Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: aKhmh9ei6nPbwLYIJX9RRFi20eiQqt45Cw6/vgjYNlU=
Subject key identifier: D1:42:6E:E9:3F:B9:7F:AF:80:64:D0:5E:B1:4F:9F:95:25:FB:B5:BE
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019EB8457F3006198456C222237D24D5458D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 07B1
Signing time: Thu 11 Jun 2026 20:00:22 +0000
Manifest this update: Thu 11 Jun 2026 20:00:22 +0000
Manifest next update: Fri 12 Jun 2026 20:00:22 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: eo0y1sQ9IsoubF/wyimTF3xUbYfQ2j9V8lCSuWHf5nA=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:7f:30:06:19:84:56:c2:22:23:7d:24:d5:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jun 11 20:00:22 2026 GMT
Not After : Jun 12 20:00:22 2026 GMT
Subject: CN=d1426ee93fb97faf8064d05eb14f9f9525fbb5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:90:12:d8:fc:1c:6e:ba:9a:6e:65:c5:dc:
4f:e2:9b:9e:27:51:cd:fa:db:eb:9e:0b:49:45:ad:
36:b2:87:c7:24:db:a2:ff:5f:b6:0d:5a:4b:54:41:
66:3d:40:2e:1a:64:b2:ae:39:3a:c1:8e:da:d7:d4:
84:f6:7d:4b:48:c5:23:b4:d3:2f:5d:97:fd:0c:ef:
a2:c5:cf:8f:1d:6c:e3:ff:49:3e:ab:01:11:f3:6d:
04:8a:45:cb:08:26:fb:35:e4:76:57:f4:2c:2a:45:
f7:77:e8:12:26:a4:e9:cb:35:9e:52:1e:55:b2:50:
c9:06:f4:85:47:4f:27:4f:b7:49:25:67:59:c5:b4:
56:b4:3e:28:e3:c7:50:72:10:88:b9:eb:d6:9a:a6:
85:2b:89:73:3d:a3:b3:40:32:a3:fc:15:66:e7:98:
be:87:e5:51:28:d5:49:c9:1e:c3:ba:72:77:de:30:
97:44:54:1b:2d:2b:eb:a3:29:f0:b5:c2:b6:18:d6:
bd:98:d3:27:64:8c:a9:19:83:ea:1d:5a:03:e9:8c:
a7:48:c8:93:dc:59:e4:32:20:06:8f:41:6e:1a:0e:
1d:b9:23:07:3a:6d:c1:6c:84:2c:9b:07:f2:b1:82:
f9:c4:c6:af:d8:02:88:9b:38:65:08:2b:42:03:08:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:6E:E9:3F:B9:7F:AF:80:64:D0:5E:B1:4F:9F:95:25:FB:B5:BE
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:bf:a6:8b:a0:c9:be:bc:2d:b2:f1:81:5f:15:21:e6:e8:5e:
94:05:68:f4:96:8c:7a:4e:75:fa:24:42:ef:45:15:60:f1:c3:
bb:e7:48:2f:4d:f1:d8:a7:39:3d:f4:27:71:b2:88:f6:61:25:
d1:a4:e1:a4:57:9d:f2:47:98:93:c8:2b:cc:a8:82:88:be:cc:
b2:8a:ea:99:b3:10:4c:52:5a:8b:e4:5f:ae:6d:e5:20:3f:75:
ab:f8:84:46:76:b5:fe:fc:43:d5:b6:0d:29:37:ed:f9:58:6f:
9e:b5:1c:3b:1c:ae:74:20:9c:92:9b:e7:ed:c8:14:0d:b3:0f:
89:b2:3c:4d:a5:20:ca:ef:32:d3:ed:c7:be:ae:c6:2b:44:73:
dd:d1:3c:b1:09:c5:d5:67:4d:66:ed:30:fb:60:0b:24:ec:ea:
a1:58:1a:1c:9b:b7:3c:37:ed:0e:ec:d4:a2:ee:5c:85:05:6d:
e2:93:d6:0d:3c:24:8c:e5:7c:d6:45:ad:25:d8:e4:bd:6c:af:
98:80:16:dd:64:18:08:e9:23:65:65:1b:48:e2:1a:19:9e:19:
c3:e7:20:8f:c2:06:97:8b:33:d1:7f:54:00:c6:d6:30:82:f3:
21:8c:25:f4:48:8b:31:fe:ba:3c:81:3e:fc:ec:27:98:f4:80:
70:b7:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:57:24 2026 by rpki-client