Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: mhWGU7TfjsOO67OQK2A8bXMPSrTR9iiHw3KYgqsitYc=
Subject key identifier: 57:1F:F3:40:93:22:E1:30:39:E3:85:D6:52:1F:43:5B:F0:87:0B:CC
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019EB6FBDDF85B874211F51B922957D15CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 14:00:19 +0000
Manifest this update: Thu 11 Jun 2026 14:00:19 +0000
Manifest next update: Fri 12 Jun 2026 14:00:19 +0000
Files and hashes: 1: D_KlB34E9TuYjqot3WH68IZh9Oo.asa (hash: g2ep34hP7XJuNaAzXn6kUfYddFEXLyHb6BpLTFIwPsE=)
2: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
3: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: BJOGkGaoAcVG6skYfhEI3IFqCE9i287FIVW2NW958kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:dd:f8:5b:87:42:11:f5:1b:92:29:57:d1:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jun 11 14:00:19 2026 GMT
Not After : Jun 12 14:00:19 2026 GMT
Subject: CN=571ff3409322e13039e385d6521f435bf0870bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:ae:4f:3f:42:80:c9:6b:5a:39:93:3c:a1:
2b:24:e9:61:26:71:98:ab:a2:34:d9:40:4a:a0:09:
40:30:94:67:91:44:a9:eb:be:db:d5:a8:1a:f8:49:
ba:90:f7:83:42:d1:5c:d9:aa:08:d2:10:2e:bc:d7:
0c:9b:2f:36:f5:e9:2d:d8:8c:79:fc:da:f3:fd:61:
a3:82:dc:ee:e3:29:97:a3:41:06:55:f7:52:af:bf:
d0:35:1f:d5:cd:3e:f1:98:98:84:6b:d1:79:ac:97:
a4:f9:bb:83:dc:ba:25:98:81:d8:1c:a3:4b:a3:ac:
e1:48:54:50:1e:66:f1:cf:ea:51:a5:c1:35:c8:05:
eb:c1:bd:81:e7:2d:88:d5:4e:40:54:7f:ad:51:96:
26:9f:58:0c:76:03:8b:01:da:0f:98:87:a8:73:6f:
69:19:de:a1:bc:d1:ab:e5:eb:ed:19:dd:c9:b0:ac:
c6:b8:ff:4f:d0:78:a3:9c:35:59:4b:eb:d4:20:e8:
d7:03:90:a9:57:1a:48:3b:fa:39:9b:f0:30:5c:4b:
7d:56:f9:f8:95:36:4d:94:b3:1c:b6:3f:31:1c:78:
92:70:17:7e:14:88:33:6b:a9:bd:05:cd:b4:02:5d:
2f:35:c6:47:97:91:4a:55:08:b9:12:4c:9b:0d:11:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:F3:40:93:22:E1:30:39:E3:85:D6:52:1F:43:5B:F0:87:0B:CC
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:ae:51:b3:1b:58:15:34:6c:31:78:02:91:72:14:c8:72:
66:42:62:b5:f7:f9:04:92:9f:01:a9:68:5d:59:e1:bd:93:16:
fb:b3:c2:38:fb:fc:22:0e:91:87:f0:91:67:bc:e1:6c:bc:a4:
d7:9c:3b:24:d1:4b:e9:05:a0:e3:65:bf:8d:9b:a1:d7:a5:40:
0d:56:af:78:cd:bf:62:41:0a:c6:9c:ce:09:df:25:8f:32:05:
25:62:f6:db:37:78:ce:87:47:da:66:aa:c4:89:ee:62:b7:36:
b3:d2:77:e7:9b:8c:b0:f2:2b:8e:a2:3e:cc:59:9e:a9:b9:37:
26:ee:ec:dc:e8:d6:1f:16:b1:61:1a:12:c2:e4:d2:92:b7:9f:
a6:5e:d8:3b:59:df:55:92:9f:fb:62:f4:9e:b4:8e:b3:be:46:
63:4d:f0:a1:d1:53:a8:50:7a:bb:0a:cc:9f:6b:1c:e0:d5:c8:
e6:05:51:20:9d:13:e1:d2:09:dd:48:bd:6c:cb:99:0e:e7:8a:
55:8b:bb:ec:4b:92:3f:43:19:d3:cd:89:b8:df:6b:b2:0d:7b:
6e:1c:e6:ad:13:f7:c3:fc:a3:b2:b1:27:69:8e:3b:53:f5:0b:
95:72:80:75:96:d2:a3:06:f2:ea:89:07:fd:c6:12:f4:eb:00:
3f:23:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:34 2026 by rpki-client