Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: 9ysbm3etlFCabrWbzHGGBB7oW4Ev9wgXVu6cmFE6o/o=
Subject key identifier: A2:AC:60:D0:4C:C3:62:04:B3:FC:CB:5F:57:62:E0:CE:FB:72:5C:99
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019DFBE040E6FD3A3F5AB3E7419C16C20745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 18F7
Signing time: Wed 06 May 2026 06:01:11 +0000
Manifest this update: Wed 06 May 2026 06:01:11 +0000
Manifest next update: Thu 07 May 2026 06:01:11 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: 7/q4Gg1/IQpWq5fhlVeubXAV0tY0a9a2MY192mNMmHQ=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:e0:40:e6:fd:3a:3f:5a:b3:e7:41:9c:16:c2:07:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: May 6 06:01:11 2026 GMT
Not After : May 7 06:01:11 2026 GMT
Subject: CN=a2ac60d04cc36204b3fccb5f5762e0cefb725c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:9d:fe:33:52:12:d8:ad:be:ca:dc:33:fc:
31:30:90:88:6e:36:36:e4:75:36:65:59:13:11:6c:
24:d6:f7:f2:70:78:8f:89:4b:d7:42:9a:c2:f5:4f:
e2:f7:7f:20:89:b6:ab:30:7f:97:06:36:39:17:e3:
79:3f:4b:5d:42:15:63:54:ea:10:c9:e9:1d:3c:2b:
74:7e:80:18:b1:20:08:f7:8d:13:31:92:a9:de:42:
d2:e2:34:38:90:00:7b:fb:a9:4d:31:47:42:50:1a:
7d:e9:33:f9:b4:e8:f9:07:f1:02:c1:ad:f6:9d:6c:
f0:c5:84:6c:16:af:72:f6:75:21:e4:fc:b1:19:f9:
fc:d6:26:15:f0:42:e7:12:a8:88:2a:4b:e3:3d:4d:
33:f0:bc:ea:4c:22:3e:6b:48:57:9e:e0:97:05:ca:
5f:45:c3:37:d4:48:cc:79:b6:46:b3:25:75:8b:23:
ee:1a:a9:28:b7:0d:1d:8d:99:3c:be:8c:60:f9:ca:
84:db:18:57:b1:91:2f:5b:88:ac:5d:eb:88:18:98:
25:ba:ab:cb:60:40:00:6b:34:40:e4:06:eb:c4:92:
9a:73:ee:10:0c:f3:10:e8:a3:6a:16:37:9d:c7:44:
88:6d:03:25:67:ac:14:e4:d6:87:57:98:40:3c:59:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:60:D0:4C:C3:62:04:B3:FC:CB:5F:57:62:E0:CE:FB:72:5C:99
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:df:db:a2:14:b5:7f:c3:b1:10:cb:ca:0a:24:80:64:c9:25:
8d:d6:14:fe:9f:fe:d9:25:a8:8a:7d:23:88:ef:34:5b:09:94:
26:de:70:3a:f8:13:3f:63:3e:ef:6b:74:09:65:d7:21:5b:92:
d0:34:73:5e:ae:3a:34:46:7e:15:c0:9c:75:42:86:2e:73:c5:
af:97:f3:1b:12:cd:42:5d:54:17:8b:15:32:d1:a8:33:0f:50:
49:0f:13:d3:86:d4:63:e3:bb:12:9c:ef:1a:3d:8b:c1:c9:d2:
55:a3:08:9b:3a:4c:b1:59:96:35:da:81:c6:18:be:65:3e:cb:
ea:e3:db:b0:f9:88:aa:98:38:25:95:0e:a6:f9:2f:9d:28:f7:
7e:7f:60:3d:51:5d:9e:6a:60:58:36:65:8c:c2:af:c2:63:57:
91:da:ef:9a:1c:b8:27:a6:0b:d5:e1:9b:67:9a:11:93:2b:99:
dd:7f:cf:27:1d:99:97:da:9d:bb:a7:2f:8a:81:8f:23:d6:59:
ec:d9:6a:e4:6a:c8:47:8d:9d:84:06:a5:45:f3:1b:e2:63:6b:
f5:f5:5e:b4:a2:d4:ab:94:cb:3c:4f:65:5b:f2:66:c5:30:d6:
06:bb:95:73:6c:66:f5:03:8a:bd:d6:c2:32:49:48:15:65:a6:
d0:ff:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 13:24:12 2026 by rpki-client