Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: ZvIrYnZ4OsadDoZF55rOe9TBbuCXLKeskJLHx+BV/ZE=
Subject key identifier: 55:EC:30:F8:86:19:10:98:B8:FF:20:5C:5E:44:69:B6:5B:2E:56:12
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 019EB7D81B60AAFBAC7073352116632B0D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 18:00:53 +0000
Manifest this update: Thu 11 Jun 2026 18:00:53 +0000
Manifest next update: Fri 12 Jun 2026 18:00:53 +0000
Files and hashes: 1: Rh1jP8TT0D5DQyewHt3WNVRetYg.roa (hash: +Z1++BSabnl+/JfrPmXmRibZf7uuXCCwxkF76/QL4Zw=)
2: gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa (hash: JnttzcUryU3xosibqHjelq7W7OqvhTZhKK40TmRyAXo=)
3: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: eTrMXuqYGd9+1q/uCH2rOoLsmmK2cx2Dcujq3cRmxuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:1b:60:aa:fb:ac:70:73:35:21:16:63:2b:0d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Jun 11 18:00:53 2026 GMT
Not After : Jun 12 18:00:53 2026 GMT
Subject: CN=55ec30f886191098b8ff205c5e4469b65b2e5612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:df:94:f2:55:62:31:a5:8a:93:1a:7d:4f:
dd:a3:99:47:ca:42:75:03:b0:02:1e:dd:68:b0:84:
42:d7:e2:d1:8c:6e:cc:14:d8:37:8b:39:5a:ef:8a:
ea:9c:5a:27:c1:cb:41:39:61:38:69:cc:26:15:cd:
6a:b9:cb:6c:1d:56:bc:e8:f5:2b:83:9e:21:ba:fa:
54:4d:b9:35:a8:c3:be:d8:14:3d:85:d3:81:4c:f0:
1a:30:be:21:79:8e:66:8a:a9:70:e4:5c:f4:46:36:
1c:ca:43:f3:54:db:32:78:ad:9b:54:fc:e4:fd:60:
b0:37:ae:b1:89:ec:af:93:e0:8c:aa:a1:12:db:06:
28:90:ef:a8:74:36:15:50:b2:9a:80:b3:ad:f3:f6:
70:d3:18:81:ac:af:f9:54:ba:2c:a8:97:b4:e4:ec:
c2:d5:74:04:33:79:23:a2:b2:ec:9e:95:cf:e0:3d:
c9:eb:58:36:c5:b9:dd:ea:c5:4b:8a:d1:c7:1f:4a:
bb:31:ba:e2:a1:3e:d0:02:09:a7:64:db:5e:da:e0:
bb:90:6b:5a:9f:c2:48:fb:f3:36:2c:4a:24:4d:af:
48:1d:89:ed:6a:23:3f:f4:e0:b4:5b:51:fa:d0:72:
c8:bc:60:84:85:19:f7:ae:d3:ac:d9:96:1d:de:82:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EC:30:F8:86:19:10:98:B8:FF:20:5C:5E:44:69:B6:5B:2E:56:12
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ad:1c:0b:93:57:f8:e7:66:67:97:e3:57:cf:17:3b:26:de:
9e:0a:ef:3a:43:e3:5d:72:cd:1f:a5:52:0f:a0:f2:5b:a6:3a:
0e:03:80:d2:f8:03:cb:13:6a:7c:94:e0:a9:b5:72:70:de:83:
63:0d:ff:35:4b:fd:1d:05:56:9e:0b:d8:d6:6a:97:53:39:54:
4d:92:e5:bb:dd:ba:b6:4c:12:a3:5f:33:70:a9:5f:81:22:f3:
a5:4e:a8:79:87:2e:f5:63:ae:b8:4f:b0:b6:5a:da:43:1d:f8:
17:b6:30:2e:07:29:ee:ba:d6:a5:90:7c:b7:88:ac:ae:5a:90:
31:ae:eb:2d:e1:0b:24:e4:44:ac:27:bc:d2:35:c7:58:fc:1c:
0c:f9:13:89:06:24:3c:5e:84:30:37:90:7b:da:0d:f8:5b:93:
99:97:26:26:91:5c:43:ed:38:18:24:21:0a:3a:dc:c1:5e:4d:
15:d2:0e:9a:7d:25:61:53:3f:f5:de:57:1e:bc:5e:11:08:c6:
80:1f:1f:2f:82:b2:e6:21:37:cb:98:c0:96:91:8b:49:9c:c2:
16:fd:9f:4c:06:c3:0a:d3:39:af:55:47:59:0b:da:fa:aa:bb:
0a:63:e0:4e:50:f3:49:e3:74:89:86:10:e0:1f:f8:70:78:79:
18:e9:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:28:37 2026 by rpki-client