Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: eXRRhaorL/VxTojJfzjQxxZ21dOn05DhC3ZQCq4bAqI=
Subject key identifier: DA:55:DB:12:C0:6E:B0:18:31:75:E0:13:F4:6C:0D:F9:96:EB:97:53
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019E1FB56385BAA0CEB0FC1D3225F45C25D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 09EC
Signing time: Wed 13 May 2026 05:00:41 +0000
Manifest this update: Wed 13 May 2026 05:00:41 +0000
Manifest next update: Thu 14 May 2026 05:00:41 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: JGmgd/GV2TT5t5KUBR02cM0ZxbZIKvGBHCmQZhVyFyQ=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:63:85:ba:a0:ce:b0:fc:1d:32:25:f4:5c:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: May 13 05:00:41 2026 GMT
Not After : May 14 05:00:41 2026 GMT
Subject: CN=da55db12c06eb0183175e013f46c0df996eb9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:7c:47:de:0f:d6:63:55:c9:9c:f9:65:d6:
1c:61:3a:13:84:9f:06:c8:a2:12:ca:e3:0e:90:79:
26:0d:02:b7:72:8d:a3:ea:65:8d:02:b4:c7:9a:ff:
b8:dc:7b:ce:0f:e1:33:dc:ca:45:ee:1a:cb:1d:6c:
f9:0e:53:eb:3e:48:49:69:cb:84:cb:c0:45:c5:90:
51:b2:a8:a9:d4:26:12:ef:11:fc:c2:19:7c:66:d7:
ec:b1:0c:8c:4d:28:40:05:de:69:ac:0b:09:4c:c8:
63:35:1c:5b:c5:c8:fc:2c:9b:9d:3b:d3:a1:1a:99:
34:b6:2b:8b:92:6b:4e:fa:f6:bb:79:65:9a:b7:83:
ae:c8:77:3b:56:55:c2:fa:30:bb:a8:e0:61:20:60:
d8:ba:5d:c2:58:a5:f8:c8:1d:ed:40:9a:e8:e5:51:
2f:bf:f9:83:9f:47:a9:bf:3b:28:58:e9:d9:79:c4:
d2:78:17:af:14:00:b7:66:72:b7:f7:89:5b:1e:73:
41:3e:f7:88:22:59:b5:5d:21:e9:32:7a:b2:73:72:
87:53:b3:5a:cf:4a:4d:d2:c1:69:8e:3b:c1:e4:b3:
db:da:0f:a4:d7:1e:68:8b:5a:5a:21:f9:f5:c6:72:
ea:59:a2:80:36:3a:7c:0b:24:2c:6b:db:0b:d2:72:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:DB:12:C0:6E:B0:18:31:75:E0:13:F4:6C:0D:F9:96:EB:97:53
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7d:fc:7d:7e:30:a3:6a:ad:d1:bf:78:d7:56:03:ea:bd:8b:
11:ee:c1:6a:80:f7:7a:fa:53:c3:69:2e:10:9a:dc:65:2b:6b:
1c:1c:10:ff:80:ee:e4:ce:9c:80:7e:ee:41:2c:5e:6b:db:ab:
2b:49:5e:1f:65:e6:3c:f6:13:0e:69:e1:46:17:b2:9f:32:d5:
a7:db:88:42:92:26:a1:94:64:ac:fb:3f:f1:2c:93:27:38:84:
84:45:db:72:6d:8e:b9:30:da:ef:30:61:87:c1:a3:64:61:fd:
b6:45:8d:2d:cd:ea:e3:ff:27:97:7e:89:26:6a:d1:72:8d:9c:
0e:8f:ea:40:96:4f:fa:46:3a:d9:ee:7e:21:6d:a9:b1:fe:d1:
fb:44:13:18:6c:22:15:16:a4:a9:80:92:96:b0:04:72:43:cd:
52:9b:88:80:e6:21:26:b7:aa:28:92:84:b0:9f:69:34:53:4c:
f8:dd:48:6d:4f:bd:cf:2d:ca:bf:58:0f:fe:af:79:96:1a:3a:
d8:de:38:d4:3a:47:1c:ac:06:65:3c:a1:60:ad:6f:d8:cc:b8:
97:5a:71:c9:65:c2:6b:8a:95:c8:3e:e5:cc:aa:d4:37:55:2d:
99:11:77:86:f3:b8:ce:56:c3:f2:9a:51:37:07:73:ba:a9:1e:
e9:9f:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:14 2026 by rpki-client