Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: CllMhvIuG3ny/tT3ZN0Fm27RjOKWcjjiduV2bsiWN4E=
Subject key identifier: AC:6E:B1:66:E9:49:02:C6:C0:81:06:F1:AF:6D:00:A5:E4:D1:E0:36
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019E3260C0B75B2852BA9B5724FAB9E967D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 20:01:01 +0000
Manifest this update: Sat 16 May 2026 20:01:01 +0000
Manifest next update: Sun 17 May 2026 20:01:01 +0000
Files and hashes: 1: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: Qp47738D1kUxP4nzh8qrjSJqZ/ypKmNaaTiSdeblqKg=)
2: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (hash: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4=)
3: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (hash: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:c0:b7:5b:28:52:ba:9b:57:24:fa:b9:e9:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: May 16 20:01:01 2026 GMT
Not After : May 17 20:01:01 2026 GMT
Subject: CN=ac6eb166e94902c6c08106f1af6d00a5e4d1e036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c2:68:6d:4b:d3:67:63:c4:92:9a:4d:4c:22:
91:1c:3d:06:e0:b7:80:aa:fa:a0:52:25:33:f2:de:
5b:bc:f3:08:13:3f:14:92:51:77:47:27:39:40:a3:
1d:e9:78:68:2d:50:14:2f:d3:f7:c7:aa:7f:be:6e:
4f:63:ee:c9:e1:be:a7:ed:48:56:e7:c4:f9:6c:44:
e5:d8:3a:f3:b0:5f:3f:9e:9d:7c:a9:57:10:c7:e3:
eb:96:44:7e:76:c3:d8:9b:50:6a:74:38:83:8f:91:
d0:3a:46:c2:68:cd:7a:27:fe:fa:2e:83:2a:55:6d:
e2:d8:8a:41:8f:e4:2f:ba:11:9b:12:a3:3b:90:2a:
8c:04:49:b9:d0:73:bf:15:1c:f9:9e:61:7e:6a:3b:
ca:82:60:de:53:af:6f:c8:72:23:19:91:ff:fb:f6:
39:00:b5:d9:55:c1:da:6e:cc:4e:d9:15:56:a9:e5:
2f:01:78:b0:54:53:55:9e:6b:8e:4a:7d:e8:dd:da:
68:05:0b:80:10:2d:53:2a:b7:ac:01:71:7b:59:8e:
ea:c3:0a:45:bb:3b:a5:51:fc:b1:b3:41:70:2d:34:
67:be:71:e4:3d:30:90:3d:8e:cd:aa:11:9d:61:cf:
8e:f6:c6:f6:04:2c:7e:8f:94:0d:dd:07:7e:84:ed:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:B1:66:E9:49:02:C6:C0:81:06:F1:AF:6D:00:A5:E4:D1:E0:36
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:0a:22:72:7f:90:47:41:f2:8f:77:36:3c:57:78:b5:e2:
b5:a3:b7:ff:74:fb:25:7c:55:71:dc:a5:74:f6:51:8a:7b:00:
e8:b1:a1:67:fc:39:ce:16:d5:df:41:f1:0a:50:6f:f4:6a:52:
3b:97:6e:42:fd:23:0b:2d:07:b6:e0:24:25:11:5e:9c:f5:a6:
21:88:87:b4:ba:bd:8e:50:34:a5:a4:a5:25:67:a1:ab:77:61:
c0:bd:1e:f8:67:4c:8a:f5:6f:ea:8e:a6:0e:3d:a3:ea:9b:7e:
53:60:e5:b8:95:20:b0:41:04:70:27:db:4a:71:13:bc:87:55:
51:6c:19:6d:53:dd:d0:1b:76:b1:db:6a:9b:5f:04:bf:39:c0:
b5:ff:01:fe:1c:11:fd:51:95:2f:bc:21:4c:02:04:d6:8e:da:
aa:78:0b:cb:d2:d7:6e:ae:e0:79:0e:44:f8:42:c9:56:15:20:
9a:ac:f0:53:93:fa:84:14:6c:ce:7c:f9:63:1f:61:e8:d6:eb:
d4:51:97:f0:59:62:f7:9c:ed:e4:4a:36:bd:a1:2c:56:93:ed:
71:a6:54:7e:f2:32:b9:37:5e:f2:2d:b3:70:ef:4c:d4:c9:81:
00:e7:63:cc:52:35:7d:b0:6c:0b:33:ef:46:54:ae:b5:86:d4:
6e:8e:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:28 2026 by rpki-client