Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: 0piXHuxSf/JuoEylGXmQ7G756yiUsKlLtYnE5AaX+1Q=
Subject key identifier: 1F:7E:18:59:24:87:61:6B:D1:85:CF:DE:27:BB:D9:15:5C:F3:13:91
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019EB6571FD9EE2B1E19FD1E897E02451A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 11A6
Signing time: Thu 11 Jun 2026 11:00:23 +0000
Manifest this update: Thu 11 Jun 2026 11:00:23 +0000
Manifest next update: Fri 12 Jun 2026 11:00:23 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: Y6Yyc11L5iImHDunE9D+hnatD4uaOFznidexlvWIctU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:1f:d9:ee:2b:1e:19:fd:1e:89:7e:02:45:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jun 11 11:00:23 2026 GMT
Not After : Jun 12 11:00:23 2026 GMT
Subject: CN=1f7e18592487616bd185cfde27bbd9155cf31391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:c9:2b:0d:43:8d:b2:6e:ac:13:72:6c:08:
87:91:eb:48:a5:3b:3b:ab:49:53:40:57:02:6f:19:
b6:e9:65:60:17:06:6a:3f:71:a8:e5:78:a5:f9:e5:
ac:19:9e:c4:0a:ef:6e:60:9a:c8:2e:19:a0:88:0d:
c4:06:6e:48:67:2c:7b:67:37:91:17:d2:b7:20:40:
07:2b:6f:25:89:8f:a4:c1:96:08:2f:86:d0:a9:b1:
75:71:67:17:cd:05:fd:65:86:6a:8d:80:6d:21:e2:
57:83:9f:27:96:d2:e9:8c:91:5c:fa:1e:85:02:41:
1d:11:c5:31:ad:54:be:2c:1b:69:35:f3:53:1c:90:
1a:db:e2:61:b5:1e:f2:b0:b9:ea:91:3e:c6:6c:db:
f9:da:da:fc:d5:ca:90:1d:c1:41:20:05:7f:9d:e8:
1d:dc:fa:2b:67:df:8e:e9:ee:61:1e:d3:41:c9:11:
fd:3b:58:5a:b6:12:18:77:92:b5:f0:b4:50:77:e8:
8c:44:17:2b:46:e0:22:3b:85:1c:cf:4f:3d:c3:e4:
1d:ab:ea:04:f7:c0:5f:ce:76:00:ac:29:be:7d:20:
86:b5:7c:d2:00:65:00:cf:7d:84:94:ad:93:22:2c:
c8:9e:e6:cf:d2:b0:d0:e2:f9:d4:92:d8:be:f0:a0:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:18:59:24:87:61:6B:D1:85:CF:DE:27:BB:D9:15:5C:F3:13:91
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5f:46:44:b8:69:88:cb:ca:0e:30:ac:db:72:2a:4d:ec:f9:
0a:03:c0:7e:72:93:39:20:f4:29:26:07:44:bc:46:ed:5a:70:
bd:16:6f:03:27:e8:e7:7b:9d:7a:f3:4f:c6:d0:df:eb:80:ba:
a1:e1:f7:07:c9:e8:62:ec:f2:d5:5a:85:8f:e7:63:b6:df:63:
24:5a:9f:a7:5e:db:89:13:1d:3c:97:09:62:43:27:da:42:6f:
58:4a:df:6d:d5:14:52:7e:28:ab:8a:54:91:c3:1b:f4:9c:47:
61:fc:b0:84:6c:5b:e9:fe:df:91:c3:a6:10:60:88:45:d9:e6:
e3:fd:2e:22:97:b5:47:77:62:b2:2c:fe:e4:f0:44:e7:f7:b7:
09:3c:32:93:1f:8f:8f:75:6e:12:7f:e7:f5:c0:4d:9e:68:60:
08:6d:69:85:1c:1e:9d:51:96:8f:02:0a:97:1a:dd:d6:df:9f:
80:2e:f6:ab:fd:8a:61:da:0f:a0:a1:af:8e:7e:07:9c:b8:f3:
6e:6b:0d:1e:70:67:a8:60:14:a0:ef:d1:bf:21:64:59:1a:ce:
3b:54:6d:ee:2f:53:9c:e8:fb:02:c5:d2:a3:06:92:e6:28:1c:
57:6a:92:3a:c7:54:6c:c9:57:b9:52:b1:12:fe:10:1a:6a:c8:
de:50:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:02:44 2026 by rpki-client