Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: zTpvj7tcMSyymQnP15mKRb54qO02mGsvFMRiIXM1WN0=
Subject key identifier: DE:B5:CE:D6:50:58:DA:CA:F2:63:F0:5B:DF:78:4E:9E:D3:73:AB:67
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019E1FB59D870C660E7E7FD6F996FB297AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 11E4
Signing time: Wed 13 May 2026 05:00:56 +0000
Manifest this update: Wed 13 May 2026 05:00:56 +0000
Manifest next update: Thu 14 May 2026 05:00:56 +0000
Files and hashes: 1: gMde_Z2AYAfDjgfQgADaIVzJfHA.roa (hash: ohh0Sm+ArlanntYsQ32zJOzQvbfP0sXTcTAxiE+zWSU=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: dARSV38NmoThJqndTifxxoAHLyGN2S/ZCGUt9Z+VRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:9d:87:0c:66:0e:7e:7f:d6:f9:96:fb:29:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: May 13 05:00:56 2026 GMT
Not After : May 14 05:00:56 2026 GMT
Subject: CN=deb5ced65058dacaf263f05bdf784e9ed373ab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:da:de:cb:2f:23:83:dc:df:fd:35:6c:22:
70:c4:25:d6:84:36:68:ef:0a:08:c7:90:9c:0e:07:
54:76:f1:3d:4c:98:2c:a4:8f:2e:6b:59:4b:a7:f7:
cc:90:6b:48:5f:a3:61:c3:cf:62:83:6d:7d:2b:21:
8d:77:81:03:a0:46:36:12:01:44:b9:43:15:aa:a3:
85:40:53:44:06:02:a7:d9:7e:aa:92:ae:06:b0:87:
9f:34:aa:e6:01:77:81:d7:39:a0:e2:87:da:53:0f:
ab:93:b0:b9:c4:d8:ac:ed:53:88:d4:12:17:d6:51:
2b:18:6f:1d:b3:43:37:9a:16:99:ed:9e:dc:c2:a0:
91:7b:89:5c:52:8b:a5:7f:57:1d:b7:a9:67:99:98:
8b:4b:a4:9b:b5:1e:58:e6:5a:59:ed:e5:cf:97:90:
90:01:e9:77:e7:b1:c4:8d:f5:26:4e:4a:39:d6:a5:
10:6b:c9:d7:10:25:d8:a5:fd:61:3f:c2:ed:1f:6c:
f8:21:ee:e0:eb:fd:5f:0f:0f:ca:58:5b:2b:4b:5b:
c8:7e:1e:09:9f:a2:a6:a0:38:26:cd:39:2c:26:4a:
be:bd:c6:1d:9c:12:00:c0:54:af:9a:b4:d2:b8:61:
f6:84:ad:87:17:7e:2f:d5:5e:50:da:b3:84:8c:bc:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:CE:D6:50:58:DA:CA:F2:63:F0:5B:DF:78:4E:9E:D3:73:AB:67
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:c2:67:b0:a7:60:bc:d1:b4:ee:84:ec:3c:6a:41:a9:70:
39:f6:3a:b4:36:af:49:45:73:6d:78:a4:ce:84:ac:8f:3d:50:
6f:bd:fc:63:61:c7:a4:17:fd:cd:d1:9d:c8:8d:a8:8a:b4:f0:
84:3d:3f:af:f0:10:e5:9a:13:7c:6f:8a:c3:22:72:97:fe:4d:
76:ea:da:04:70:38:cf:a6:1c:a7:c5:d4:9e:d8:84:0d:74:02:
9c:5b:f4:92:de:9d:9d:ca:68:f0:5a:87:ef:2d:50:6e:9b:99:
75:85:82:f2:84:0a:de:74:35:e5:0b:91:44:ae:79:99:02:68:
26:38:a0:72:e7:c1:aa:56:40:df:6b:b0:04:4a:c6:fe:e0:4b:
da:88:50:82:25:79:38:af:87:8d:6b:8d:53:14:05:bb:e1:7a:
98:fb:5b:94:30:5b:11:7a:48:96:39:9a:6c:ac:71:f2:79:98:
1c:a5:2b:87:e2:ad:7e:2c:50:e6:08:66:85:05:39:55:d7:ed:
0f:ea:8c:dc:21:df:c1:9d:01:3d:60:fa:eb:c1:6b:db:49:ae:
f7:25:1c:be:2e:47:9d:75:f2:e8:e5:fa:de:6d:10:8b:72:1b:
58:4e:66:9a:9e:e2:fe:eb:96:14:f6:71:ca:36:a7:c5:77:8c:
f5:93:2a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftZ2HDGYOfn/W+Zb7KXriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYjNmNWQ2ZjQzZTgzMDcxZmE3N2U2ZDNlYmJiNzkzNTJm
OTYxYjUwHhcNMjYwNTEzMDUwMDU2WhcNMjYwNTE0MDUwMDU2WjAzMTEwLwYDVQQD
EyhkZWI1Y2VkNjUwNThkYWNhZjI2M2YwNWJkZjc4NGU5ZWQzNzNhYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ba3ssvI4Pc3/01bCJwxCXWhDZo
7woIx5CcDgdUdvE9TJgspI8ua1lLp/fMkGtIX6Nhw89ig219KyGNd4EDoEY2EgFE
uUMVqqOFQFNEBgKn2X6qkq4GsIefNKrmAXeB1zmg4ofaUw+rk7C5xNis7VOI1BIX
1lErGG8ds0M3mhaZ7Z7cwqCRe4lcUoulf1cdt6lnmZiLS6SbtR5Y5lpZ7eXPl5CQ
Ael357HEjfUmTko51qUQa8nXECXYpf1hP8LtH2z4Ie7g6/1fDw/KWFsrS1vIfh4J
n6KmoDgmzTksJkq+vcYdnBIAwFSvmrTSuGH2hK2HF34v1V5Q2rOEjLz+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN61ztZQWNrK8mPwW994Tp7Tc6tnMB8GA1UdIwQY
MBaAFJGz9db0PoMHH6d+bT67t5NS+WG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt
YjJjZDRlNTgxMDBlLzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl
LzEva2JQMTF2US1nd2NmcDM1dFBydTNrMUw1WWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuzCZ7Cn
YLzRtO6E7DxqQalwOfY6tDavSUVzbXikzoSsjz1Qb738Y2HHpBf9zdGdyI2oirTw
hD0/r/AQ5ZoTfG+KwyJyl/5NduraBHA4z6Ycp8XUntiEDXQCnFv0kt6dncpo8FqH
7y1QbpuZdYWC8oQK3nQ15QuRRK55mQJoJjigcufBqlZA32uwBErG/uBL2ohQgiV5
OK+HjWuNUxQFu+F6mPtblDBbEXpIljmabKxx8nmYHKUrh+KtfixQ5ghmhQU5Vdft
D+qM3CHfwZ0BPWD668Fr20mu9yUcvi5HnXXy6OX63m0Qi3IbWE5mmp7i/uuWFPZx
yjanxXeM9ZMqfg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:08:18 2026 by rpki-client