Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: DsGMwOzquXGFAm4VTWWF/R+fRdUk55Ma/Vn9kf/mcs8=
Subject key identifier: 78:A1:82:E3:06:08:22:FE:50:A2:88:2C:F7:D9:90:D6:19:5E:56:49
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019E9C613DD0BBD3520E6C32A9FD6C3BF722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1947
Signing time: Sat 06 Jun 2026 10:01:18 +0000
Manifest this update: Sat 06 Jun 2026 10:01:18 +0000
Manifest next update: Sun 07 Jun 2026 10:01:18 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: 02n9RXpfs78mG8dk8bi0JqOLuxFJZpvU9CEUGL7cNpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:61:3d:d0:bb:d3:52:0e:6c:32:a9:fd:6c:3b:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jun 6 10:01:18 2026 GMT
Not After : Jun 7 10:01:18 2026 GMT
Subject: CN=78a182e3060822fe50a2882cf7d990d6195e5649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:f8:b1:a7:d0:13:fe:c6:37:72:60:ed:27:
8e:0d:73:68:ac:15:b6:18:53:4e:9d:cb:8d:e6:5c:
db:90:32:9c:52:89:6b:66:75:02:ca:e1:6d:66:30:
63:b4:b2:84:88:04:f8:f8:5b:6e:1a:62:7f:f3:82:
8b:05:60:5c:ac:64:bd:14:02:e4:6a:42:26:4b:bc:
8d:fd:38:03:88:de:13:f4:57:5c:cb:be:b0:f3:f5:
4d:09:e1:41:a8:15:4f:62:1e:2c:bc:98:54:be:cf:
1c:3c:21:ff:5e:2c:35:18:6d:57:14:53:3e:cc:65:
08:d5:c3:f2:f9:17:c3:92:a1:88:ab:0f:b1:74:93:
3d:01:d4:d1:c3:7d:22:ea:4f:87:1a:11:3d:ca:20:
6d:09:dc:d8:89:29:2e:03:b6:40:c6:bf:f4:3a:68:
86:73:fe:a1:e1:a5:37:26:a6:5a:51:8d:3f:11:7e:
1c:91:ac:93:5d:59:6f:00:72:cf:7f:80:8c:9c:76:
f1:8e:c0:96:38:5b:77:0c:83:60:24:9a:59:1e:bd:
55:e0:c9:17:a4:3f:e6:ca:e4:3b:6b:27:61:ef:f1:
ea:b3:4c:a6:8b:54:49:dd:b5:b5:b6:cc:e8:28:55:
93:de:34:8c:ec:6c:70:7a:d9:22:eb:19:29:62:47:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:82:E3:06:08:22:FE:50:A2:88:2C:F7:D9:90:D6:19:5E:56:49
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0c:ce:a7:a2:94:69:8c:73:6c:bd:10:df:4a:cf:2d:7e:2c:
16:8b:a3:9c:6c:01:ab:da:19:43:2b:79:f9:c5:b9:51:b6:a3:
b4:b7:90:90:10:4c:09:33:ff:27:91:99:87:11:a4:82:bd:0e:
b2:89:db:f2:f5:d3:4a:c9:71:6b:53:18:2e:ce:2b:4e:e8:7b:
5b:c1:54:16:09:7e:c5:ee:19:b6:96:24:5d:62:93:b0:15:12:
dc:a4:ee:27:05:dc:66:ca:58:aa:81:3e:0a:d3:8e:64:cc:3d:
50:c9:d6:52:ee:22:ed:f2:4a:15:4f:11:3a:c6:0a:4a:29:ae:
79:5c:cb:3e:9e:ec:77:20:3b:af:a8:2a:35:bd:fc:e5:26:27:
3b:b9:18:5b:22:29:61:70:70:20:58:49:c5:b6:f2:7c:4d:ec:
1f:24:2f:42:73:a3:02:38:00:f0:a0:c0:fb:06:f8:30:65:34:
af:41:99:fc:ea:f8:cc:95:ab:f0:89:ea:f5:96:53:ca:d4:6a:
f7:18:a9:f6:5d:a6:ec:98:d6:1a:39:bd:bb:04:0e:3d:ba:ee:
f8:5f:84:52:bb:9f:58:bf:9d:2a:e1:8e:28:18:97:f0:f6:67:
7a:62:00:49:04:f4:31:d2:f1:88:0c:f0:c0:08:3b:c2:ef:7d:
f7:5f:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:22:57 2026 by rpki-client