Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
File: KxlTcbTPcLiOdz4bgHyyORYyOFs.mft (raw, json)
Hash identifier: jwPFkB4J7HB29fbCQjwgyXN/43s8YP9W6EPmHBGDtIA=
Subject key identifier: F4:A2:2F:10:26:D4:3C:0F:7A:FD:6B:1C:0E:B4:DA:87:69:62:4D:1F
Authority key identifier: 2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B
Certificate issuer: /CN=2b195371b4cf70b88e773e1b807cb2391632385b
Certificate serial: 019E1EA31AE9CF8D54F2EF64D21AC2484E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
Manifest number: 01E8
Signing time: Wed 13 May 2026 00:01:06 +0000
Manifest this update: Wed 13 May 2026 00:01:06 +0000
Manifest next update: Thu 14 May 2026 00:01:06 +0000
Files and hashes: 1: KxlTcbTPcLiOdz4bgHyyORYyOFs.crl (hash: GiYVHv1uYOA1CPzQvBmSY7d0bnVvupHjCHj6KzY2aXY=)
2: zoysAnJ75pvxhA2S0m-6Zp0HLpE.roa (hash: kFXM7sahaxaI4pXMltbaQts/ViuuZYbtivX7x0d9V2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:1a:e9:cf:8d:54:f2:ef:64:d2:1a:c2:48:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b195371b4cf70b88e773e1b807cb2391632385b
Validity
Not Before: May 13 00:01:06 2026 GMT
Not After : May 14 00:01:06 2026 GMT
Subject: CN=f4a22f1026d43c0f7afd6b1c0eb4da8769624d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:15:bb:9c:f1:e9:11:ba:ca:b8:c0:6c:6c:
d3:ef:78:36:46:5e:03:cc:2b:c8:60:4c:65:d2:21:
ea:54:a2:b2:5a:ef:c3:4d:36:65:1b:0d:94:fc:3d:
5e:d2:37:3a:12:e5:8c:9f:3e:8b:c0:6d:0d:60:62:
25:b4:4f:75:0a:f0:67:17:57:a2:88:98:ff:00:6f:
0a:29:3e:5c:a9:ca:9b:69:46:c8:89:8a:94:2c:58:
8f:2f:f6:7d:d6:e6:8a:5f:ca:39:82:8d:97:56:7f:
d8:e2:b6:a0:e3:fd:2d:9c:bd:92:3a:85:27:4d:4f:
7f:eb:07:52:5e:36:2d:72:0b:b3:b1:60:e3:9f:18:
7d:94:8d:a5:3c:c3:20:46:b5:ee:c8:3b:c8:01:49:
71:74:fc:01:bb:aa:87:2a:c1:40:cd:3c:3a:5a:8c:
45:0d:ee:db:4b:3c:35:6b:16:ff:a6:68:fd:12:9e:
69:ff:57:01:33:0b:86:3e:2c:c1:f8:9d:bc:ba:37:
27:2e:20:2c:52:33:4d:b3:8b:be:e4:04:fb:d7:c9:
7d:68:d0:8f:2a:a0:81:e9:24:2f:f8:3a:0d:1f:b3:
72:3d:8b:a7:4d:2b:fb:db:a4:16:6a:2f:f2:d4:4d:
97:03:18:60:18:b4:76:be:1a:f1:6c:fb:67:7e:97:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:2F:10:26:D4:3C:0F:7A:FD:6B:1C:0E:B4:DA:87:69:62:4D:1F
X509v3 Authority Key Identifier:
keyid:2B:19:53:71:B4:CF:70:B8:8E:77:3E:1B:80:7C:B2:39:16:32:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxlTcbTPcLiOdz4bgHyyORYyOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6541b4-7424-4758-bd32-5e4041d93008/1/KxlTcbTPcLiOdz4bgHyyORYyOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:81:4a:84:a5:12:2d:b4:13:20:93:8f:62:79:e5:50:d5:13:
55:7b:0b:38:d0:71:9d:63:f4:58:bd:91:90:41:06:2a:ac:33:
f8:fa:1a:c5:86:47:4c:41:81:be:7b:13:01:5f:96:eb:01:c0:
56:4c:0f:32:22:07:be:e4:e7:f0:74:d3:38:d1:93:1d:27:97:
71:0f:40:3a:27:77:e9:6c:83:3a:23:43:0c:6c:a6:ac:79:d4:
10:65:3e:ab:e3:74:e5:41:bb:9c:f2:ec:f2:7f:8b:03:23:a0:
35:14:24:b0:cb:e0:a1:05:bb:67:e9:67:d3:50:4f:3d:b2:22:
4b:95:cc:3d:cd:72:3b:95:b2:19:49:6b:47:33:03:c1:da:c0:
4e:73:e4:d2:3f:86:3a:63:ce:f6:99:77:05:31:2f:d3:34:3a:
07:ae:65:52:5c:41:87:93:b8:7d:ac:26:06:25:3c:cb:94:8c:
ca:53:f5:19:6f:7b:07:f8:a8:47:e4:46:15:13:32:c7:2a:62:
c5:6a:58:05:dd:00:fc:bb:9d:40:74:32:98:2d:e0:7d:d6:d6:
d8:d2:7d:31:8b:9b:cf:52:92:e0:56:c9:a4:e7:50:42:32:fa:
21:e6:7d:62:53:7b:92:3d:54:bd:57:4b:fa:a0:d8:01:52:7e:
d2:b6:9c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:42 2026 by rpki-client