Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: yVnAXMNln1I5QSTk9p943v0hlPvFlhEn5MFhG/je4uw=
Subject key identifier: 31:FC:91:39:2B:18:BF:BE:67:79:E4:B7:0A:E1:E6:47:C5:FE:DA:44
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019E1E3523F17E09521A2229B5BA22489D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 22:00:59 +0000
Manifest this update: Tue 12 May 2026 22:00:59 +0000
Manifest next update: Wed 13 May 2026 22:00:59 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: vfBP3aaus2zD0Z8VOAKUyzP0dUuxxtwKCQXqYIVNpIU=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:23:f1:7e:09:52:1a:22:29:b5:ba:22:48:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: May 12 22:00:59 2026 GMT
Not After : May 13 22:00:59 2026 GMT
Subject: CN=31fc91392b18bfbe6779e4b70ae1e647c5feda44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:fe:1c:fe:00:74:93:4f:81:f5:e4:87:03:
2d:84:2e:ca:dc:74:49:83:d3:db:c8:9c:70:15:eb:
35:26:45:68:af:b9:c7:8d:76:58:0b:91:0e:78:a1:
4e:91:1b:87:0b:5a:1f:e6:14:e8:bc:7d:61:08:c7:
42:24:c2:af:1a:3c:84:d1:43:15:5e:c3:28:40:c0:
41:93:da:6c:46:21:e7:d4:fb:25:43:d9:ca:d2:f7:
82:c7:77:31:da:62:3d:6e:74:0d:2d:12:59:30:b2:
83:b0:4b:e3:f2:8f:f9:8e:69:31:56:32:8c:d3:54:
a7:90:c3:c7:78:33:f6:70:0a:6a:5e:47:7a:39:f9:
d0:99:dd:86:db:b6:b1:2b:89:02:91:29:3d:d2:71:
2e:02:e3:b0:5d:d7:3c:27:c5:5b:21:f4:af:31:f8:
b3:d4:31:8a:72:d0:2d:07:66:c6:43:0d:31:7c:14:
25:ce:f0:44:cc:0c:cd:41:80:f6:fe:1f:a0:a5:1c:
50:fd:b2:f0:8b:17:ca:7f:84:2b:d3:f8:63:de:f1:
6a:c0:da:8c:2c:47:e0:db:fa:0a:97:5e:db:70:63:
ed:8e:5c:c1:eb:bf:eb:39:0a:a5:5c:6e:4f:59:c5:
ec:7f:f8:af:9c:b1:40:be:ce:63:b7:4f:4c:f2:d7:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FC:91:39:2B:18:BF:BE:67:79:E4:B7:0A:E1:E6:47:C5:FE:DA:44
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c7:79:ac:8f:c0:68:f5:ae:07:61:cd:f6:38:b1:77:39:51:
bf:70:cf:1e:e6:41:d2:a1:11:c7:09:c2:a4:16:a7:d1:6a:80:
25:8c:cb:53:f1:06:c8:a1:9b:ad:4a:71:1d:95:b7:27:39:1f:
ec:20:dd:0c:93:a2:1d:eb:29:0b:3e:fb:db:17:98:83:a0:b5:
40:a6:22:2e:99:b3:31:e0:a8:23:ae:e7:be:1e:cc:93:d0:e0:
55:ba:51:e8:19:97:7e:8a:5e:82:0d:08:d4:02:b2:a4:86:98:
6b:53:8e:fc:73:d2:93:ec:a6:58:9c:fd:9b:b8:a7:b5:7a:bd:
40:3a:83:14:68:0f:42:e1:53:bf:70:bf:cf:3f:d7:7a:14:3a:
bd:9b:fe:6e:3f:9d:c4:c9:86:d4:50:bc:45:33:1e:cc:22:16:
73:a7:7b:c0:62:53:ad:b7:d1:aa:5f:80:b5:4f:99:c6:9a:e4:
ce:93:a6:90:ec:7a:d4:11:cc:e1:7e:e1:49:2b:36:80:b5:5f:
74:08:a2:7c:a6:db:a3:df:61:7f:c5:47:59:c7:46:0b:4f:03:
ca:a3:83:52:f9:cc:a3:f9:49:2f:22:c8:76:38:6f:6b:7b:d0:
34:37:90:00:0b:ef:9a:39:69:2b:40:93:15:03:88:2b:59:a5:
69:c5:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:54 2026 by rpki-client