Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File: KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier: IawuuUT9mUxH/rhRl6UE/knKzJKAa+a0lsOUomPQ5Cs=
Subject key identifier: 63:A6:F3:1C:86:22:CE:C7:28:24:53:1A:97:CB:71:68:F8:D9:DA:93
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019E4F58566CF8B74C620A11D48CBE3618B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number: 0CD2
Signing time: Fri 22 May 2026 11:00:49 +0000
Manifest this update: Fri 22 May 2026 11:00:49 +0000
Manifest next update: Sat 23 May 2026 11:00:49 +0000
Files and hashes: 1: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: 6iXHPaxEHBYs4A8Inn+1zw8qrRZNf0Z7+SVv47Q74lY=)
2: Uo2zXb7xDJEIiCoeCYCC8PrL42A.roa (hash: oMrnSqWlYTSclklmzzYM7d3FpGFOzhG3FJDIuAEG0Rc=)
3: vQiZmPMf9IeoKABnozsDY-6d9UQ.roa (hash: 8GXH0TKZLcFAfjc4jnVxVr7204I+TJn5VFuiHQHtpKY=)
4: wbqmfwWmA_mTuxJMrgbcccVRq0o.roa (hash: ikwWrG/vEk9wIu3LnAsVyDpQOVfL5PBtwTAaO84nGNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:56:6c:f8:b7:4c:62:0a:11:d4:8c:be:36:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: May 22 11:00:49 2026 GMT
Not After : May 23 11:00:49 2026 GMT
Subject: CN=63a6f31c8622cec72824531a97cb7168f8d9da93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:68:82:bb:ca:00:b6:8b:88:30:45:6c:55:
29:ed:9f:f9:6f:11:c3:34:32:28:ec:74:09:31:11:
8f:41:37:f5:fa:af:86:56:d0:0b:71:30:11:ad:6d:
b4:9e:91:74:3c:52:3d:ca:a5:25:7e:9e:07:ef:b3:
58:d6:8e:4b:3d:fc:aa:61:5a:46:5a:98:cc:ff:97:
8d:0d:a5:50:e0:52:6f:04:12:58:c5:2e:5d:59:f7:
32:45:1e:5e:8a:b5:a4:df:e0:ba:d9:cc:b4:88:e4:
58:c3:03:2b:4a:43:77:4e:0b:b0:80:7b:b9:c1:c0:
2a:10:0f:df:d3:5e:52:f3:03:0a:63:f2:cf:ae:6d:
1d:23:17:26:b0:3b:3b:ec:ce:1c:16:33:6c:27:ae:
bb:83:74:52:98:3c:f1:92:4c:fb:5b:a4:bb:f2:8f:
d6:bf:59:4d:f3:2d:f6:19:e8:c8:75:88:b2:a1:52:
df:e8:aa:c8:58:e8:db:a4:b3:77:a7:89:bc:6a:cb:
ad:5d:43:cc:a3:5e:27:0d:b5:d7:d7:5e:c3:f6:38:
18:7e:7f:33:99:06:2e:d1:ac:a6:65:43:f4:01:ec:
f5:08:59:45:58:b6:37:5e:78:7c:22:9f:36:ec:1b:
69:fb:7e:b9:39:07:10:87:c2:c9:5b:7c:b3:1b:0c:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:F3:1C:86:22:CE:C7:28:24:53:1A:97:CB:71:68:F8:D9:DA:93
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:91:66:4c:36:69:9a:ab:c7:6d:e7:f7:dd:ae:74:cb:15:76:
ab:37:ee:65:4e:ea:32:17:0d:69:d0:b4:a8:83:4e:97:e8:12:
27:80:76:eb:30:b6:65:71:3b:8f:db:ee:2e:18:ce:13:a3:c7:
db:1a:90:e0:f8:c2:4e:87:c3:5f:8b:0b:48:66:68:5d:d8:f4:
f2:b4:e0:60:4c:72:83:7b:e1:61:7f:1c:4e:2b:3c:16:f2:34:
67:3e:7b:e0:a8:1a:8e:eb:9b:b6:96:69:b6:23:82:6a:b2:15:
79:b5:e8:8e:76:c3:d6:d1:14:d5:d9:b3:d0:59:11:9e:fc:06:
7f:c6:52:c9:0a:af:7f:59:2c:73:29:03:fb:07:51:ce:0f:e3:
71:d7:90:a2:35:c2:d2:6f:b0:be:0e:bd:bd:ae:ca:60:d2:cd:
3c:be:8e:78:c9:97:01:17:10:5a:21:b6:a1:c9:7a:05:ec:44:
28:1b:63:3c:4f:49:07:9a:c7:a9:9c:b3:01:4b:0f:cb:8f:ab:
b8:ec:38:b2:b4:f3:ec:35:b3:3a:c2:26:03:ea:0a:5a:89:e7:
15:50:4d:6e:f5:9d:61:5a:14:1f:15:a9:fa:dc:02:92:37:af:
0d:05:13:07:a2:9d:8c:ef:b5:89:4f:e1:7f:6a:bb:84:03:c2:
05:3f:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:52 2026 by rpki-client