Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: UOmWtIPMQCjFz62BY03QyBwieaJ77vn3YHcA3GjypkQ=
Subject key identifier: B4:D3:EE:97:16:FC:8E:6D:ED:13:74:25:06:20:6C:0E:81:6A:AA:26
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019E4E7D8A7C593B5232D871546A87D465CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1920
Signing time: Fri 22 May 2026 07:01:50 +0000
Manifest this update: Fri 22 May 2026 07:01:50 +0000
Manifest next update: Sat 23 May 2026 07:01:50 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: Cqme0SGDDJffd/Hj4c/QERHj+OWOlcNbScTG9CPtVoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7d:8a:7c:59:3b:52:32:d8:71:54:6a:87:d4:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: May 22 07:01:50 2026 GMT
Not After : May 23 07:01:50 2026 GMT
Subject: CN=b4d3ee9716fc8e6ded13742506206c0e816aaa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:2f:b5:be:d1:53:72:cb:1b:2a:f8:be:71:
45:c9:0f:27:e0:a5:89:f9:69:a2:1b:14:d3:25:f6:
87:62:6c:61:19:8a:e0:5d:e2:d8:1d:58:80:85:05:
5c:b4:f0:73:8e:db:b5:f7:40:a3:33:74:99:e3:d1:
21:f7:14:c1:c1:2a:05:14:be:05:7f:e2:f4:34:64:
38:ad:d3:4a:ea:87:ff:94:a5:31:40:1f:30:0f:1c:
0c:f7:53:34:f2:3b:b0:c1:92:24:66:14:01:0f:fc:
4e:4d:7f:c7:c1:c4:5b:45:22:ae:5b:a3:5e:8d:47:
95:6f:c9:02:a9:66:8f:9b:64:9b:65:5b:f9:6d:c0:
b3:2e:56:95:49:e0:ae:20:2f:cf:52:d5:52:a7:3c:
76:d2:3c:61:aa:3c:3e:04:e0:e1:51:e3:64:2c:f9:
38:ec:31:0a:52:2d:04:b2:a8:46:e9:45:49:b4:a6:
72:fc:25:fc:63:6e:02:7c:51:36:34:f9:fe:f6:33:
ae:d0:91:42:33:c8:29:55:e2:ef:6d:68:6c:18:f0:
5d:a8:23:a2:b1:70:7d:00:e0:8b:a7:07:50:23:a8:
3c:18:83:27:56:f3:ed:40:4b:4a:a2:b8:81:45:71:
e7:40:c6:e4:9f:08:6e:2b:da:5f:c2:a2:fd:d1:42:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:EE:97:16:FC:8E:6D:ED:13:74:25:06:20:6C:0E:81:6A:AA:26
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a1:5f:50:23:f6:cb:0b:ed:76:96:98:3b:76:d8:e8:2f:2b:
62:00:fb:8d:4c:39:ee:5a:18:62:d1:37:15:70:e6:f5:c8:11:
ef:2e:f7:cd:8e:09:3d:e5:f1:13:c3:23:8f:e0:a6:2d:49:8c:
d0:49:cb:d7:af:cc:f7:63:40:fc:78:0d:d1:ab:a1:03:5f:a8:
68:5c:c8:02:0d:d8:66:72:b3:4c:f4:87:08:da:03:0b:aa:6f:
9e:8e:90:7e:50:00:60:be:f2:5c:16:4f:ea:27:1e:96:cb:64:
ba:c0:19:c5:b8:da:e1:0a:30:0b:a8:69:f4:2b:65:95:54:9c:
20:5f:fd:9b:52:dd:a7:a9:ab:cc:4e:b1:32:8a:e2:94:fc:79:
34:08:4f:5a:cb:43:1a:d0:f5:b4:9a:0a:87:8f:6b:f6:8e:8e:
39:fd:e2:11:fa:3a:ce:10:06:47:27:e9:f6:c1:fb:80:26:af:
b9:60:34:ec:4b:c5:92:9c:e1:c8:74:6e:45:9f:e1:c3:93:89:
31:f4:b2:d4:79:58:6c:6a:3d:45:fe:87:e3:8a:4e:0e:cf:e8:
67:47:45:54:57:a1:4a:b0:56:91:e7:bb:3f:71:cd:c9:34:17:
a8:fd:c2:06:07:a5:54:b6:51:3e:4a:4c:48:b1:9c:8c:cd:3e:
dd:2a:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:16 2026 by rpki-client