
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: uyInbjeu1HeLd6l/tdcSupyy3/b2dDsZeWT2DOUvMSg=
Subject key identifier: FA:A8:F4:E9:44:21:D0:42:39:09:D1:F7:83:5B:61:BB:4F:F9:9D:F9
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 019EB9585B0B9A5CE7DB2531A5D457803FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 13DF
Signing time: Fri 12 Jun 2026 01:00:35 +0000
Manifest this update: Fri 12 Jun 2026 01:00:35 +0000
Manifest next update: Sat 13 Jun 2026 01:00:35 +0000
Files and hashes: 1: VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa (hash: djTEy2SpZpwfwHAY9CNLF5jemLo53ls13ygOIxPg5rI=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: udDxsk4SCYJcpQ++rUm8ehpLSRpkEy9VNsnY6YW7QQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:5b:0b:9a:5c:e7:db:25:31:a5:d4:57:80:3f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jun 12 01:00:35 2026 GMT
Not After : Jun 13 01:00:35 2026 GMT
Subject: CN=faa8f4e94421d0423909d1f7835b61bb4ff99df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fd:55:91:b7:ae:3f:4b:03:42:45:6a:49:2f:
35:42:ad:be:6b:fb:19:51:5d:f9:bc:41:19:00:5b:
0c:dc:97:36:41:2b:cc:99:80:7c:24:00:9d:7f:6d:
e8:86:a7:5d:79:76:8e:81:55:c0:73:9c:f0:02:12:
30:9b:94:97:0d:9b:4c:12:35:98:9f:a0:ac:8f:4a:
ab:96:b9:b7:28:7b:c1:63:de:14:d3:d2:36:60:b9:
9a:68:04:ac:fe:de:c4:f8:5b:e8:b2:2c:d6:77:ca:
89:92:f7:c0:5b:81:99:df:1c:bc:b4:83:26:55:0f:
b5:c5:82:be:12:ad:89:ae:9d:3a:f3:34:e1:32:40:
55:2c:fd:da:d4:8b:0f:91:04:e9:74:ad:48:5d:81:
58:ca:05:5b:bc:e1:6a:e4:fe:01:a1:ca:22:0a:a4:
7a:46:61:1b:34:e3:eb:3e:34:c9:90:25:be:44:5c:
ce:f0:a3:ac:29:8b:70:87:d7:42:06:9b:d8:0c:c6:
7b:2c:06:0c:34:61:04:23:24:74:38:d9:15:19:8a:
35:3a:43:d6:aa:69:a3:0d:58:66:00:59:36:45:9e:
d1:64:ec:f4:85:9f:02:b1:e2:40:0d:67:1c:91:dc:
28:d9:8a:8f:71:bd:a4:bf:e6:8b:22:75:7a:62:50:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A8:F4:E9:44:21:D0:42:39:09:D1:F7:83:5B:61:BB:4F:F9:9D:F9
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:7c:0a:da:2d:32:77:eb:c3:f4:e2:f0:87:33:06:9a:0e:
dd:09:da:e9:64:aa:0a:5e:fb:d0:6f:ee:b6:43:ef:de:7c:11:
b7:3c:e2:4a:f8:cd:d1:f0:a3:af:ee:be:8b:3e:9b:3e:13:a2:
de:43:76:54:c7:94:b5:8d:d0:ef:d2:29:f9:73:f3:66:b3:18:
82:c0:22:cc:d7:08:d6:c3:c3:3e:96:f8:3f:c8:c2:ff:2f:bc:
02:43:4b:96:74:b0:43:07:03:11:1e:5f:77:aa:7e:e9:6d:bc:
4f:52:a5:05:57:3d:d8:6a:e2:7c:60:67:dd:b6:36:6b:af:c0:
73:a8:43:e6:11:3f:41:cf:00:eb:50:c1:93:cf:3e:ba:6d:31:
f3:a2:a2:b5:32:f3:1e:5c:bf:fe:1b:e3:3a:bb:39:f1:2f:3b:
d5:0d:e1:53:04:75:0a:04:e3:8b:52:a4:96:84:08:96:d7:57:
76:45:30:82:7d:7c:48:f8:e1:8a:d1:2c:27:49:95:4a:1e:71:
29:2c:a4:70:62:9b:9f:15:c4:58:92:63:5b:c2:ca:a9:88:08:
cf:b8:0c:8d:a2:30:b6:12:f9:20:a9:e5:03:fa:6e:18:fe:6f:
26:41:5d:e7:24:cb:26:05:d9:4b:c9:1d:79:0e:56:05:99:73:
84:af:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:51:38 2026 by rpki-client