Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: VuESEl1Apr5+J90jWwetl1jBLzAJxzjX0XGkL6IPuck=
Subject key identifier: BE:9D:F9:09:59:1C:B9:39:3E:7D:DB:EB:F0:04:B7:AE:B3:90:DD:8D
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 019E2211AA8DE9FCCDB9B4AD5567A0C1AB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 1204
Signing time: Wed 13 May 2026 16:00:43 +0000
Manifest this update: Wed 13 May 2026 16:00:43 +0000
Manifest next update: Thu 14 May 2026 16:00:43 +0000
Files and hashes: 1: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: fKFjxabLZ5PQGico4gS8w/Em6xLF0eTgjHlTbwoBkGs=)
2: T3EGh-bdCIIZhG5HJojpnlqKL2c.roa (hash: bufDKb7bJ5Yg3D29mO4Y90yES19oPGAgCv9pA/tjktA=)
3: iUyBvay1HB04jjUCqmLzofikeiI.roa (hash: YQOqKVVvW96raR8LDZq/96IB++aevKxnzXinzAloqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:11:aa:8d:e9:fc:cd:b9:b4:ad:55:67:a0:c1:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: May 13 16:00:43 2026 GMT
Not After : May 14 16:00:43 2026 GMT
Subject: CN=be9df909591cb9393e7ddbebf004b7aeb390dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:f4:ad:37:c8:7c:e7:00:b3:47:cc:ae:c1:
03:5c:10:74:05:be:40:a4:47:82:c4:05:d7:b0:62:
5f:fb:87:7e:da:61:8a:fd:34:e9:78:f1:6d:1b:d8:
16:26:b8:ba:9c:d2:cd:16:6c:f2:5e:df:dd:9b:8d:
4a:d6:23:c0:68:5d:02:6b:a7:99:6f:6f:22:03:21:
04:a9:48:07:cb:dd:0d:8e:5c:25:10:16:da:25:21:
3a:81:8c:fd:47:32:65:a0:13:75:6e:c1:40:88:96:
4e:c5:e8:54:43:ec:1c:b6:25:3f:1a:5e:4a:65:ec:
83:3a:06:f3:70:57:46:d3:4c:aa:63:b0:3a:72:5f:
fc:ec:dc:54:a7:70:fa:dd:52:bf:a0:48:36:8c:30:
a0:85:e2:73:d1:dc:3f:49:86:70:ae:cf:58:ad:d1:
b5:30:e9:92:e3:58:3b:6a:d2:a7:28:4f:ae:81:f1:
c9:ad:6d:e2:12:93:95:01:96:a6:37:36:10:11:00:
96:ec:bb:81:e0:75:23:02:1a:6e:5c:ca:60:2a:51:
9a:bd:23:03:bb:c4:1a:bc:c2:1d:bb:03:b3:17:45:
c2:64:57:8a:12:95:6b:8f:76:10:2c:5f:81:3b:27:
06:15:c6:67:00:c5:2e:41:de:dd:80:bd:4e:0f:b4:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:F9:09:59:1C:B9:39:3E:7D:DB:EB:F0:04:B7:AE:B3:90:DD:8D
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:f9:a2:78:e6:c8:29:a6:9b:1c:bd:71:f1:51:e6:90:53:
3e:3b:4b:a3:78:a0:57:d7:7c:ed:b9:93:64:85:e9:e3:6a:e0:
aa:13:45:b3:a3:d0:f2:6f:84:83:b6:07:6f:85:2c:67:63:3e:
75:a5:ed:94:30:48:55:9c:d5:29:3b:f4:b9:9b:e8:6f:84:1c:
ee:c7:3a:e5:e2:01:54:32:17:31:8d:2e:0f:c8:bc:73:b1:9d:
87:01:fd:0d:d9:4d:f1:88:f7:f6:2d:6c:56:b1:e9:23:38:71:
31:db:85:ca:b7:64:d6:48:57:e4:f7:bb:3c:b1:e8:0d:97:e1:
1e:7f:f4:83:a2:3a:7b:58:7e:c5:70:3d:78:fc:e9:4e:c6:6f:
e8:27:87:fd:9c:c0:6b:98:fe:3f:02:9a:26:fa:13:5f:dd:e1:
86:c0:38:6c:f2:f8:d6:1a:31:1e:05:9a:d3:b0:c7:c9:f2:b1:
84:7b:43:83:c8:e9:75:0e:b5:25:36:49:9e:6e:53:73:23:48:
8e:08:dd:16:61:a9:33:d0:db:08:f9:be:92:27:63:de:37:76:
50:a5:59:53:bc:6d:c6:7b:b6:e7:de:38:a3:d6:66:48:a2:95:
e5:81:f5:67:d7:34:58:1f:fe:54:03:51:02:cc:a9:95:0b:29:
49:a1:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:28:46 2026 by rpki-client