Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File: kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier: a0MKYs+VPei1SBu3iOGoRXoCDN8u3fYGmo6kVt+xKfk=
Subject key identifier: A0:04:AE:4D:6A:3E:77:97:26:84:4F:B6:50:67:E3:4E:94:4B:DE:56
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer: /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial: 019DCDBDC4100C329A39D4611678512A8FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number: 12
Signing time: Mon 27 Apr 2026 07:00:58 +0000
Manifest this update: Mon 27 Apr 2026 07:00:58 +0000
Manifest next update: Tue 28 Apr 2026 07:00:58 +0000
Files and hashes: 1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: 62P31cnVouUBcokyEyrxs8wpN632AfLPGWy/JrIMRBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:c4:10:0c:32:9a:39:d4:61:16:78:51:2a:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
Validity
Not Before: Apr 27 07:00:58 2026 GMT
Not After : Apr 28 07:00:58 2026 GMT
Subject: CN=a004ae4d6a3e779726844fb65067e34e944bde56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:ec:60:41:a5:a7:b5:c8:e8:31:bd:fc:9d:
d9:e2:0a:45:b8:7b:60:a0:da:88:ea:ea:af:f6:2b:
36:fd:1e:06:c8:17:ea:32:01:fa:8a:45:1b:37:01:
e4:61:dd:94:c9:5e:26:39:ce:33:41:3b:d2:9a:fd:
ee:d9:3a:14:51:11:36:e6:0a:ef:b1:5b:b9:fc:4f:
0e:a4:22:f5:40:55:2f:59:e7:d5:eb:70:3c:2e:60:
61:fe:35:ed:19:14:d2:a1:ec:44:32:03:56:46:02:
d1:59:fe:01:9f:c7:6a:4f:b9:85:b7:c2:97:fb:da:
75:44:19:31:16:ff:e5:49:f9:8c:e7:9f:f4:4d:2b:
18:2c:ed:b6:42:f6:ba:e7:89:fe:9c:69:4c:7c:2a:
af:75:a5:d9:e7:0b:81:99:0b:b5:69:d0:33:23:3b:
a1:d8:6d:9d:3d:16:e3:50:3e:84:d1:6a:e1:e7:f2:
53:71:bd:f5:2d:25:dc:a8:de:41:19:c2:54:c3:5a:
e4:f6:4b:49:ae:8c:b0:c8:ee:8f:cd:39:f6:04:28:
71:fe:96:d3:8d:9a:06:ef:f0:25:44:82:98:27:6c:
d6:b4:c7:44:b8:f0:49:b8:0d:2d:76:0c:00:86:0b:
7d:d4:88:eb:2e:6d:37:d7:aa:96:37:f6:26:ea:45:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:AE:4D:6A:3E:77:97:26:84:4F:B6:50:67:E3:4E:94:4B:DE:56
X509v3 Authority Key Identifier:
keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f3:d6:b2:d1:f7:76:ab:c3:8c:a7:1e:ce:58:5d:b0:aa:af:
bf:8d:6f:c8:e8:f0:74:be:21:ce:ab:4c:25:8c:45:b2:a5:27:
4e:e3:33:f1:45:13:e1:11:2c:2b:31:84:5b:70:53:b8:a5:41:
e5:94:c0:99:50:dd:5f:a9:98:10:64:f2:3f:a7:5c:a6:a6:9f:
2e:4d:d3:6b:34:50:44:e3:bd:66:22:89:1d:b9:94:2d:3c:99:
4e:71:ac:f5:43:6c:cd:68:69:fc:2a:5b:ec:66:56:4d:45:05:
7b:58:f3:e8:76:87:90:3c:46:03:ae:97:f0:d3:4f:63:ed:da:
0e:08:42:da:16:59:52:c2:65:67:84:d1:df:31:03:7e:2d:44:
30:c8:e3:28:6b:78:ee:93:95:93:1a:37:24:0f:9b:9e:e7:ad:
09:bd:6b:3d:df:08:6c:a4:18:86:a2:c8:c9:3f:54:36:d4:f8:
6a:a5:b1:d3:aa:a2:51:23:13:c9:8d:27:17:45:73:07:4c:6f:
51:62:70:6a:34:32:40:5b:c6:5a:7f:ef:71:a2:a7:0a:4e:7b:
18:87:9f:31:8f:56:03:b9:fc:42:91:96:2a:74:25:ee:6a:99:
38:c8:9b:b0:2d:97:b7:93:85:72:8a:18:2a:10:14:20:7e:0d:
aa:73:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:08:30 2026 by rpki-client