Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: IcbqkO3qLiLH95BHW5ZyrqrDuzJoIC35AkrpChrNlqk=
Subject key identifier: F2:91:31:D4:7D:BD:7D:2E:30:76:C6:5A:EF:C1:70:21:2A:52:9A:7E
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019EB7A14CA18E93D048829A3BBA2D00E1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 18E8
Signing time: Thu 11 Jun 2026 17:01:01 +0000
Manifest this update: Thu 11 Jun 2026 17:01:01 +0000
Manifest next update: Fri 12 Jun 2026 17:01:01 +0000
Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: CoAmaSbenMe8isz5uj6g1XTocF7Fe9kpsd5xshW6DBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:4c:a1:8e:93:d0:48:82:9a:3b:ba:2d:00:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Jun 11 17:01:01 2026 GMT
Not After : Jun 12 17:01:01 2026 GMT
Subject: CN=f29131d47dbd7d2e3076c65aefc170212a529a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:54:00:8b:89:c3:3b:56:61:4a:75:e6:68:
49:a4:44:d3:b4:10:c6:f9:01:98:f6:94:bd:11:4b:
36:90:14:09:ba:32:fa:07:aa:fd:d0:2f:27:af:08:
4a:ea:84:fa:3c:d4:98:98:04:35:33:4e:8e:fd:5f:
3a:68:40:cf:08:93:c8:4a:5b:cb:09:c3:92:0c:0c:
0f:ad:20:7f:38:46:a4:8c:42:8d:81:d5:e4:ae:a3:
15:30:f1:4e:ea:3b:c9:7e:c0:2f:4e:72:c6:60:5b:
a6:37:03:00:ae:ab:39:d7:6e:c9:dc:cf:66:1e:9d:
4a:f1:63:8b:70:3f:10:12:fc:0c:05:c7:4c:0d:6d:
c3:b5:00:a1:b4:f3:b7:f1:2b:2a:21:b9:8d:9f:95:
a3:e2:31:55:b7:a4:0f:02:8d:f7:e9:4f:c0:cc:5f:
21:74:8d:02:c3:33:e7:12:db:4a:97:ea:99:29:9f:
a7:bc:6f:63:6c:6b:1f:2d:6b:5e:cb:ee:a3:ac:89:
fa:f9:0e:0b:47:bf:42:33:48:5c:53:78:ee:94:21:
6e:ae:ee:a9:ce:09:75:f4:96:24:df:d1:94:c0:12:
39:16:7e:ec:e3:0a:d8:6e:7b:17:f8:96:05:8d:c2:
23:60:ed:36:a2:60:16:85:79:5f:77:f8:2e:7b:8f:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:31:D4:7D:BD:7D:2E:30:76:C6:5A:EF:C1:70:21:2A:52:9A:7E
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ca:1a:2d:b9:0b:f5:7f:ff:5c:66:e6:48:19:c1:b8:4b:02:
d5:34:b7:56:75:84:d5:83:45:5e:cd:e9:e7:cf:8e:e6:5c:20:
e2:b1:db:dc:70:6b:75:e6:8f:db:d3:57:fb:78:37:5e:ff:ff:
cb:ed:99:72:04:a3:70:4d:7f:76:b2:3e:53:38:ed:20:b0:c0:
5f:3e:9a:7c:11:a0:8f:0d:80:f6:91:a7:70:61:d6:5b:6e:3a:
9e:64:fa:1c:c7:ae:12:88:80:5d:54:e8:d1:91:56:98:93:3b:
a1:0c:9c:e3:b0:39:d0:80:a0:eb:d9:f1:3c:6c:ed:b2:cd:4a:
1c:a1:ba:a0:86:3b:86:d3:2f:42:74:aa:8d:1f:3e:90:55:e8:
f4:04:69:e4:4f:38:8f:19:a2:c2:95:8f:be:d4:1a:89:27:39:
79:da:58:b2:61:53:fb:a1:cd:f1:b7:24:21:ea:e9:f3:53:41:
32:fb:b9:72:09:19:5d:8e:7b:bd:3d:3e:f0:d5:34:50:66:9a:
ae:9d:a7:97:df:4f:a9:e2:55:f9:bb:ad:a8:67:2f:ca:6c:81:
ea:a6:bb:0c:37:93:45:ab:6a:af:16:09:22:ae:61:08:0c:9a:
66:b6:ea:db:76:db:38:6f:46:41:4e:6e:10:cb:04:09:d0:34:
3d:e6:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:14:22 2026 by rpki-client