Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: ynMAr48HMv8rG3o3HyuvTFooxJ2M6bFN/NZlETtHMsE=
Subject key identifier: 2F:35:39:46:65:7C:D4:AD:7B:31:A4:03:CD:7A:50:0A:BE:A6:FB:E5
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019EB87D0A2FFB96B90FF03006CB4F903621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 21:01:02 +0000
Manifest this update: Thu 11 Jun 2026 21:01:02 +0000
Manifest next update: Fri 12 Jun 2026 21:01:02 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: kzK5mxOu3NTOh0Pj+cU3u8GjK+pTWBP0JTnytGhpzDY=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:0a:2f:fb:96:b9:0f:f0:30:06:cb:4f:90:36:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jun 11 21:01:02 2026 GMT
Not After : Jun 12 21:01:02 2026 GMT
Subject: CN=2f353946657cd4ad7b31a403cd7a500abea6fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:56:84:0b:67:15:26:9c:7e:0e:4f:d4:6b:
af:56:ef:5c:cc:18:ec:58:01:5f:e5:2e:89:8a:6f:
66:e3:5d:75:91:08:cd:ac:e8:28:bd:85:ac:e1:ce:
99:38:60:23:e4:f1:bb:ad:dc:cb:10:70:be:8a:aa:
8a:53:51:1c:27:e0:83:84:43:8f:29:50:8c:4f:b0:
5c:ec:0d:8d:27:66:f4:75:97:7a:8e:ab:71:fa:67:
41:07:42:dd:68:cc:f2:7f:96:0c:17:ee:4c:b0:6b:
46:10:85:7b:00:33:61:bd:c1:63:97:09:cf:42:3a:
c0:2d:71:b0:c4:2c:a6:76:a4:d0:30:28:1e:c6:aa:
23:cd:22:a7:55:a8:35:54:01:8c:7c:90:92:bb:e0:
9a:3b:02:62:8e:f7:ee:32:77:88:99:f1:22:a5:84:
e8:1f:32:e7:2c:aa:fd:9b:b3:32:70:81:83:70:4e:
dd:4a:6a:17:36:dd:cb:d8:52:1b:93:f9:b2:4e:f9:
cd:69:5e:e7:df:d7:d8:93:d1:f3:3a:7d:37:21:11:
1c:46:e1:02:bd:e9:e4:10:f9:6a:2f:6c:13:ca:02:
b7:7e:7c:9f:ef:59:97:02:7a:15:85:4b:49:05:45:
2a:aa:eb:52:f4:44:7d:11:52:c0:d6:79:95:f9:39:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:39:46:65:7C:D4:AD:7B:31:A4:03:CD:7A:50:0A:BE:A6:FB:E5
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:af:30:39:16:eb:03:cc:ab:ac:15:f5:1e:2d:c7:13:ab:b5:
60:ce:20:c9:b1:fe:90:27:10:e8:db:77:fc:6a:c3:f4:ed:eb:
39:f2:9a:9c:f2:b5:2c:04:06:d1:77:27:f3:7b:dd:ba:7a:2a:
77:c4:c3:34:17:2a:2e:ae:62:db:09:f9:03:21:e0:ab:d2:92:
d4:a7:09:7b:fc:1e:0a:f5:1b:5a:27:88:1d:c6:d2:93:7a:de:
2d:33:a0:8f:34:1b:33:5c:82:19:3f:46:01:5c:4d:be:6d:19:
50:21:16:ee:9f:6f:70:1a:49:6b:37:2e:63:a4:7c:d7:6b:6e:
65:b6:97:ff:9e:be:95:34:44:2b:5d:bb:21:65:2f:be:c4:92:
2b:97:5d:4a:ef:00:bd:84:aa:3a:2f:79:f0:47:13:e8:5f:c9:
d6:df:bd:f1:5e:5c:0a:3c:a2:ff:19:5e:af:8b:41:3f:fd:6d:
fb:95:32:f9:d2:90:a6:29:51:c6:65:c4:c2:e9:b2:20:d1:a6:
87:67:bd:82:8e:20:95:09:4b:a3:79:cd:5c:71:40:ba:be:57:
78:ce:51:52:01:98:7e:30:09:12:ac:cc:90:e5:dc:d4:4a:01:
05:64:f0:de:91:6a:7a:cc:47:cd:cc:bf:9a:79:15:5a:fa:77:
e4:c2:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:41 2026 by rpki-client