Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: 1VteIJag0VUiwm3zQiEC1toUWiGBiBe3VzuuRHq03JI=
Subject key identifier: 1C:E9:AE:66:10:74:00:26:49:E9:92:41:C5:78:45:12:DD:4E:79:DD
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 019F3A85C3745A15DBE3FA1A06048F1DB8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: 13
Signing time: Tue 07 Jul 2026 03:01:12 +0000
Manifest this update: Tue 07 Jul 2026 03:01:12 +0000
Manifest next update: Wed 08 Jul 2026 03:01:12 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: 5D8/xcl/ehtjPtT50sgo9Vs5c1KffwrHVjScdpdHMRA=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:85:c3:74:5a:15:db:e3:fa:1a:06:04:8f:1d:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Jul 7 03:01:12 2026 GMT
Not After : Jul 8 03:01:12 2026 GMT
Subject: CN=1ce9ae661074002649e99241c5784512dd4e79dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:2b:9f:b5:32:26:35:93:d6:19:66:33:7c:
cf:c9:db:02:01:cf:6d:15:6a:d0:a7:a9:f9:e7:6a:
3e:cf:2f:35:8e:a3:79:7b:79:27:bd:38:72:cb:5e:
97:ed:cf:7b:e7:d2:0f:ad:f1:85:09:87:56:df:30:
e2:b7:7b:92:7d:2c:4a:e1:a6:4c:81:6a:72:2a:5b:
84:9d:30:fe:ac:10:a8:44:dd:37:dc:fd:6f:f7:03:
0f:ad:14:9f:96:3b:56:4d:ba:6b:b0:54:78:13:4a:
9d:90:45:59:f8:d3:65:36:78:41:7e:2b:b0:38:50:
b8:af:cb:66:d5:04:6b:25:9c:dd:63:7d:86:7a:3f:
ee:f2:f9:ae:41:5a:77:ae:19:4d:67:f4:14:ef:4e:
66:f7:00:fe:0b:a8:fd:f7:0e:00:79:95:24:40:9c:
66:af:66:d2:7b:b6:28:5c:41:d2:70:0a:1e:0f:09:
18:6d:7c:8b:f9:f5:87:0a:d3:67:db:b1:dc:41:ef:
9d:42:b8:59:7b:a2:39:d2:26:01:ad:11:c4:77:5c:
c9:0c:ad:f4:bb:78:2d:f6:95:88:2a:bf:dc:cd:85:
01:b3:be:f4:34:b4:43:6e:f9:3f:f2:08:6d:23:2c:
f2:30:30:3c:22:f8:00:e7:43:93:26:96:2a:5c:c9:
80:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:AE:66:10:74:00:26:49:E9:92:41:C5:78:45:12:DD:4E:79:DD
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cb:ed:97:01:72:b3:c9:9b:82:cc:52:46:90:77:e0:61:17:
6c:38:1d:89:b8:3d:ed:8a:d8:2a:02:8c:b5:d7:3d:ff:a6:65:
cd:5f:b0:9b:3f:51:35:d6:e4:b8:41:a8:f2:fc:af:f6:70:e4:
c9:b6:6d:2c:a1:f8:6d:43:84:ab:9f:67:9d:4d:b3:cf:8e:51:
a1:8d:bf:79:dc:eb:9d:a0:a9:2c:06:ad:10:a6:ff:f3:38:0a:
59:77:af:ea:f7:78:39:85:77:0c:eb:0a:74:f1:1d:f6:4d:cc:
18:30:2b:43:c6:cc:79:4c:20:87:4c:33:4a:84:4c:fc:2e:d6:
58:e0:c2:23:b4:bd:5c:49:67:fa:2f:32:7c:d7:0a:3d:0a:17:
92:10:de:a4:9b:59:72:96:a4:84:d5:c3:91:21:14:a8:d2:bb:
3a:0e:27:ec:7d:d4:64:09:5c:19:76:53:75:11:cd:64:38:ef:
09:36:31:0b:da:56:0d:8e:dc:c2:33:69:be:e0:51:84:d3:42:
af:fd:31:20:96:11:a1:39:71:b1:b7:95:3d:d5:0b:aa:97:23:
3c:e2:26:0f:30:05:db:c1:e8:89:73:5b:53:14:9d:db:7d:ac:
3c:f7:94:80:73:44:b5:df:5c:48:95:69:5e:6e:61:97:24:9b:
33:c4:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:40:25 2026 by rpki-client