Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: JBANwkj5RsXll4yRfDe8VDPtYgRsgLmtthlJJshxp0Y=
Subject key identifier: B5:0E:EC:8B:62:2B:C4:10:23:10:28:2B:57:0E:B0:2E:02:37:17:6C
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 019E2C95BC7A91B029242D19348986659926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1910
Signing time: Fri 15 May 2026 17:01:10 +0000
Manifest this update: Fri 15 May 2026 17:01:10 +0000
Manifest next update: Sat 16 May 2026 17:01:10 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: oFGUSluk2oVV9jII62J0rHLaCIHZegNPOgy+4yWZqIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 15:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:95:bc:7a:91:b0:29:24:2d:19:34:89:86:65:99:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: May 15 17:01:10 2026 GMT
Not After : May 16 17:01:10 2026 GMT
Subject: CN=b50eec8b622bc4102310282b570eb02e0237176c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:11:d3:e0:b0:f3:30:1d:d9:72:b9:40:2d:
19:79:88:f4:d3:db:e1:6a:11:32:27:77:7c:71:73:
47:29:8b:4c:b9:85:5e:42:5a:9f:9e:b7:a7:bf:08:
a3:f9:ba:8f:33:70:3b:4a:44:78:5b:f0:f2:6a:c4:
ae:cc:fc:9f:81:31:90:94:ca:70:f3:84:43:2b:21:
ff:7f:a1:d1:3b:92:8d:a0:ec:f3:ad:ee:81:43:2b:
b1:4f:10:30:93:0f:8c:75:1d:7c:32:85:74:d7:0f:
da:1b:2c:5a:52:fc:b0:0b:91:a6:8f:34:e0:0f:7e:
13:2f:66:6d:c4:f7:61:db:b7:08:4e:c3:37:e7:29:
50:46:c5:14:1a:8e:bb:8f:61:3d:a3:90:0d:a8:46:
1c:f0:5f:01:1c:b2:f7:1c:15:93:31:9b:1d:20:73:
f1:aa:79:4b:8a:41:94:c7:ed:d3:58:23:da:60:c1:
06:19:48:9a:13:65:3d:b1:9d:6a:b2:c5:bb:36:b1:
13:df:74:93:57:56:99:33:fc:3e:a5:a5:bc:a8:61:
19:a3:96:35:1c:aa:b2:65:7f:a6:0e:97:11:f5:be:
f5:46:f8:fc:4a:ef:37:bc:2e:af:5c:45:d8:ac:31:
36:36:9a:e2:24:79:51:d0:f4:93:83:28:89:f2:a2:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0E:EC:8B:62:2B:C4:10:23:10:28:2B:57:0E:B0:2E:02:37:17:6C
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:2d:5c:76:39:16:7a:ed:3b:59:fc:59:c3:04:4d:51:66:c8:
9f:87:9d:ad:3d:3b:ea:d1:d3:57:37:8c:e5:36:94:49:16:e9:
70:4a:eb:9a:a9:b9:fc:c3:ad:37:0f:25:13:37:ca:da:23:f5:
e5:7f:72:cb:03:6d:b5:73:18:5b:d3:cf:eb:52:25:f3:25:70:
2d:7f:bb:99:95:54:e3:75:ff:c9:b1:98:f1:8b:f0:01:f9:e2:
9d:89:b2:72:71:1a:1e:dc:05:78:36:20:91:b2:d8:c3:79:c5:
66:91:e5:a1:4c:13:6c:fb:98:f5:d8:ea:20:4b:0f:dc:44:10:
a2:2d:ff:53:a8:22:33:e6:dd:a6:81:ad:ab:4f:6f:c0:8f:b5:
c6:01:8d:fa:58:72:5d:66:ae:91:ec:f9:c9:ab:12:61:fe:de:
bd:f7:88:92:75:0d:ae:f8:02:f1:c5:06:0d:0f:d8:a5:8d:22:
78:57:0b:95:4e:d9:cd:b8:04:b4:85:bd:40:04:5d:7b:88:ab:
0b:16:86:7d:ad:93:4e:73:ea:16:0d:61:ba:ef:82:16:00:4a:
d8:75:18:b5:ca:93:2e:fb:a6:7d:ba:dc:aa:e4:d2:0e:c0:a6:
27:d1:43:34:76:4f:d7:08:11:41:8d:df:ff:0d:6d:c1:73:30:
98:35:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:08:28 2026 by rpki-client