Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: 11gEoV6xcPol8T0/bCvUAxfSguMM5Z19ViQRC/C/ILg=
Subject key identifier: CE:1D:6E:02:0A:E8:D9:C7:83:98:B6:21:C0:BB:8D:9D:43:7B:8C:97
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019F10E4A96F469032080557A716523F5A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 12E1
Signing time: Mon 29 Jun 2026 01:00:48 +0000
Manifest this update: Mon 29 Jun 2026 01:00:48 +0000
Manifest next update: Tue 30 Jun 2026 01:00:48 +0000
Files and hashes: 1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: NhhOySNRU66EpNmw1M47x7UGT85N2nzzPExjAGsg7HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:a9:6f:46:90:32:08:05:57:a7:16:52:3f:5a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Jun 29 01:00:48 2026 GMT
Not After : Jun 30 01:00:48 2026 GMT
Subject: CN=ce1d6e020ae8d9c78398b621c0bb8d9d437b8c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:0c:b5:ef:c9:8f:2e:5a:2f:56:a0:02:01:
fd:e2:5b:a7:00:1d:cc:1f:da:70:81:a0:e4:77:1b:
24:a8:2c:da:0a:25:e9:7b:c6:8c:76:4b:14:70:8a:
83:81:fe:69:49:20:60:fc:2d:4a:64:9f:08:07:be:
53:45:57:9d:d1:41:ff:e9:d2:05:de:79:8e:96:37:
87:9f:4e:2d:ea:d2:51:95:e1:dc:25:02:55:e7:bf:
a7:2d:ce:7a:c1:4b:5b:65:dd:49:76:f3:bd:80:80:
41:86:29:56:de:67:bb:77:33:1d:a1:dc:99:f9:d2:
6d:56:18:62:64:cd:39:31:65:0b:25:dc:da:2d:d3:
50:40:a9:66:34:35:4c:fe:ad:63:49:65:0a:2a:ad:
91:cd:d3:42:33:02:2d:f9:1a:bd:00:d9:a3:c5:e5:
78:ef:51:cf:86:9a:8d:03:d2:3e:3d:99:fd:5a:a2:
85:20:69:e7:58:8d:b7:8a:1d:d2:c0:0b:43:b2:1b:
2e:41:61:c5:2c:72:00:1c:4e:78:9a:c7:bf:a8:4f:
6b:ff:7c:a2:2c:2a:36:5d:18:2d:c9:5c:54:6f:4a:
43:54:72:ea:93:85:16:62:e8:e3:7f:f4:d3:f6:71:
d4:86:c1:c3:73:d9:d6:3a:4f:d7:9c:ec:cd:c2:53:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:6E:02:0A:E8:D9:C7:83:98:B6:21:C0:BB:8D:9D:43:7B:8C:97
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:dc:28:d6:c0:1f:8d:64:7b:35:85:cb:2c:0f:06:62:87:
fd:3b:b3:83:19:4e:06:2a:e4:29:40:d4:25:d4:b5:d2:ac:03:
ff:f7:de:64:4f:bc:58:23:1f:bd:20:10:eb:a6:9a:5b:59:d5:
b9:2a:cf:18:5f:4b:91:0d:9e:c9:ee:ad:20:76:23:72:09:6f:
59:e3:03:4f:59:e0:61:29:a6:12:fb:07:41:53:d9:ed:2d:ee:
6c:27:be:3a:c1:19:fe:66:6b:a7:de:fb:3c:61:9c:1d:04:03:
9d:c3:75:96:88:50:b8:f5:f3:aa:de:35:8f:eb:20:9b:19:28:
7e:45:8f:2d:81:3b:a3:10:2b:af:c4:6d:30:80:37:bc:d8:74:
f6:ac:99:bc:c5:b8:52:ba:a5:b3:91:62:f1:72:92:55:da:d0:
0b:2b:71:f0:06:12:2f:14:f1:e0:99:49:db:b0:ff:f4:0f:1a:
67:3b:c5:a2:74:5c:12:4c:b8:5a:99:59:5e:6b:fb:04:63:01:
09:75:d6:87:74:6f:55:43:ec:12:9e:26:1b:9e:eb:ae:2b:c4:
aa:12:04:c2:61:ec:53:18:55:cc:cb:9c:fc:ac:08:87:da:49:
52:7f:dd:fa:4c:16:d2:ee:ce:40:55:8d:bf:82:51:34:46:1b:
e3:f1:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:14 2026 by rpki-client