Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: oNA3BwDhK1U/jItNPesOoFntQ9Lv7bi5n6v8t2r/X+s=
Subject key identifier: 1B:80:B8:C2:3C:8F:1C:2C:0F:DF:B3:B3:89:FC:2F:E9:A5:2C:C9:54
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019E32982653AAE9E22D502D70EB8EBF21E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 21:01:32 +0000
Manifest this update: Sat 16 May 2026 21:01:32 +0000
Manifest next update: Sun 17 May 2026 21:01:32 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: qM+rBqyL/Tc2UeIgsB1NCzAp9W/YzUUAhHPsmYEHG1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:26:53:aa:e9:e2:2d:50:2d:70:eb:8e:bf:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: May 16 21:01:32 2026 GMT
Not After : May 17 21:01:32 2026 GMT
Subject: CN=1b80b8c23c8f1c2c0fdfb3b389fc2fe9a52cc954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:69:0a:a7:b1:37:32:27:0e:e4:37:db:09:
4a:28:ef:97:a7:e9:23:9d:51:3e:e2:69:6f:4b:bb:
e1:60:28:9f:ec:8a:09:a7:34:14:66:a5:7e:8c:ab:
9e:1b:3b:59:5a:c8:9c:4b:f5:29:8f:dd:08:55:fe:
71:fb:87:fb:36:e5:89:5c:01:8f:3b:74:85:c7:6c:
1e:f8:b2:d6:5b:e9:9b:b7:ba:af:66:9f:67:d7:95:
0c:34:77:a1:b0:19:ff:37:67:47:19:4e:ac:06:8c:
17:69:f9:2c:a3:f1:cf:06:7d:a0:45:78:fb:2f:23:
d5:4e:c4:a1:4a:a3:c7:d6:d5:5b:87:59:a9:a5:8d:
d9:07:25:66:47:79:30:7d:c3:ea:ee:da:3c:a0:54:
86:f8:96:0c:61:f8:b7:f4:5e:64:64:0e:81:64:64:
5d:d0:49:e1:72:e5:6b:b3:73:27:0a:29:fb:4e:df:
e3:d6:f5:49:21:61:aa:d6:33:4a:00:6c:7b:de:ee:
8d:cb:43:c6:e7:6e:f9:88:d2:72:b9:97:1f:48:66:
c5:d0:06:54:20:42:9f:53:27:bd:fa:22:4f:fa:85:
06:ba:d0:31:a3:e6:74:80:1d:1c:2f:bb:c4:03:fa:
de:de:94:54:a6:8a:e4:e3:3b:c8:bd:45:e3:5f:76:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:B8:C2:3C:8F:1C:2C:0F:DF:B3:B3:89:FC:2F:E9:A5:2C:C9:54
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:d0:31:52:ec:46:9e:e5:7c:4e:bf:0a:b4:76:b8:e0:ce:
56:c5:dc:c8:00:85:f8:db:06:1f:48:19:c4:f2:21:7a:c2:0f:
69:11:97:30:f1:e5:ea:43:66:98:61:5d:20:21:24:ca:69:1f:
8b:8d:9f:0b:cd:f2:e2:dc:0c:7f:e1:cc:cf:9e:7d:4e:92:75:
d7:ec:3c:a6:13:db:b0:81:d4:9d:21:70:6d:7d:19:dd:54:73:
2c:2d:d7:eb:6e:b1:b6:82:0e:c3:a3:d4:28:f2:d1:17:a3:cb:
b5:6c:97:d3:5f:6e:37:24:d8:cd:bc:1d:b1:a2:a7:bc:c9:1f:
81:be:c4:dd:b4:9c:5a:7a:33:a2:43:eb:c4:4c:4b:1d:18:a2:
a6:e6:a1:cd:48:d0:0c:a3:33:b3:e7:06:07:53:08:8e:f3:45:
83:1e:2e:aa:ca:24:1b:a2:20:5b:44:60:96:3a:87:f1:bc:94:
3e:ba:b6:42:cc:28:1c:18:c7:7b:0c:9f:11:c8:9b:da:f9:0f:
da:ee:73:21:2e:02:6c:31:3f:00:75:8b:1b:66:e1:f2:1b:c1:
a9:fc:10:4d:cc:ca:39:ac:66:02:da:0a:3c:94:75:d4:a8:ce:
28:22:81:a5:a5:3b:ee:e9:1b:9e:44:d1:08:c7:c0:fc:3e:85:
24:fd:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:26 2026 by rpki-client