Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: pZ2NNvyePAZav2W0Vd3A0S4NtWgIKVWls5ELPw5YMa4=
Subject key identifier: D5:C1:01:3F:21:B9:5A:02:10:F9:7A:9C:24:A8:6E:55:34:6D:FA:64
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 019E3297A9DF34C2BC06060831FBAA0ECF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 0EFF
Signing time: Sat 16 May 2026 21:01:00 +0000
Manifest this update: Sat 16 May 2026 21:01:00 +0000
Manifest next update: Sun 17 May 2026 21:01:00 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: 4ZbyJrZ33TTFRLgQL0ddErCA7z0TuTQFD8aM4cql6j4=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:a9:df:34:c2:bc:06:06:08:31:fb:aa:0e:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: May 16 21:01:00 2026 GMT
Not After : May 17 21:01:00 2026 GMT
Subject: CN=d5c1013f21b95a0210f97a9c24a86e55346dfa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:1d:cb:a0:03:4b:be:b8:5e:e5:76:b5:30:
40:54:02:25:c8:4e:a6:f7:bb:20:7d:36:ce:08:a3:
57:1e:08:d2:83:96:8b:37:d7:ce:2a:62:31:99:9b:
1f:30:77:6b:41:bc:49:87:76:05:49:93:a5:d0:ea:
ce:5c:67:70:07:c3:51:52:70:ca:6b:73:92:d0:c4:
50:4c:1e:4e:c3:15:d9:c3:c6:ef:78:20:9f:c7:45:
c2:ec:cc:c8:0a:75:bd:7d:c7:ea:e9:0a:d7:92:df:
58:bc:54:66:29:f6:83:45:d6:ea:2d:cd:15:4e:af:
56:5c:db:6f:cd:f3:7b:63:04:e8:3a:76:1e:94:90:
db:2a:49:37:c0:6f:b9:79:83:8c:79:4d:72:f7:51:
52:b7:8b:4c:6c:a2:e5:e4:9a:83:32:44:9e:b3:2e:
98:ea:2f:99:e3:32:51:9b:4c:0d:d1:95:a8:29:37:
f7:20:b2:f7:a2:25:ef:ec:0a:cc:ba:e9:e1:4f:78:
7c:75:3f:4e:43:ee:21:8f:9f:91:f9:e1:7f:ca:9c:
99:64:71:54:28:4d:35:d7:29:3a:a4:f5:88:b1:9b:
e0:22:bd:15:c4:8c:4e:8d:31:a3:b3:7c:72:f2:12:
b2:d4:ef:b2:0b:f7:be:88:c6:92:52:16:a2:e5:b9:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:01:3F:21:B9:5A:02:10:F9:7A:9C:24:A8:6E:55:34:6D:FA:64
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:f6:16:09:52:8d:1d:47:69:24:dd:8f:e5:76:52:f9:39:
f8:a3:d7:1a:53:9b:d5:e0:e3:34:7d:0c:c1:e8:45:ae:4d:12:
47:aa:da:1b:37:54:0f:69:9b:be:33:fa:75:ff:2a:dd:7d:03:
d9:5d:47:2b:37:c1:42:76:50:ba:c2:71:dc:aa:aa:51:6b:a8:
53:e9:70:78:5a:44:e8:76:eb:3d:29:45:88:01:e0:83:d4:6e:
7c:89:8e:a8:cd:73:05:57:c2:44:f1:27:35:79:b9:2b:d9:bb:
29:c5:19:a2:dc:67:be:1d:e4:69:55:84:fb:75:f7:49:9c:1c:
01:47:64:1e:43:93:ce:a3:c2:1e:86:66:eb:fa:86:81:0f:b9:
48:aa:73:94:d2:ae:8a:9a:d8:f2:a4:68:32:98:90:ed:85:71:
d8:24:96:df:0e:5e:22:76:9f:8e:5e:2e:17:6e:73:6b:8f:9b:
b7:eb:35:57:cd:b7:5a:cb:6d:b7:48:80:2e:9d:f8:24:66:7b:
49:ba:1c:d9:f5:56:5b:bc:0a:93:c6:2f:1e:01:4c:6e:54:1d:
e2:00:6d:f5:67:18:4c:31:9c:3d:23:96:8a:11:4e:36:ae:97:
d2:76:57:ee:12:22:f1:46:ac:c5:89:af:1f:da:b5:cb:95:0c:
40:cd:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:36 2026 by rpki-client