Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: wkWpCiQbyjtIMWuyV2HugaR/V7wExLZA0wLpy9d1374=
Subject key identifier: A6:7D:46:45:FA:8A:5B:5C:48:7C:32:9E:68:56:46:E2:A3:16:02:E0
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019E2A3944ADE4BBB59570DFDF04671B5ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 06:00:56 +0000
Manifest this update: Fri 15 May 2026 06:00:56 +0000
Manifest next update: Sat 16 May 2026 06:00:56 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: XwNKUAia7sdxfm3maqBisvtNlisWTzxh947FktIGbQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:44:ad:e4:bb:b5:95:70:df:df:04:67:1b:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: May 15 06:00:56 2026 GMT
Not After : May 16 06:00:56 2026 GMT
Subject: CN=a67d4645fa8a5b5c487c329e685646e2a31602e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:ec:d9:4c:54:cc:42:ee:35:79:c5:d4:5d:
1d:d3:95:64:7d:e9:3d:57:7a:4f:c7:cf:8a:ff:fa:
a2:80:30:fd:cd:59:b2:75:e3:6a:89:4b:4a:52:81:
84:70:b1:cf:fa:dd:f8:80:55:7e:ea:ec:fd:11:8f:
59:b5:c4:68:1d:76:d6:84:dc:48:16:51:5a:63:c8:
13:34:7e:47:e5:54:c2:43:d5:b8:1a:4e:06:89:6d:
81:e3:63:92:fb:b1:5e:95:b1:0a:61:e4:39:b7:b2:
e8:18:2d:8f:8d:96:62:ca:a2:37:ee:00:a2:8e:62:
30:f5:0a:ab:d1:28:02:20:38:c7:17:b1:82:6d:38:
53:ef:4f:ae:5a:9c:dd:4b:3b:5b:29:d4:4c:7b:9c:
dc:b5:d6:f5:13:22:8f:79:22:10:79:81:f9:9f:72:
84:d9:72:02:66:f8:e8:6b:b0:d4:69:49:7c:0e:c3:
63:bb:4b:c1:f1:4b:45:ea:0a:12:3d:51:d8:6b:bf:
e4:c3:4d:0a:db:08:29:6c:a3:2e:75:57:bd:fa:e8:
b6:19:37:a2:64:87:85:d1:26:27:83:34:65:08:0c:
78:18:82:59:bb:3e:1a:81:df:68:31:58:29:1a:91:
42:67:7a:ed:10:37:00:87:f8:e8:4f:bd:b3:e8:22:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:46:45:FA:8A:5B:5C:48:7C:32:9E:68:56:46:E2:A3:16:02:E0
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f1:ce:f1:4d:b8:ab:21:15:7a:b1:c5:41:fb:17:0e:67:ee:
04:20:1f:91:54:8b:30:16:7a:fd:9f:11:88:bf:05:1e:cb:c2:
27:ea:87:52:2a:87:83:2a:60:d9:85:bc:cd:d1:99:73:b4:52:
42:25:66:5c:4f:a2:67:52:c0:b4:74:74:74:fd:e2:aa:ec:e5:
18:eb:c0:fe:b5:6b:e6:35:7a:74:0c:f4:fe:41:6b:65:98:8a:
31:26:6c:0a:73:25:85:0c:09:3c:22:5e:2c:18:bf:89:fa:e1:
73:24:d0:7c:62:7d:c6:cf:a1:91:93:7f:70:f4:6c:64:e9:9b:
02:28:4d:ea:75:b5:4f:0e:cc:ad:e3:54:91:03:58:3b:f1:9a:
65:95:27:12:ea:d7:4e:c3:76:8b:9a:32:76:63:31:33:55:94:
db:44:6e:62:dc:05:78:b4:40:63:60:2e:78:86:a9:a8:f4:b7:
0c:79:d6:6f:76:49:bf:60:64:fe:a9:59:17:18:05:0a:09:8c:
8a:0e:04:7f:34:5c:f8:f8:cf:8e:a6:9d:b2:0a:67:ea:0e:4e:
65:85:f1:38:7f:b6:6d:61:16:bb:9b:a9:1b:a8:42:ae:de:c6:
13:b3:ef:27:55:80:bb:0a:87:33:ea:47:7c:bf:f4:47:39:2b:
c9:d5:72:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:09:26 2026 by rpki-client