Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: V9n2mfbDqeWyv6I+cJYuJ6rp6i08masid1ja5OJMOyk=
Subject key identifier: 7F:71:D0:4A:74:6C:EE:21:76:50:6B:DB:1D:D4:FA:C4:39:F5:11:17
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019E3297F9F547BD75C3872668F45DBBF6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 0936
Signing time: Sat 16 May 2026 21:01:21 +0000
Manifest this update: Sat 16 May 2026 21:01:21 +0000
Manifest next update: Sun 17 May 2026 21:01:21 +0000
Files and hashes: 1: 5lccFV7z00Cs1oDdNniBnwJlbmg.roa (hash: EKtkvQVGangOVXfHSHz8QSCp4ca+LhVxZlvPGnv/+3A=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: xZEDnDKQwlB7HBoN5oW6WEBf48fWsbM7vhH3HOa/eTc=)
3: h2Nk51GuKgghBJnfq43oIlhnlQU.roa (hash: 7U6ydDPGZOGz+9K+gyHhz/1ZK19NLUr8kgoPbn/12NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:f9:f5:47:bd:75:c3:87:26:68:f4:5d:bb:f6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: May 16 21:01:21 2026 GMT
Not After : May 17 21:01:21 2026 GMT
Subject: CN=7f71d04a746cee2176506bdb1dd4fac439f51117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:57:af:8d:1f:94:86:13:ff:84:82:9e:f2:
30:f7:35:99:1c:9f:19:46:05:ee:2f:29:9b:28:94:
b7:96:05:09:7e:ac:b5:0c:84:5f:7c:a0:a5:2b:15:
05:12:36:96:00:e7:e2:38:7f:d6:48:3c:3c:cc:e8:
4a:18:67:bd:ab:7e:27:06:58:55:5c:77:63:a9:8e:
8d:9e:c3:70:0e:c8:cc:86:08:d0:45:21:9a:d7:b9:
1d:2a:1a:e1:01:89:d5:5e:5c:46:dd:67:30:f1:0b:
9b:ea:99:b2:b0:87:82:b5:f1:dd:0c:34:ef:01:73:
ad:ef:33:be:72:aa:56:41:48:8f:3a:f5:2b:17:32:
31:b0:28:54:42:95:2e:22:59:dd:f1:16:e0:3f:06:
3b:45:b0:09:13:dc:a2:79:e1:49:87:42:b9:9b:81:
31:ca:be:06:df:77:eb:51:fe:38:0b:f6:49:bc:b6:
c2:72:48:ed:35:0f:62:32:91:7d:68:b4:e3:06:ec:
fe:d6:1d:18:40:63:5d:fe:8c:2d:d8:55:cb:45:a5:
56:e8:f3:cb:4f:b7:4c:ab:a6:49:e1:9f:ff:d2:62:
db:ef:45:88:cb:1e:c8:0c:7a:47:bd:53:0e:d9:1f:
ba:fd:80:5e:ec:c5:27:f7:83:05:90:a8:ca:a7:7f:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:71:D0:4A:74:6C:EE:21:76:50:6B:DB:1D:D4:FA:C4:39:F5:11:17
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:84:a5:c1:3b:f8:69:57:d0:b2:22:fc:90:05:88:17:ad:
34:50:96:6c:38:ad:98:f2:b2:f2:0d:95:5e:6b:61:5f:d7:f0:
30:11:0a:10:63:7a:7f:f8:67:3d:22:f2:3b:16:5a:14:55:f2:
f4:d2:94:d4:37:32:bc:4c:a6:7c:6e:9b:3e:69:8d:b1:ba:d9:
a0:42:54:94:64:e6:6e:a3:f9:88:b1:e4:c4:b3:a9:20:89:30:
41:fd:2a:6a:ab:08:0b:5b:2b:ed:4c:3b:b1:7f:ad:16:a1:06:
7c:d2:db:b5:d4:2f:e3:17:24:24:a9:ed:56:3f:ef:66:79:13:
52:b8:92:be:94:00:2c:34:9b:c8:fb:d1:7e:70:c3:de:a5:a5:
b4:40:a3:b8:71:08:ce:a5:ec:39:07:e5:ca:54:b7:d8:0b:2a:
03:99:6c:6f:12:3e:63:98:e0:ed:46:c8:d9:63:49:20:e5:01:
62:20:1b:82:f6:3c:f8:64:d4:c4:1f:f3:40:b7:5e:a8:ea:60:
1f:b8:6e:9e:d2:64:be:cc:15:af:9d:5c:b8:be:7b:c8:49:32:
90:d5:43:4e:cf:d5:ef:16:d8:c8:6f:c6:ed:c3:26:06:f8:86:
c6:81:a8:dc:ef:17:4e:bb:df:b5:3f:05:b3:2a:5d:4a:a0:85:
32:3c:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:35 2026 by rpki-client