Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: NzfKsKblhUTAKpuOmr4yFxl15M9uggdOoQoPmm2wPPg=
Subject key identifier: 5A:94:DC:56:1D:FD:D0:D4:BA:84:1A:8D:A5:28:33:3D:7B:0A:03:54
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019E303B57A2DCD135071848C5EF9D513355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 11FF
Signing time: Sat 16 May 2026 10:00:55 +0000
Manifest this update: Sat 16 May 2026 10:00:55 +0000
Manifest next update: Sun 17 May 2026 10:00:55 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: +49P7dFNvAYEAIhNvf3/sGswWk4gIyt/FcTtenFzkMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:57:a2:dc:d1:35:07:18:48:c5:ef:9d:51:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: May 16 10:00:55 2026 GMT
Not After : May 17 10:00:55 2026 GMT
Subject: CN=5a94dc561dfdd0d4ba841a8da528333d7b0a0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:69:a8:f2:58:ee:40:bc:bc:31:46:81:12:
8a:9a:33:57:ce:5c:76:3f:9b:87:b5:11:b6:00:21:
4e:ea:ad:a6:7a:43:7e:7d:46:df:90:cf:55:31:73:
db:6c:f9:6f:1b:d5:50:63:c1:1c:95:9a:17:9f:5e:
2e:e7:5d:6f:b2:e0:be:74:ea:45:04:45:bc:70:09:
9c:2d:10:8d:54:49:c6:58:4a:2d:b0:e7:c4:60:31:
39:17:e3:57:7a:17:23:31:47:f2:0d:00:89:0d:2b:
73:16:56:3b:33:af:4c:07:38:ef:5e:ca:f4:39:af:
9c:d1:64:fb:b5:8f:6c:ff:0c:e0:f5:a1:39:4a:94:
87:37:c9:54:e4:d7:5f:46:8b:10:a8:59:19:42:d0:
6a:da:d7:74:97:c2:69:06:e3:f9:f8:1d:13:1d:03:
18:9a:17:62:64:1b:b4:9b:68:b9:1a:fb:ad:72:cb:
50:2a:5d:99:87:b6:aa:e1:f5:9a:52:5d:84:ba:53:
3b:6b:d7:18:3c:8f:5f:57:23:82:81:1d:60:d5:26:
d4:a0:89:7f:30:ba:06:9b:d5:af:4c:64:1f:ed:c0:
03:e4:c9:33:b4:23:d1:6a:eb:7f:6a:38:4e:78:4a:
32:c0:e5:62:e2:84:48:1b:e3:50:2e:12:af:dc:d5:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:DC:56:1D:FD:D0:D4:BA:84:1A:8D:A5:28:33:3D:7B:0A:03:54
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:ee:51:7a:1a:5d:40:da:aa:6a:e7:8f:56:b1:c2:22:2b:
3b:83:43:23:7f:14:0d:f7:c6:de:4b:e6:fa:43:de:e3:3e:d1:
a8:27:66:5c:e9:a5:7e:e1:e1:dd:74:9b:a3:2b:cd:85:fe:fe:
35:57:61:1e:af:bd:06:ec:7c:35:96:ec:17:5e:38:11:a2:fb:
29:f2:a6:63:45:ce:11:89:0b:7f:78:bc:ad:54:a7:5f:bf:ed:
54:7d:c4:08:58:2b:fd:bf:9e:3e:ac:af:45:43:7e:bb:7a:e9:
01:90:f6:87:d1:05:46:b0:1f:4e:44:e3:d7:0c:37:60:14:4c:
d7:cc:c4:ca:9a:c1:11:6a:d2:cd:d2:0a:28:d4:51:a5:82:09:
69:82:b3:b0:f6:49:d8:ef:f9:ea:bd:07:15:2a:34:ba:81:8c:
b1:3c:67:88:a8:13:2a:29:c7:e2:ab:33:72:8d:d8:84:53:d3:
c1:31:1e:47:a4:f8:4e:8c:17:a2:42:e2:d5:ee:36:03:0c:04:
9a:84:3a:5d:a2:d4:9d:8b:5d:73:fd:11:ca:74:7f:8b:27:f1:
bd:84:6c:c4:d6:ec:f1:1e:c4:74:3a:ba:a4:e2:b5:06:e8:12:
33:69:a5:b7:76:f0:2d:05:de:fb:fa:7e:1b:81:00:68:af:57:
82:c4:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:14 2026 by rpki-client