Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json)
Hash identifier: TGmmwsHLW0/khvlVBlrAhrh8OYe26H93qzH/KDtgl4s=
Subject key identifier: 26:91:72:B8:2D:BD:81:EE:6D:FC:B4:81:1E:4A:CB:4F:AB:96:63:36
Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Certificate serial: 019E1D59445C9022AC53A73CFDC0077A6B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
Manifest number: 020C
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=)
2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: HsmdVzcvnLL+rCtfbPxmTO0+05V4Q+zGy+Shjd+HbGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:44:5c:90:22:ac:53:a7:3c:fd:c0:07:7a:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=269172b82dbd81ee6dfcb4811e4acb4fab966336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:c5:05:12:ad:0c:99:94:5f:88:f9:78:63:
06:54:47:d5:5d:1e:e9:0c:e2:45:7b:8b:53:5f:5f:
aa:02:ab:8e:c0:f0:ca:7b:d4:16:61:29:5e:ec:e2:
60:18:92:63:a6:26:70:ad:65:5e:7c:e9:86:ab:cf:
dd:76:96:43:75:2d:59:95:11:55:76:84:3c:6c:c5:
f5:79:bc:71:2a:1e:58:a2:64:ab:a8:fe:f6:8a:01:
fd:85:df:2b:e0:6f:b1:cc:3b:2f:e9:04:cb:3d:a9:
d4:c7:46:99:2a:53:36:af:a2:4d:cf:1b:f0:4c:0d:
b7:64:23:77:0e:6a:8b:18:65:24:4a:3b:11:ad:96:
bf:56:0b:e1:82:3c:04:af:3a:db:c1:0c:c8:0a:3a:
07:6d:f2:15:f1:66:a5:a5:49:3f:7f:38:d7:76:1c:
b2:7e:d3:02:ad:75:e5:49:01:6b:d8:3d:49:b1:be:
30:78:c8:cf:70:7c:b6:e1:31:0f:8d:96:1b:31:75:
1c:eb:0f:35:98:eb:93:a0:7c:5c:3e:03:51:9e:ca:
38:34:5b:21:24:a0:c3:34:ee:94:3d:f8:f5:ad:5e:
51:77:50:92:75:a0:ec:1e:5c:3a:e9:94:cf:2c:00:
e8:f6:16:96:cd:2e:6e:e6:62:ab:56:db:d6:d1:91:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:72:B8:2D:BD:81:EE:6D:FC:B4:81:1E:4A:CB:4F:AB:96:63:36
X509v3 Authority Key Identifier:
keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:35:6c:4f:8a:19:77:c5:7d:ba:5a:97:68:a0:bd:11:77:c0:
57:92:7a:d9:4e:17:88:57:4b:8d:8e:6d:30:10:85:6e:a5:4b:
8e:b2:f4:ac:9e:44:c5:c3:f4:54:c6:35:22:17:90:f0:d5:25:
73:0f:fa:d8:2d:78:b6:fd:f9:22:dd:c8:15:19:2f:af:ec:18:
c3:b1:27:77:45:31:49:ef:e6:10:17:ca:2d:b7:3b:f0:01:86:
be:e1:c8:eb:da:ef:91:92:68:29:6d:8a:4f:bb:1a:24:96:ba:
2a:af:b5:69:d3:e1:2e:b3:61:b1:41:ec:6b:4c:70:21:5a:19:
a3:03:7c:01:cf:5e:52:13:48:d0:a3:5b:8f:cc:8a:f8:06:eb:
ea:88:28:34:10:8f:c0:bb:35:a2:31:7b:da:de:dd:62:df:6a:
13:b2:41:92:f6:b8:3b:a3:64:c2:92:d1:9a:7e:ee:f4:fc:a7:
88:d8:7a:0d:26:23:52:2f:49:ac:8c:2e:66:81:5d:91:57:a8:
46:94:00:a1:5b:77:b6:97:dc:79:b3:6c:19:78:9c:39:b7:8b:
51:e6:82:f7:71:db:6e:61:fd:98:63:e5:77:da:ef:ca:23:4e:
d6:9f:92:8d:be:f3:48:38:ed:73:2d:5c:2a:9a:58:fa:45:51:
4a:1d:83:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWURckCKsU6c8/cAHemtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGVkMjY1N2IwMzQ0OGRhMjhiYzI0OGMyZjdlYzQ5NzNk
YTZlM2IwHhcNMjYwNTEyMTgwMDQ5WhcNMjYwNTEzMTgwMDQ5WjAzMTEwLwYDVQQD
EygyNjkxNzJiODJkYmQ4MWVlNmRmY2I0ODExZTRhY2I0ZmFiOTY2MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwovFBRKtDJmUX4j5eGMGVEfVXR7p
DOJFe4tTX1+qAquOwPDKe9QWYSle7OJgGJJjpiZwrWVefOmGq8/ddpZDdS1ZlRFV
doQ8bMX1ebxxKh5YomSrqP72igH9hd8r4G+xzDsv6QTLPanUx0aZKlM2r6JNzxvw
TA23ZCN3DmqLGGUkSjsRrZa/VgvhgjwErzrbwQzICjoHbfIV8WalpUk/fzjXdhyy
ftMCrXXlSQFr2D1Jsb4weMjPcHy24TEPjZYbMXUc6w81mOuToHxcPgNRnso4NFsh
JKDDNO6UPfj1rV5Rd1CSdaDsHlw66ZTPLADo9haWzS5u5mKrVtvW0ZFRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaRcrgtvYHubfy0gR5Ky0+rlmM2MB8GA1UdIwQY
MBaAFJCO0mV7A0SNoovCSML37Elz2m47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt
NmExN2UyMWNhNmM3LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3
LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDVsT4oZ
d8V9ulqXaKC9EXfAV5J62U4XiFdLjY5tMBCFbqVLjrL0rJ5ExcP0VMY1IheQ8NUl
cw/62C14tv35It3IFRkvr+wYw7End0UxSe/mEBfKLbc78AGGvuHI69rvkZJoKW2K
T7saJJa6Kq+1adPhLrNhsUHsa0xwIVoZowN8Ac9eUhNI0KNbj8yK+Abr6ogoNBCP
wLs1ojF72t7dYt9qE7JBkva4O6NkwpLRmn7u9PyniNh6DSYjUi9JrIwuZoFdkVeo
RpQAoVt3tpfcebNsGXicObeLUeaC93HbbmH9mGPld9rvyiNO1p+Sjb7zSDjtcy1c
KppY+kVRSh2Ddg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:36 2026 by rpki-client