Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: qa903846Xf5LDtA8dkef79gpnSdxHhac6oZh55iAZNs=
Subject key identifier: E9:64:BF:06:91:5B:75:89:B3:BD:1A:BD:C7:6B:F7:E7:79:1A:9E:A0
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019EA074895BEF17E0D3AA4B940B007698C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 1728
Signing time: Sun 07 Jun 2026 05:00:52 +0000
Manifest this update: Sun 07 Jun 2026 05:00:52 +0000
Manifest next update: Mon 08 Jun 2026 05:00:52 +0000
Files and hashes: 1: AO06uJHkVshYcEPLGfhX8Uw9gpc.roa (hash: 5SvwdBIYhvyrwzSR8AKYSXgpfbX0MUkDamcTaTo4pOY=)
2: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: /9MjOkXMLjh0k/1ZEqgEId3BDirAcLUg/oCqGe7LxFo=)
3: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:74:89:5b:ef:17:e0:d3:aa:4b:94:0b:00:76:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Jun 7 05:00:52 2026 GMT
Not After : Jun 8 05:00:52 2026 GMT
Subject: CN=e964bf06915b7589b3bd1abdc76bf7e7791a9ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:76:26:12:ea:a8:ec:d3:20:9e:9f:5a:61:
4f:db:0a:53:80:12:fb:2b:dc:f8:93:47:81:66:fa:
86:54:f0:1d:91:7a:14:95:eb:47:74:82:08:49:b4:
12:aa:15:ec:ad:97:03:59:ba:3c:1e:f9:5f:cb:42:
f7:ab:ac:d1:40:e1:2c:1c:bd:7f:3c:6d:ed:b8:2c:
f1:76:81:2d:86:ad:2e:a5:9f:f4:82:95:1e:e6:74:
57:f1:a8:32:e0:31:94:6a:9f:06:ae:65:83:85:bb:
b1:64:15:4e:dd:db:aa:35:39:5c:c6:5a:fe:4d:ed:
18:ff:27:60:af:10:4b:ad:96:94:ed:f6:6d:b6:d3:
d6:4d:83:5a:d9:fa:50:74:24:98:cd:f3:74:33:2f:
fa:60:cd:27:90:19:04:7d:30:12:0d:61:5b:46:98:
9d:70:e2:16:c3:9f:57:26:f4:3e:cf:cd:c6:ee:28:
5b:3e:97:41:0a:56:a9:7d:03:66:ed:90:c1:26:38:
49:78:80:5e:ee:81:98:82:ab:b2:9c:24:66:2a:f8:
fe:d2:41:aa:41:e5:c9:f5:f5:90:1c:c4:5a:03:06:
c2:5e:cf:4f:79:bd:bc:62:a9:a4:80:bd:a1:70:4d:
f9:12:94:cc:29:42:5d:9c:fd:71:64:06:1c:33:8f:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:BF:06:91:5B:75:89:B3:BD:1A:BD:C7:6B:F7:E7:79:1A:9E:A0
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:7a:20:2d:be:6a:77:37:1c:9c:40:ed:a2:99:2d:0d:22:
e7:51:ac:32:90:8b:41:5d:23:d7:dd:13:67:70:ee:2d:d5:a9:
d9:da:c1:4c:d3:8b:05:d9:18:8b:e9:37:a2:8f:7b:66:cb:2f:
68:42:49:46:9a:63:b1:7b:b2:33:aa:bf:5f:ca:2e:de:50:98:
78:39:31:0f:43:7a:01:c1:13:63:88:26:cf:a8:e4:6d:7e:87:
f1:c9:a0:62:b4:2e:e3:34:a8:44:f7:b5:56:5d:5e:f7:51:e9:
b2:59:df:05:6a:18:cb:89:73:b3:6a:22:86:cb:96:01:83:38:
d5:22:13:a9:fb:50:1d:db:e9:e3:a4:1b:68:1b:37:93:53:d4:
6e:f3:8d:c5:eb:7f:2d:26:a5:04:c8:c5:c7:3f:f5:d6:80:15:
b7:d7:c1:54:a1:95:46:f4:80:07:26:81:35:37:ed:bb:bc:26:
4c:0d:cb:74:aa:75:09:a9:a1:a9:05:68:47:22:5b:a4:b7:ae:
b9:59:ea:c5:02:e4:c0:36:12:c0:1d:f9:aa:5d:b7:0b:ee:f1:
5c:e8:dc:13:1b:9f:c1:01:87:97:6c:dc:6c:a2:8f:38:5b:a5:
5a:61:04:4f:71:f8:97:cd:cc:9e:57:81:66:42:b1:64:b0:e8:
57:e8:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 12:23:15 2026 by rpki-client