Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: vYJTpy1uVM7eiuuTqLCXPjhIt3LhexB78pmPZaIBflQ=
Subject key identifier: 47:5A:6F:FC:DC:49:68:0A:48:2E:99:D5:25:AB:01:61:17:DA:67:96
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019E2AA795042379682ABE1072AABDB9A448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 07DB
Signing time: Fri 15 May 2026 08:01:26 +0000
Manifest this update: Fri 15 May 2026 08:01:26 +0000
Manifest next update: Sat 16 May 2026 08:01:26 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: /5SeD4yakwX1xxcRbV1ui3rVjtjusy/m76TyLuq/DyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:95:04:23:79:68:2a:be:10:72:aa:bd:b9:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: May 15 08:01:26 2026 GMT
Not After : May 16 08:01:26 2026 GMT
Subject: CN=475a6ffcdc49680a482e99d525ab016117da6796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:0c:20:f2:45:31:33:2e:05:50:a7:96:09:
59:62:41:29:ee:d9:6b:ee:ea:bc:30:dc:84:ba:d6:
cd:a4:9c:b0:e1:21:48:e5:df:db:ec:45:d6:13:4c:
90:33:fc:68:f7:d3:ef:f1:0f:ab:12:b4:8b:fd:e3:
4f:27:7a:71:a4:1d:d6:ab:2c:4f:d2:62:17:f7:67:
27:68:de:3e:15:7b:46:3e:25:c0:eb:ed:ed:39:6b:
f9:f5:0d:b9:e3:84:92:0a:70:8f:33:02:69:39:7a:
4a:d6:3a:63:6a:27:e9:55:6d:20:b3:01:d4:99:07:
23:c7:4e:16:36:a4:0f:ff:cd:ed:5f:d3:cd:7d:40:
2f:14:23:9d:9b:bf:db:91:c5:20:43:26:72:f7:2a:
1a:c0:02:03:54:4e:9b:01:8e:0f:96:db:76:f6:a1:
b4:0c:e2:0e:8b:e2:94:f3:67:54:82:1f:a2:71:ba:
8c:b1:9d:78:5b:cc:3a:16:dd:4e:18:95:1b:40:9d:
5a:86:74:22:82:be:c0:0b:41:fb:49:37:b4:6e:20:
97:80:c7:10:0c:9a:13:e7:d0:80:d2:8b:db:5d:e9:
e8:5d:f6:54:be:3a:f0:6e:68:af:8b:4d:ab:a3:c3:
24:4b:07:c2:a1:93:0e:39:30:f5:33:0b:05:b2:76:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:6F:FC:DC:49:68:0A:48:2E:99:D5:25:AB:01:61:17:DA:67:96
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:83:88:7b:d5:f1:c0:f5:d7:0a:57:73:df:96:a9:f1:04:43:
53:c5:be:6c:48:a0:52:8c:ed:98:b4:2a:cc:99:90:a3:82:da:
cf:d5:9b:d5:f2:67:f3:60:17:62:81:0a:60:f1:5f:25:56:b7:
9e:df:0d:52:ee:15:bc:de:d3:3e:ac:65:e6:a0:a4:6f:dc:37:
7b:7c:b8:44:34:68:ec:41:30:cb:16:2e:a0:43:44:fa:e0:bc:
6c:6f:1e:c6:e4:b2:91:bd:0b:f5:d7:fe:dc:e0:a2:1b:35:77:
91:8d:fb:4f:10:18:39:85:62:23:5c:05:1f:c0:15:40:63:35:
7e:5f:54:b1:7d:73:6a:28:73:6f:9a:4e:0c:34:35:6f:ea:26:
e9:ab:d1:5f:a4:d5:d8:40:5f:dc:fb:df:fa:88:64:13:f8:ec:
ec:fa:ee:a6:24:97:b6:79:a5:5e:fb:54:c9:2d:26:f5:6b:25:
60:99:58:4c:63:f7:da:3f:65:da:14:58:60:73:03:bc:fc:78:
95:c5:a3:7a:78:f8:42:13:65:63:5b:5d:41:23:1e:9f:94:b4:
cc:97:37:05:a6:30:60:ab:9b:26:f6:91:a6:b3:62:ff:33:04:
ba:cd:41:bd:e5:d3:47:1a:15:ab:80:e0:cf:a0:97:66:25:73:
01:f9:2c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qp5UEI3loKr4Qcqq9uaRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjYwNTE1MDgwMTI2WhcNMjYwNTE2MDgwMTI2WjAzMTEwLwYDVQQD
Eyg0NzVhNmZmY2RjNDk2ODBhNDgyZTk5ZDUyNWFiMDE2MTE3ZGE2Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLAMIPJFMTMuBVCnlglZYkEp7tlr
7uq8MNyEutbNpJyw4SFI5d/b7EXWE0yQM/xo99Pv8Q+rErSL/eNPJ3pxpB3WqyxP
0mIX92cnaN4+FXtGPiXA6+3tOWv59Q2544SSCnCPMwJpOXpK1jpjaifpVW0gswHU
mQcjx04WNqQP/83tX9PNfUAvFCOdm7/bkcUgQyZy9yoawAIDVE6bAY4Pltt29qG0
DOIOi+KU82dUgh+icbqMsZ14W8w6Ft1OGJUbQJ1ahnQigr7AC0H7STe0biCXgMcQ
DJoT59CA0ovbXenoXfZUvjrwbmivi02ro8MkSwfCoZMOOTD1MwsFsnbXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdab/zcSWgKSC6Z1SWrAWEX2meWMB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIOIe9Xx
wPXXCldz35ap8QRDU8W+bEigUoztmLQqzJmQo4Laz9Wb1fJn82AXYoEKYPFfJVa3
nt8NUu4VvN7TPqxl5qCkb9w3e3y4RDRo7EEwyxYuoENE+uC8bG8exuSykb0L9df+
3OCiGzV3kY37TxAYOYViI1wFH8AVQGM1fl9UsX1zaihzb5pODDQ1b+om6avRX6TV
2EBf3Pvf+ohkE/js7PrupiSXtnmlXvtUyS0m9WslYJlYTGP32j9l2hRYYHMDvPx4
lcWjenj4QhNlY1tdQSMen5S0zJc3BaYwYKubJvaRprNi/zMEus1BveXTRxoVq4Dg
z6CXZiVzAfkssw==
-----END CERTIFICATE-----
Generated at Fri May 15 14:01:44 2026 by rpki-client