Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
File: kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json)
Hash identifier: XEeRsSf2kbgiKCywKDL+NVS0l7q2qtrL3anx/SmQsJQ=
Subject key identifier: 84:B5:06:88:88:2E:32:A1:24:2E:7D:F8:40:C6:FB:D0:5A:E9:53:B6
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 019E20FF2FE2870F38B646E9FE4ECBF523CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
Manifest number: 0D9C
Signing time: Wed 13 May 2026 11:00:55 +0000
Manifest this update: Wed 13 May 2026 11:00:55 +0000
Manifest next update: Thu 14 May 2026 11:00:55 +0000
Files and hashes: 1: bChcbGdFNJLxkL6cWvlOuiphISs.roa (hash: +dNUc4mkY1Ks/wJrUAYjbgs9Kw+RWtpPfvShsAp4TVY=)
2: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: yKJ1Osrd4NqHU6TDOoRWK86LqjlnkaSrU+AolfupItc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:2f:e2:87:0f:38:b6:46:e9:fe:4e:cb:f5:23:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: May 13 11:00:55 2026 GMT
Not After : May 14 11:00:55 2026 GMT
Subject: CN=84b50688882e32a1242e7df840c6fbd05ae953b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:a4:57:ec:39:75:a7:3b:e6:a0:6d:24:25:
68:95:92:44:ad:cb:67:bc:a6:37:31:fc:81:0d:d7:
73:be:18:c7:8d:56:5f:e5:f0:3a:b6:fb:c1:bf:bb:
c7:bc:b1:d1:70:1b:6d:4f:3b:85:6c:94:f6:02:71:
bc:34:5a:69:2b:7f:48:f9:91:14:98:fa:7d:ac:52:
c1:6e:ea:df:b3:77:0a:1f:09:ca:67:f1:5b:dd:3b:
a5:e6:6e:6f:cf:7f:08:4c:b0:ac:ad:86:1e:16:af:
bc:92:2c:91:4f:0c:57:36:b5:2c:34:89:76:6d:1a:
cd:1d:7a:9e:cb:3e:75:3b:9e:02:bc:fa:9f:e3:a3:
92:ef:6e:eb:2a:0e:b2:c1:bb:de:d8:99:3c:60:e8:
d5:84:13:39:38:5c:4a:14:fc:65:7b:f3:75:bd:08:
53:1f:c1:66:cb:ce:c0:59:a2:8c:66:a2:b6:c2:1a:
8a:f3:6b:32:51:03:60:9b:f0:67:0e:39:76:e3:6e:
80:73:e1:06:45:0d:66:f8:f3:2b:40:32:29:2a:e0:
4c:c0:6c:ab:e8:3e:85:91:5a:5a:b5:b2:38:fb:f3:
17:cd:dc:84:ec:41:94:af:1a:42:fe:65:2c:9a:5b:
bf:96:15:61:7d:3e:ca:37:98:fa:ad:ea:8f:68:85:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B5:06:88:88:2E:32:A1:24:2E:7D:F8:40:C6:FB:D0:5A:E9:53:B6
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:6c:01:91:df:75:bc:29:99:0f:05:9f:84:df:e3:cd:5e:
5f:0b:e6:9d:32:c9:d0:f7:cf:2c:b2:63:9e:22:96:5d:cf:5c:
43:55:b2:74:e9:c8:cc:2a:aa:75:c2:a8:b2:08:38:03:14:db:
6f:c1:9d:93:a8:71:08:f4:11:42:53:3c:83:1c:26:1c:b6:28:
00:ba:1b:3c:99:df:1f:3a:a1:48:b4:45:e4:69:03:69:eb:9e:
54:d6:94:37:d1:b3:ab:da:74:71:15:6a:b2:89:48:8d:e2:40:
cc:c0:45:91:44:06:87:75:f9:20:72:d5:b6:55:fa:08:94:b7:
b4:e4:9b:32:5b:03:57:c8:63:d2:91:f8:58:c4:8b:be:ea:aa:
bd:12:ef:ad:cd:e5:1e:91:cc:fc:1d:65:d8:34:cc:fb:3d:aa:
51:f6:67:19:32:36:93:69:69:c8:9d:46:ca:5f:a1:b7:e3:0c:
b0:f7:91:34:5d:f4:1f:c2:5f:83:39:2a:61:f6:15:cc:0a:a3:
61:35:dd:63:b5:25:9f:24:67:fd:47:98:93:3d:73:d1:e4:ce:
99:8c:74:5c:89:60:e6:85:ba:22:aa:00:6c:aa:df:6f:cc:9c:
6e:4f:a8:85:56:78:71:73:7f:4a:58:2c:da:55:b3:f8:be:81:
3b:db:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:44 2026 by rpki-client