14:e5:83:c6:
24:d2:37:4c:09:13:c6:a5:17:4e:1a:c9:52:35:8e:
a6:79:1e:ff:5d:4b:f5:d5:21:f4:52:96:d6:1a:e5:
1b:34:d1:2a:21:4a:86:e2:d4:06:4a:d0:36:7a:d9:
0e:5a:b0:ff:b4:76:07:ea:6e:fa:69:41:ff:42:94:
8f:37:40:ed:55:2d:c2:d9:f2:a9:67:40:59:60:97:
14:9a:50:d0:cd:9c:72:8e:9a:bb:1d:45:af:aa:08:
ec:30:01:31:4c:33:8e:e0:c2:34:db:b2:34:0d:51:
34:f5:ed:9e:28:21:3c:98:40:c0:4e:63:e2:57:e9:
30:af:b3:17:21:bd:93:42:6b:09:7a:f8:71:37:06:
9f:fc:18:2c:b2:7f:0d:90:65:9f:6c:f6:06:be:03:
0f:53:3d:55:fe:07:94:9c:09:52:5d:f6:91:25:c1:
06:d2:51:d4:00:c4:27:56:9b:7b:c8:e3:0b:fd:34:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:ED:F2:66:ED:0B:3D:2C:EC:09:63:B0:65:20:22:75:C5:E2:2F
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:ac:5c:ea:de:72:77:c6:84:29:b9:1c:7d:c1:99:35:90:
97:13:fc:5b:e2:65:3f:c7:d9:b7:aa:2a:4f:64:db:f7:38:98:
43:87:c4:89:83:f5:7c:8e:0f:5c:44:bc:46:a4:6e:2c:6e:c4:
63:c1:a6:ea:08:76:a9:55:ab:77:fd:93:2a:08:7b:cd:b5:29:
d3:c9:6e:63:97:a5:9d:32:03:bb:11:c8:cc:de:4a:18:04:c3:
86:1f:21:a1:84:82:e5:54:03:0c:48:80:a5:80:17:0a:d6:49:
c7:a4:b2:aa:59:65:dc:3c:e4:ea:79:1d:9e:96:34:ba:5a:b9:
30:2a:6e:ef:be:77:39:3a:53:b3:ad:f2:cd:c4:44:a2:ec:ab:
2f:30:fe:79:1f:53:f4:cc:d4:cf:fc:d1:48:40:8e:a7:ea:ed:
0a:9c:12:18:43:d6:aa:73:a3:cf:a3:60:02:0b:bb:a7:12:25:
2c:47:0a:0a:ff:5b:aa:42:a8:4c:5f:09:0e:d1:78:a6:f7:24:
0a:f7:2c:dc:f1:51:fa:94:ae:e6:b5:9e:0b:6d:79:93:18:24:
67:2a:fb:ba:a6:60:80:63:05:d0:8a:cb:80:83:81:d2:36:a6:
00:76:de:05:ae:e2:61:31:af:ef:36:5e:b2:38:e2:59:e0:8a:
9d:68:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:09 2026 by rpki-client