Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: w/8fVONDVbCD1PAci9pPOCp9xFvDdNI6jfFY7/tOjio=
Subject key identifier: A1:C4:13:53:16:40:11:9B:8A:A7:4A:81:6F:C6:86:39:4F:A9:78:EB
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019EB921A6985AC6900EC515B522AF2F0A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 151A
Signing time: Fri 12 Jun 2026 00:00:50 +0000
Manifest this update: Fri 12 Jun 2026 00:00:50 +0000
Manifest next update: Sat 13 Jun 2026 00:00:50 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: PgZF9gIpLrlmiJkd7nhmKYGY/nzISR/WkOcXZ5YUj0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:a6:98:5a:c6:90:0e:c5:15:b5:22:af:2f:0a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jun 12 00:00:50 2026 GMT
Not After : Jun 13 00:00:50 2026 GMT
Subject: CN=a1c413531640119b8aa74a816fc686394fa978eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:70:92:02:f5:35:50:f4:04:8b:82:11:85:
62:50:33:a8:e4:f6:6f:e5:a6:55:d1:37:61:12:a8:
90:7d:61:67:f3:52:22:bd:8a:0d:2c:b1:e9:a1:53:
72:a3:18:b1:d2:88:2a:3d:4e:63:5c:92:63:f1:23:
51:ca:43:a0:b1:a1:5c:84:b3:c7:f3:2f:7c:5f:27:
d8:dd:79:4a:f2:22:69:19:25:5e:56:08:da:ea:21:
02:a8:d8:25:9d:5a:66:b6:44:1d:78:bc:ec:e1:c7:
4c:0f:80:76:56:0d:e2:3b:04:f7:c9:aa:35:e8:76:
9e:a8:aa:a1:07:7d:f8:ea:c5:ff:71:29:22:19:0b:
38:db:81:20:1b:64:27:a5:0a:e9:17:a4:6a:e6:0d:
30:b1:ad:19:70:0c:0d:78:21:10:30:2a:fd:9a:42:
15:7f:1f:e8:1f:e0:0f:ac:9a:94:70:3f:6a:fc:95:
b9:b8:dc:a8:f6:0b:e7:2b:5d:40:0f:72:f2:81:92:
76:72:b4:c3:d7:9a:ad:11:cc:d5:22:4d:0e:85:ba:
5d:b1:25:8a:d9:b8:f4:22:1d:08:e0:ab:c2:c0:9b:
71:6f:dd:68:11:67:43:0f:58:dd:48:55:df:b0:f6:
a0:9e:56:a7:4f:9c:6c:15:aa:c1:9a:6e:d7:08:e2:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:13:53:16:40:11:9B:8A:A7:4A:81:6F:C6:86:39:4F:A9:78:EB
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:24:aa:9e:4e:bd:34:cc:3e:a2:78:d3:38:45:c5:40:2a:fc:
9e:89:47:49:0e:bf:cd:b3:a3:d5:e6:32:67:7f:31:62:ef:a6:
9f:82:91:aa:39:e9:9f:7c:97:72:1b:98:ec:d1:53:d9:76:15:
88:6a:9f:42:47:0a:db:05:46:41:8b:31:f6:3d:88:bb:1a:05:
3a:b6:7f:a5:7d:78:c9:2c:b8:b0:d3:23:07:35:ed:68:3a:d2:
56:0d:7a:02:24:41:b3:b6:09:0c:4b:57:2c:1d:9f:03:b6:d4:
a9:73:4d:b6:78:ed:e4:c3:76:80:8e:94:12:e9:ea:46:9d:1b:
d8:d2:98:3b:8e:34:bf:dc:bb:75:b7:e7:1b:8d:e6:69:58:22:
84:70:c4:79:3f:8f:14:33:55:60:96:8f:47:93:ae:18:59:b6:
f5:4a:41:09:0a:89:e4:e3:ef:1b:e7:40:48:ff:7c:47:1e:b6:
f5:f1:8d:6f:6c:f9:9a:3a:6b:a0:c5:0c:af:6e:2f:ad:3b:d2:
9a:08:f6:8d:ca:a2:41:56:42:6b:eb:73:2f:9f:1a:d6:32:56:
70:97:ba:00:f5:da:a4:2a:b4:53:64:35:41:b7:de:4d:0e:23:
6c:30:da:45:14:64:f3:41:ee:07:cf:e4:cf:f8:38:46:aa:12:
de:27:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:37 2026 by rpki-client