Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: eUnjGv4n58VragvI6jVGgDvYyRvBDFlZAL3iBYsvBBA=
Subject key identifier: 88:98:24:16:20:07:79:C6:89:54:CD:92:4A:03:FB:6B:59:32:EF:A7
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019E4E0F44DF10ADD992C2F2404226CECA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0A04
Signing time: Fri 22 May 2026 05:01:23 +0000
Manifest this update: Fri 22 May 2026 05:01:23 +0000
Manifest next update: Sat 23 May 2026 05:01:23 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: so2r7rE0NuJEWyN2oaoWKv/rRf089TwuDpPUqu4769s=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:0f:44:df:10:ad:d9:92:c2:f2:40:42:26:ce:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: May 22 05:01:23 2026 GMT
Not After : May 23 05:01:23 2026 GMT
Subject: CN=88982416200779c68954cd924a03fb6b5932efa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:e7:2e:4a:02:7c:63:2d:66:4e:33:9e:81:
82:e3:9a:5d:92:1e:74:15:c0:55:0f:70:f1:5a:a9:
5a:0f:2f:7b:53:42:74:9d:47:c1:82:8a:16:b7:04:
4f:16:69:be:e5:bb:7f:df:99:bc:a8:97:08:9c:83:
1d:2b:a7:a0:de:9c:be:d0:50:15:96:21:e1:c1:33:
36:ff:1d:7d:30:0b:b7:bf:86:ff:00:81:77:d7:d9:
3b:2a:e0:ba:43:9d:a9:de:33:60:8a:72:6f:0b:14:
58:2a:60:c8:4c:59:fb:43:a9:65:95:21:ec:ef:55:
6c:2d:4e:3a:bf:ff:2a:cb:dc:9d:b7:9e:ba:57:38:
2b:76:d5:bf:7b:42:9a:e8:74:bf:54:ca:dc:4a:fd:
40:24:99:84:bd:d9:d7:36:3e:74:ae:c7:81:fe:2a:
b4:55:fa:3c:ef:e7:ac:6d:44:57:6b:5e:d5:42:4c:
62:20:f4:ed:bb:ac:6c:34:0b:e7:1b:5b:ca:86:74:
3c:72:a0:70:c4:d5:d5:eb:74:c5:ed:c3:e8:a7:79:
d7:d0:b2:93:34:53:5c:97:ea:1f:d5:91:9d:4d:38:
68:3f:49:2f:c9:03:d9:43:4a:3f:bc:07:e4:d1:9b:
ea:92:e9:39:05:c3:c2:b3:54:df:bc:48:eb:c1:1d:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:24:16:20:07:79:C6:89:54:CD:92:4A:03:FB:6B:59:32:EF:A7
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:65:bf:5d:d4:03:76:10:28:9a:2f:f7:e6:13:b3:47:f2:a7:
b2:0f:57:fb:a1:01:32:61:a2:90:0f:76:79:a5:04:ac:6e:d1:
e7:cd:d5:74:f4:35:c1:96:46:0e:40:db:b0:d3:03:56:3c:ac:
b7:95:15:05:58:46:25:9a:11:73:13:9f:88:bb:e6:5e:e0:ca:
5d:85:8d:f3:8d:ee:a4:c6:67:cb:a4:b4:80:a8:ed:8d:a9:8b:
47:ae:b7:da:cc:67:09:d1:93:d1:2f:c7:c0:9a:98:d7:62:ff:
62:76:31:8f:8c:18:c3:51:3a:6d:68:a1:8c:32:b7:07:16:82:
4b:9a:5c:52:0f:50:2d:9f:de:5c:38:bc:60:03:fc:6f:fa:07:
36:a3:14:56:9d:d2:3b:40:0c:8f:18:5e:28:6c:6f:a6:ee:60:
b2:02:f0:e4:8e:0a:52:c7:76:1b:b3:a2:e6:5e:0a:c4:97:6b:
1e:97:08:08:43:37:29:54:71:c1:2d:c9:d6:91:be:83:d9:84:
3d:b7:fb:30:f5:a8:89:38:b8:fc:dd:df:27:65:e5:18:59:a5:
4d:6a:86:2d:fc:f7:5f:d1:b8:1a:96:57:60:e0:cd:79:d2:d9:
46:98:c9:27:a1:39:fd:d7:30:ba:b3:2c:9a:cf:a8:10:c5:9c:
88:dd:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:02 2026 by rpki-client