Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: H8v1c9IYlhukhP5h+YqjT7Ahpe0e/4vUS2UEfjfZkKE=
Subject key identifier: 99:96:5A:8C:FE:C9:5D:60:0A:0B:EC:B6:3E:2C:8F:FE:F5:B9:FF:3A
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019E4EEB641C6EB3E123EB75D2BA8AE098F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 19A5
Signing time: Fri 22 May 2026 09:01:49 +0000
Manifest this update: Fri 22 May 2026 09:01:49 +0000
Manifest next update: Sat 23 May 2026 09:01:49 +0000
Files and hashes: 1: 9ZB8rD_C0nC5gYf8WIwjQefUzzA.roa (hash: RjSr8mhFsLjbPPuROmbuVmaNJdr5gauo7qJqOvNMc1M=)
2: DeBELiaVDIm9e9ht1-GHWeELAg4.roa (hash: 6yIPWOzy1D2Ick+lH0lpZl07DrAhix1Km4Ihd5P9WW4=)
3: DwQ0VzEpgtSpM5yRg_MsiGpLHbQ.roa (hash: 8B6LMRCNYRSlMwJmgvrQgb9+1S4Eo+ZqnOoIsP4WvDo=)
4: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
5: Z2r7taNlksaIA_BapGfcq-AzfPY.roa (hash: tSioYRJgqg/vsE95GOMs+XL7xqTRy7Mtz6dqflcuUTY=)
6: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
7: dJ-LgULFIIWiSx-8U9-vCMWP9tQ.roa (hash: DnhiaJPEoA2+bcQdXbSq4I3coe3SQBwFFuVIM9wxJBk=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: kjiMfFfbycReTnyAA3DvVx1HOmfXJLpoeLV+klc5olA=)
9: yPG2qCvyP-nKFZPXnlIltH2DG-0.roa (hash: Nkc/T0d2GdLdZhksMIWihEPosGpSwkWR9zdwiawIunM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:eb:64:1c:6e:b3:e1:23:eb:75:d2:ba:8a:e0:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: May 22 09:01:49 2026 GMT
Not After : May 23 09:01:49 2026 GMT
Subject: CN=99965a8cfec95d600a0becb63e2c8ffef5b9ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:34:64:bd:7b:a4:8b:88:b9:9b:ad:c5:ca:
e2:85:2c:50:f3:df:b5:39:9e:cd:c1:79:91:f5:63:
84:54:6f:8f:80:dd:93:c3:45:8f:51:ab:c9:09:f6:
3b:4d:48:15:3c:2d:7f:37:18:53:7d:aa:16:8e:7b:
5e:f8:af:a8:0d:f8:53:f2:dc:3a:cd:e5:38:ee:e1:
eb:8f:f8:53:87:02:35:ef:b5:8d:c8:37:dd:8a:e6:
cf:02:5e:f8:5e:38:bb:e3:ea:b6:b1:ef:c3:a3:6c:
96:c8:94:63:75:e5:2e:47:a1:0e:11:52:98:34:10:
ec:fd:e4:97:07:e3:d0:2e:e7:cf:99:cd:f6:70:5e:
64:d7:58:33:91:58:89:cb:0d:76:6e:17:36:ca:b5:
ea:6d:6d:6a:7c:a7:04:d5:92:d9:ee:26:36:41:5e:
91:26:12:6e:23:a6:ae:cb:38:29:12:15:09:a4:47:
c1:53:1f:e0:eb:bd:83:ce:ad:06:8f:50:f0:23:b2:
f0:4a:4a:74:43:a5:05:9f:4e:8e:34:4d:dd:72:83:
f6:f5:23:c0:00:0d:88:dc:15:79:7f:f3:0e:15:43:
f3:25:90:c1:37:ca:75:b8:7e:28:b3:6e:6a:15:79:
e6:d4:67:1d:fd:d5:55:f2:de:36:ad:46:be:8e:c1:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:5A:8C:FE:C9:5D:60:0A:0B:EC:B6:3E:2C:8F:FE:F5:B9:FF:3A
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c6:ff:5e:b6:a3:93:25:1b:e3:fa:06:08:8f:67:b6:49:ac:
81:47:b0:fa:26:5e:55:1e:a0:58:0f:2f:8c:fe:37:ff:45:7d:
b8:6b:86:f3:7f:4b:90:91:16:d6:10:d0:54:5e:e4:1c:23:7d:
50:22:cf:5a:6b:8d:da:73:9a:99:62:af:d4:9a:5c:c5:46:ce:
22:44:6c:32:ae:91:68:45:64:88:8a:c3:5e:17:73:c0:a1:80:
02:6e:16:ae:01:7d:45:7e:07:a7:c2:3e:65:80:ea:d4:ba:f0:
90:e1:46:60:61:ea:14:49:b2:3e:30:4b:26:08:32:dc:a8:7c:
2a:f3:b7:01:a9:45:f2:8d:af:34:a7:13:f7:23:1d:56:ef:ce:
fb:0c:1c:1d:e3:82:7f:63:fc:24:25:84:87:a8:19:54:55:27:
f3:ba:d0:c9:4f:fe:47:98:0e:58:0f:d4:9f:fa:95:cc:fd:98:
78:3e:2c:a6:fd:c6:09:7d:c6:a1:23:26:49:54:04:08:3f:44:
09:bf:8c:77:e4:be:26:75:d9:b4:a2:c5:26:2a:3d:72:ec:12:
f7:50:b9:d4:4a:26:ba:1c:6e:55:37:ff:05:3c:de:67:34:4e:
3d:f0:f1:32:1b:e8:86:0d:5f:c9:b4:58:5e:46:17:13:22:94:
cc:7d:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:11 2026 by rpki-client