Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: 7U/630IsbABOCxlxK9QDZpk6bxRBLnoubYCQToQgVdM=
Subject key identifier: 9F:0F:06:E3:9E:28:9A:C1:10:8A:6A:D6:22:54:43:15:C6:4F:30:25
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019EE6316AEA00900E922767DDDD6EC0FF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0BA0
Signing time: Sat 20 Jun 2026 18:00:58 +0000
Manifest this update: Sat 20 Jun 2026 18:00:58 +0000
Manifest next update: Sun 21 Jun 2026 18:00:58 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: 6D4JtQuja+EK5mScV1rM9uRB0ng7q9mtnms/b2V1dcg=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:31:6a:ea:00:90:0e:92:27:67:dd:dd:6e:c0:ff:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jun 20 18:00:58 2026 GMT
Not After : Jun 21 18:00:58 2026 GMT
Subject: CN=9f0f06e39e289ac1108a6ad622544315c64f3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:15:eb:30:98:62:5c:e4:3c:7f:97:3f:df:
e1:ed:32:70:46:39:b6:bd:47:15:2f:8b:46:fc:8c:
cd:fe:03:fb:a2:8d:c3:b9:2b:fe:77:46:9a:a3:24:
1d:17:03:02:dc:d2:8d:71:e0:12:bd:2d:42:5a:50:
ef:51:ba:17:df:cb:b3:64:13:dc:25:38:57:a3:0c:
c7:2e:05:20:be:62:35:78:fa:fa:43:a5:f1:9f:e3:
31:65:92:51:e0:ac:bc:cf:cc:eb:e4:24:da:1a:91:
af:7a:05:94:5c:7a:1b:61:8d:cb:45:6a:f1:cf:2c:
f2:08:b8:fe:48:86:af:a6:78:58:9b:b6:bf:a6:0f:
7e:5c:97:d0:d9:60:2a:7a:c6:b8:e7:73:b5:d6:58:
9a:6e:26:51:b9:4e:1e:8b:17:08:42:90:9d:17:20:
3b:b2:23:f2:b3:cb:52:88:db:4c:ba:7c:ef:e2:25:
f3:1e:56:90:26:63:9d:5d:4c:f1:6b:b2:78:f0:99:
8d:e3:87:2e:72:6c:10:32:0e:c6:9e:00:48:7f:42:
14:5b:02:f1:75:08:df:ff:b8:e1:77:6e:25:58:8e:
5e:69:34:75:33:47:b8:97:83:78:83:54:fb:ce:9c:
52:cd:e6:a2:95:3d:45:7d:d3:67:2a:32:b2:7d:c6:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:06:E3:9E:28:9A:C1:10:8A:6A:D6:22:54:43:15:C6:4F:30:25
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a2:2a:73:e9:c0:ea:b5:76:ee:17:de:ba:41:ad:c2:78:eb:
9d:7d:2c:44:b9:19:66:69:8f:72:39:52:ba:41:78:fe:1f:6d:
83:f7:29:c8:a4:f8:ce:3d:74:49:df:7d:f0:b1:18:3a:c8:fa:
70:fa:76:c0:fd:35:6e:24:01:6f:b8:60:2d:b9:67:36:70:3f:
4c:b6:d7:2e:ce:12:37:53:21:58:fe:72:60:0a:f9:ad:af:a6:
70:fd:fc:b1:71:95:38:22:3a:64:96:2e:e4:e6:b5:48:88:b8:
63:0e:e8:7e:a9:4c:b9:9d:8d:b3:a5:09:96:36:f5:ac:89:0d:
78:90:6e:ce:de:84:1b:e8:bd:df:5c:fc:b7:a1:1c:47:a3:3d:
f6:2d:43:92:15:9c:86:0b:f6:6b:ca:38:ab:8f:e8:74:b5:68:
cb:53:a1:65:3a:c2:41:c1:48:31:ff:3b:4c:89:87:18:d6:6f:
14:db:3e:c6:00:c9:80:4c:d3:7e:bc:60:25:74:a9:9d:08:f8:
c5:37:77:90:da:66:3a:44:1c:d2:8d:70:51:dd:70:3b:83:91:
8e:b0:9a:dd:0c:e2:f4:3e:8e:c3:c5:2e:c6:d4:12:16:9f:d6:
92:e4:99:e7:88:3c:dd:a6:44:a4:5d:bf:7c:6c:e2:ac:8c:5f:
56:fe:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:46:52 2026 by rpki-client