Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: tcadfNCsK/cJBsq0X3UEXWXYhCOcxVdV+/ux7zw9fNg=
Subject key identifier: C5:8A:E6:3F:C8:F7:B3:A1:8B:98:AF:34:A2:34:98:4A:EB:E8:AB:2F
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019E2927955E264AE6B078FD45D3108DA15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 01:02:00 +0000
Manifest this update: Fri 15 May 2026 01:02:00 +0000
Manifest next update: Sat 16 May 2026 01:02:00 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: q8kLmNQFA2N+6a8/QEZjNYiQS7QpksqreQXVDt6cuIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:95:5e:26:4a:e6:b0:78:fd:45:d3:10:8d:a1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: May 15 01:02:00 2026 GMT
Not After : May 16 01:02:00 2026 GMT
Subject: CN=c58ae63fc8f7b3a18b98af34a234984aebe8ab2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:fa:02:fc:bf:5a:ab:67:5f:54:a8:50:13:
ae:f4:35:a0:a9:1e:19:64:ed:f5:92:69:a0:44:60:
8c:ce:54:b1:53:31:25:27:10:55:b8:7d:f3:c5:ea:
e5:a2:0d:d7:30:c6:a4:aa:09:42:20:af:15:7d:bc:
87:89:b4:57:e0:d5:2b:62:b3:c0:6a:37:da:49:d8:
66:d0:40:c2:95:c3:53:11:2f:8e:4a:0d:cf:e6:ca:
68:ea:0c:06:17:fd:8f:de:03:8c:fb:19:c0:54:2b:
6b:2c:c5:b9:92:85:91:60:85:94:db:a9:bb:0c:57:
32:7e:37:00:c5:33:af:71:83:72:2c:7a:5d:5e:da:
b1:c2:2b:93:ee:da:5d:1c:c7:5f:95:98:61:e3:64:
73:59:0c:d5:a2:44:b9:50:af:72:e3:9b:0c:2a:e7:
1d:ad:0a:bc:90:2d:be:bc:4b:3d:3d:d7:53:ed:be:
be:56:8a:be:47:f5:22:98:e4:94:b6:cc:cd:a5:1d:
83:15:e8:d6:5b:1e:24:7c:96:8d:ab:71:a9:6a:14:
85:e2:ee:fc:54:ab:91:f2:fc:b3:fc:7a:56:34:14:
c3:46:0c:c0:4a:fb:ee:d2:56:ce:d0:ed:e0:3f:91:
ce:64:7b:ec:4f:81:d5:e4:29:d2:b1:6b:b4:4f:99:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8A:E6:3F:C8:F7:B3:A1:8B:98:AF:34:A2:34:98:4A:EB:E8:AB:2F
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:62:2a:9a:be:48:43:f8:45:6b:36:a0:06:66:2e:48:01:
a9:65:91:63:9a:c2:f3:4e:aa:b6:91:11:6c:60:a0:5b:f9:34:
54:5d:55:5f:9a:10:63:4c:a3:e0:9f:c1:a8:43:44:26:24:0f:
19:16:41:5c:f5:42:ec:54:06:82:31:13:87:c7:b3:19:e9:04:
27:e8:68:d1:79:3d:a2:d5:b1:67:9d:52:ca:9d:9d:34:ce:da:
dc:5f:b7:3f:fa:c2:31:68:db:3f:11:53:a3:88:fe:59:86:c6:
d9:5b:4e:2f:1a:2f:29:9b:ec:05:84:53:fb:b0:82:50:b6:85:
76:51:84:e8:49:ee:8b:c8:35:49:cc:40:f8:8b:a5:37:92:fc:
cd:69:34:89:ca:90:bf:09:c8:8b:b1:76:c1:db:c9:27:6e:8d:
98:96:64:6e:db:db:28:62:fe:ec:23:f0:db:e2:8b:ce:4e:ad:
ee:6b:eb:8c:a5:cb:fa:21:cf:a8:c9:28:58:ea:b1:55:8f:c9:
c6:52:e6:27:d6:54:b6:87:d9:0c:e1:16:92:7f:26:2f:25:98:
80:ce:9a:68:6d:ba:1b:67:34:60:73:10:ed:25:28:20:e3:d2:
69:b6:d7:1f:aa:4f:b2:d0:45:66:95:7e:45:fb:f7:fc:33:f0:
83:c8:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:16 2026 by rpki-client