Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: C44ykwPXJq2qlTiiBUqPjFfTZQKNAIOI9zsDKq0/AZ4=
Subject key identifier: 22:41:53:EC:AA:45:CC:1C:DA:A8:CD:A9:A2:5D:33:BA:29:B4:EA:B4
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019E31BBE179CC07CF6FDB3E8D45A1CA3A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 12E3
Signing time: Sat 16 May 2026 17:00:56 +0000
Manifest this update: Sat 16 May 2026 17:00:56 +0000
Manifest next update: Sun 17 May 2026 17:00:56 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: DvINc2F/Mc36nqiWt2NcoFYU41YJl1Ay5Zx/mVz+VeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:e1:79:cc:07:cf:6f:db:3e:8d:45:a1:ca:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: May 16 17:00:56 2026 GMT
Not After : May 17 17:00:56 2026 GMT
Subject: CN=224153ecaa45cc1cdaa8cda9a25d33ba29b4eab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:76:a1:97:63:66:c2:47:bb:ee:fa:1c:8f:
b6:11:49:13:dd:6a:eb:41:9d:fe:c3:27:e1:8a:d4:
fc:56:1d:31:35:ae:d8:10:be:da:67:22:73:72:65:
39:29:13:e7:62:2e:2c:9a:c3:26:91:c6:2e:3b:a8:
c9:fe:bf:59:69:c7:62:0d:35:ca:97:bd:28:6f:fc:
ef:27:76:6e:4c:af:f9:88:89:12:83:23:f4:0e:44:
07:71:39:90:7d:a4:35:26:b6:b8:11:0d:08:60:ae:
94:d8:3e:69:d7:3d:4d:ac:d0:2a:e1:21:a7:8b:25:
37:52:ef:10:72:7e:a2:46:69:24:bf:2b:3d:70:a0:
7e:9b:70:94:01:6f:bb:44:a5:f7:95:d5:13:b7:af:
cb:f7:9f:68:6a:6e:04:b2:2e:d5:a0:10:85:04:74:
bd:b0:e5:97:73:42:7b:45:97:9a:42:57:22:59:cd:
1a:de:c5:6c:a7:a2:c7:9d:0c:5c:96:1d:f5:fb:0f:
4d:3b:7f:4c:6a:cc:fe:ce:09:a8:b4:02:91:aa:f3:
c2:f5:63:fa:d0:3b:cd:04:91:a2:e6:41:c7:bd:0a:
e0:dc:23:69:39:6c:5c:15:17:4a:c0:c6:7d:81:77:
3a:10:16:21:a6:95:22:36:22:10:f9:a6:8e:02:8c:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:53:EC:AA:45:CC:1C:DA:A8:CD:A9:A2:5D:33:BA:29:B4:EA:B4
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6d:8f:b5:53:56:7f:c1:29:5f:97:20:12:8a:a8:3b:21:a2:
5d:10:22:f7:9f:7b:00:96:83:82:e4:84:f5:ff:54:98:bf:9f:
2f:0e:f7:12:7b:6e:b7:8b:d6:29:13:10:73:44:31:36:be:1d:
06:ec:df:42:d2:4b:4c:5b:e9:0f:ea:5a:bf:bf:7c:df:6d:59:
bb:b6:43:16:3a:35:e8:f9:93:cd:3d:9d:6b:f5:68:43:88:ca:
22:50:43:ae:91:9a:02:67:d4:b3:5d:08:21:18:f7:a8:03:0d:
44:50:ad:a5:3a:6c:5a:82:05:79:ff:15:86:91:72:3c:60:d3:
88:47:21:50:48:03:75:39:6d:ee:3b:6a:d5:77:4b:5d:3d:84:
4e:8a:9b:b1:eb:3b:c8:f9:11:82:5d:59:4c:e5:df:f0:45:b9:
44:12:b6:dd:98:39:ff:16:50:c7:bf:90:b7:18:48:3d:11:26:
49:c5:ae:1f:c5:0e:80:cf:85:8d:ef:00:dc:91:1b:84:d3:99:
17:d0:d0:0c:0e:83:89:74:96:be:c4:a9:a2:78:86:70:0f:68:
77:d9:3d:b2:c3:9f:9a:4a:39:72:56:3a:2c:e6:d3:d1:06:a6:
b7:31:cd:d3:56:7f:ed:68:21:fa:89:68:26:94:82:34:b5:48:
2e:e2:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:01 2026 by rpki-client