Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: Kj8o1uFJpbaoSrC/xgNvxg2lh9HUAGNzzGQwsOlhrKQ=
Subject key identifier: AB:59:79:0C:6C:C8:60:2E:8D:09:A6:7E:70:E4:8C:C6:CA:EF:BA:BB
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019E1D233329D085D7BF466964323FB05C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:01:46 +0000
Manifest this update: Tue 12 May 2026 17:01:46 +0000
Manifest next update: Wed 13 May 2026 17:01:46 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: ohCdDXLzPQV8b4JtOmhF+6vYV8vKfD2bwxXNc5AC2Lc=)
3: p0olYKK_67ffAzfvQRoSSz8TiKA.asa (hash: JDzRWVmjvJMNN1HKwXLWsrOkuN3FQ3v+/s9RaitfV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:33:29:d0:85:d7:bf:46:69:64:32:3f:b0:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: May 12 17:01:46 2026 GMT
Not After : May 13 17:01:46 2026 GMT
Subject: CN=ab59790c6cc8602e8d09a67e70e48cc6caefbabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:43:0f:f7:15:3d:21:f3:c6:5e:70:ce:ae:
cb:1a:c5:48:73:0b:a4:19:0b:1d:29:fb:d3:ec:70:
ef:c6:63:1a:0f:79:fb:0c:92:c8:22:02:3e:c9:fc:
c4:5d:ad:e6:2b:ce:1a:80:66:a5:19:7c:e3:55:10:
32:bb:ec:40:f7:a8:d4:b1:56:b5:1c:34:66:fa:f1:
f6:4e:c5:74:96:bc:85:71:c0:8c:58:21:13:eb:ac:
d6:79:db:b3:b1:57:4b:1e:3b:af:65:18:0f:ce:2c:
43:02:d9:7e:a8:1c:42:a4:8d:d8:76:9d:6d:9c:01:
99:f3:1b:58:a5:91:84:b0:a6:a4:5b:60:9c:0f:0b:
98:10:d5:a4:e8:29:45:c0:a3:23:ba:19:ed:06:bf:
46:b7:65:4a:f7:f6:36:78:c8:6e:73:0e:12:e5:13:
d0:2f:0e:ef:f7:e8:0c:cf:0d:de:e0:25:2c:47:14:
1b:a6:58:c5:e0:84:cb:67:9d:dc:a3:2d:43:da:e4:
62:f7:10:90:79:51:6b:f1:87:97:92:db:67:8d:16:
98:77:78:16:98:11:77:18:9b:8d:3d:a3:8e:d8:3d:
7d:45:85:6b:a9:78:60:62:70:2e:1c:69:ea:b0:a0:
92:43:93:8d:f1:c5:fb:70:f1:8b:4e:3e:fd:31:60:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:79:0C:6C:C8:60:2E:8D:09:A6:7E:70:E4:8C:C6:CA:EF:BA:BB
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:f4:34:2b:ec:44:41:47:df:69:92:7e:08:ec:77:03:d5:
12:1a:42:62:d0:e2:ec:b7:12:22:4e:18:c7:1c:92:0f:db:94:
f1:7b:5a:f7:00:c1:84:e3:04:8d:a7:6c:f6:6c:75:d3:e0:f5:
2d:5f:20:e4:68:1a:e7:2c:1c:03:a6:08:41:fe:04:8f:92:6b:
28:08:10:e0:15:66:ab:27:44:0f:8b:89:80:e3:cb:83:bc:26:
92:cf:d4:f2:87:62:45:42:24:01:cd:4b:d3:5d:be:5c:f5:79:
02:34:78:9f:d7:39:17:cf:28:33:d5:0b:0b:36:79:64:3a:ab:
9d:2a:90:3b:73:63:8a:3b:f8:f4:57:33:ca:93:6a:b1:50:f9:
fc:a5:0c:28:78:ac:b4:f6:f5:4f:0c:e7:0f:70:36:5d:39:81:
23:2c:f6:bd:82:f2:a0:c8:3d:4f:77:73:1b:96:8a:f0:b4:8f:
d2:98:06:96:f0:3c:e8:e6:da:38:2b:eb:0e:72:3b:f2:b2:e5:
e7:fd:67:bd:b7:1e:8e:2f:ac:ac:83:a4:63:01:e5:30:85:3d:
9b:80:ab:13:7d:2b:0c:b1:54:ee:fb:02:60:5c:89:0d:50:b7:
53:25:36:01:6a:44:bc:70:15:18:b3:09:8e:77:84:ed:f2:e7:
4d:0f:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:54 2026 by rpki-client