Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: ZjXCQeN2EA14Y6wcKRIG8BURTzZ6pmSESp6BZc42op4=
Subject key identifier: 11:4F:2E:16:9E:9B:B3:C2:D3:BF:8A:20:1D:5B:30:B4:FB:B6:A1:44
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019E292673F3C047C5F3BD28522784C1A23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 01:00:46 +0000
Manifest this update: Fri 15 May 2026 01:00:46 +0000
Manifest next update: Sat 16 May 2026 01:00:46 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: WARxnSdQTP6ybPrYBO1o43NpLDzG/FwyTVyEfmYdTYQ=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa (hash: joUgZ1+fSeYV8k7xjRhKW4mLd1zfaAQo+STxOJIkVhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:73:f3:c0:47:c5:f3:bd:28:52:27:84:c1:a2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: May 15 01:00:46 2026 GMT
Not After : May 16 01:00:46 2026 GMT
Subject: CN=114f2e169e9bb3c2d3bf8a201d5b30b4fbb6a144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:da:35:d0:cb:60:00:ab:09:ce:31:10:14:
48:32:5e:e8:71:53:2e:d6:d7:20:54:0f:9a:16:df:
b8:27:28:6f:e3:64:3c:da:20:3a:e4:aa:38:88:92:
7c:ed:13:a9:f6:90:b3:be:fd:35:42:76:c3:bf:48:
75:b9:b4:eb:6b:10:0c:35:dd:b6:3b:5d:03:83:d7:
1a:64:d0:28:54:92:05:41:eb:95:45:cf:3b:71:f7:
ca:f2:4e:70:4b:45:61:cd:8d:e1:d9:2f:8d:66:9e:
33:88:07:44:8e:25:8b:9f:98:37:6d:13:ed:03:1b:
ae:1e:38:94:4c:a6:15:02:0b:63:fd:4c:31:ca:e1:
4b:cd:c2:30:ea:c8:38:33:a2:98:8b:74:26:47:36:
6c:b9:e8:8b:97:83:cb:23:60:27:ad:21:9f:bc:61:
4f:3d:83:6c:ea:ea:5f:ae:c7:43:ad:79:6f:c9:ab:
86:d8:01:e1:cf:90:5f:4b:87:60:48:2b:38:7b:74:
b1:19:ec:8e:f7:58:e4:dd:ac:f5:86:14:67:82:72:
09:74:d5:35:a1:ee:f8:5f:37:11:5f:59:48:f4:3f:
b1:22:dd:6d:e9:f2:42:6c:03:42:7d:eb:c1:75:a9:
c3:54:96:6d:23:04:e7:5d:72:48:97:e2:ed:2b:97:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:2E:16:9E:9B:B3:C2:D3:BF:8A:20:1D:5B:30:B4:FB:B6:A1:44
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:30:f9:a3:ed:5a:36:a6:cb:05:2a:d4:bd:9d:f2:7e:13:94:
5c:45:c5:8c:f5:aa:39:e5:54:c9:c3:19:b4:9d:91:6c:04:bf:
e6:45:cd:09:07:51:f6:e4:09:e0:29:81:45:25:50:db:b3:c4:
29:95:95:4f:7d:4e:cc:37:04:cf:e3:a0:47:89:2d:23:1a:38:
bb:9c:61:43:64:7b:7f:f5:3c:f6:c7:af:18:9c:dc:a8:81:59:
04:71:57:79:92:02:8b:14:75:83:01:66:a0:ff:ac:f8:68:8f:
69:60:c9:72:aa:ce:0e:da:b3:b1:42:de:8a:ad:16:77:97:5c:
5b:9d:af:91:f6:59:4b:83:78:31:e8:41:22:a6:08:1b:d7:19:
c7:d6:a9:d1:46:5d:f1:a3:ea:5b:5c:bb:b7:3f:9e:d1:ff:eb:
0b:59:20:94:cc:98:00:0e:5f:0e:a8:49:27:c5:b0:b5:b4:d5:
fb:90:45:6a:18:19:e7:3f:d6:02:a8:63:8b:53:45:5c:f2:ae:
12:3e:44:2a:03:1f:dc:65:be:6b:54:73:ec:ea:96:9a:9d:ae:
d3:b1:83:5e:65:89:36:f0:96:82:ff:0e:e1:29:8b:02:76:3b:
cb:5f:a0:78:0d:76:84:83:57:86:45:dc:1b:f0:3c:65:37:47:
53:4b:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:21:09 2026 by rpki-client