Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json)
Hash identifier: LXB4bug+5Z2Ecns3nV2OQpVspm6qnT8L1q0+jcu+OWQ=
Subject key identifier: AB:4E:7D:C8:FD:62:9C:04:BF:69:35:E7:D9:49:15:F2:F6:06:20:D5
Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Certificate serial: 019EB9C5E704343D423DB6964B4AEA260444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
Manifest number: 025D
Signing time: Fri 12 Jun 2026 03:00:15 +0000
Manifest this update: Fri 12 Jun 2026 03:00:15 +0000
Manifest next update: Sat 13 Jun 2026 03:00:15 +0000
Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=)
2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: lI3IWIyzG3/wPRnvp4gqxXqGgbxVPJ+9IvwbFxBGEno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:e7:04:34:3d:42:3d:b6:96:4b:4a:ea:26:04:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Validity
Not Before: Jun 12 03:00:15 2026 GMT
Not After : Jun 13 03:00:15 2026 GMT
Subject: CN=ab4e7dc8fd629c04bf6935e7d94915f2f60620d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:55:08:75:3f:da:c1:0b:42:e7:e1:ff:bc:
d8:94:60:1a:e6:b6:4a:e4:cb:b7:fd:67:d9:97:88:
b6:fd:90:f5:86:b7:d6:1d:b6:79:a7:94:85:12:b7:
55:77:6d:00:20:1d:0e:7f:1c:23:1b:34:3d:95:2f:
54:ab:df:75:fb:b6:3a:f4:9f:b5:74:24:5c:9c:74:
be:ca:91:bd:ef:96:46:53:80:20:1c:8f:a6:f3:a8:
e3:8e:a2:0d:d0:ad:b6:23:de:9f:76:d0:d4:7c:67:
31:0e:a9:4d:30:c0:86:40:43:43:48:64:d8:f7:df:
cb:1a:9b:b4:8b:15:05:30:33:8d:d7:a0:d3:b6:6e:
d2:4c:4f:84:50:1b:91:11:08:8c:c0:c3:25:1a:ef:
53:48:6a:96:9b:44:c3:55:05:2c:99:9c:74:17:06:
51:40:db:73:6a:4e:3d:72:b8:b9:b6:7d:57:a7:a5:
1c:83:86:9e:78:aa:a7:ec:a9:4a:d5:0f:0a:7b:d8:
26:6b:06:04:99:9a:ca:0c:de:a7:62:80:c4:75:06:
20:13:fd:39:4c:b1:52:e1:0b:41:8f:1e:98:45:d7:
20:72:7f:b3:a0:b7:ac:4b:72:33:78:ea:17:2f:d7:
a3:09:69:9c:a3:25:d1:a7:51:31:a9:4e:b1:72:75:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:7D:C8:FD:62:9C:04:BF:69:35:E7:D9:49:15:F2:F6:06:20:D5
X509v3 Authority Key Identifier:
keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:ab:2d:62:d7:77:56:fa:af:1b:03:29:50:76:0b:a9:8a:
1e:37:71:c7:50:1f:09:40:2b:1f:68:a2:4c:45:b0:65:84:e3:
a0:0d:17:3c:15:12:db:4c:1a:2f:8f:bf:c5:02:ff:1e:b0:8f:
01:ef:08:2b:e6:e7:b3:e5:34:15:6b:69:64:b4:b5:b3:6c:cf:
9c:4f:40:dc:4f:0f:63:56:6a:ea:58:13:e6:4a:2a:f7:f9:c4:
8d:3b:96:dc:fd:6e:4f:17:be:11:6e:6a:a3:3a:81:48:52:ad:
5c:f8:dc:ba:c9:54:1d:e4:d4:98:5e:85:f1:ea:bb:bf:b1:6e:
73:5f:c7:c5:d0:d7:5e:4d:b0:be:fc:45:7f:6d:90:5e:4d:26:
87:9a:91:7f:b9:3f:ca:be:e4:0a:bf:cd:cc:f7:38:c9:a4:6e:
81:52:01:74:6c:08:a5:d7:b9:98:1f:22:73:b4:48:b2:7b:23:
bd:46:bb:9a:af:17:4e:54:c9:2d:cf:57:c5:ef:f0:6e:b9:9c:
2e:53:79:c5:94:44:f7:10:f8:42:b6:96:fc:5a:13:de:e0:0e:
a4:91:0e:33:12:b1:2e:1a:8b:c6:e0:ad:44:a8:3d:03:6b:63:
bc:73:07:97:41:89:50:32:56:4a:d6:45:77:71:9d:65:6b:36:
92:6f:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:43:35 2026 by rpki-client