Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: X6TIcPH7Wy/9zTROjjhHYic21eAntl+YAm9XF6KiUpI=
Subject key identifier: 35:88:33:3D:75:CD:51:79:71:B0:92:2D:8A:41:D9:85:8B:84:47:3F
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019E3184AE55F994CD70F73AEA98D14BC1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 16:00:39 +0000
Manifest this update: Sat 16 May 2026 16:00:39 +0000
Manifest next update: Sun 17 May 2026 16:00:39 +0000
Files and hashes: 1: 2zalanC3hLAiWZsaueYly5WPDys.roa (hash: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA=)
2: 8WiTHhRR5UDbte2ps20s8LuHuFI.roa (hash: hI0ka3m/nqIpOykYSI0iEPcTgskawSt+HKYOhbD4JNw=)
3: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (hash: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo=)
4: CDqm3nL-mWUyOy7FztAgewiin3g.roa (hash: Dkjb68aiN/QU/1LeHSAGRrsXMObCtO5LMWVbJ6e1quk=)
5: JKSn3ivcD7ulcEDYFnAk6kK8JVE.roa (hash: Y5qnFyuoFbYoSj1p2Mc4Ujlrd4TbP66nKsTT70JVghI=)
6: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: Jtm5/SprUW/etreNMFktPqUER5nyOKafQj8cmlvShR0=)
7: NqHlYSS8cxjiTpKHn6trhssa2iQ.roa (hash: l5a4ldpkJRCpHFzDTjg2f++LcCqwV78yBnjEaKlm1Aw=)
8: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (hash: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE=)
9: v6jE1I_1KnawMolAIIFEXyMcQs0.roa (hash: YNPiyPMqq2HOdLiYv7ctfE3scpFNBTASL6D3TCF7mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:ae:55:f9:94:cd:70:f7:3a:ea:98:d1:4b:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: May 16 16:00:39 2026 GMT
Not After : May 17 16:00:39 2026 GMT
Subject: CN=3588333d75cd517971b0922d8a41d9858b84473f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:0e:b8:b9:07:db:a2:bc:94:73:13:89:41:
46:8b:82:47:22:2a:9e:81:aa:e1:c0:1f:5b:d7:03:
62:72:b5:3c:72:7a:c0:f1:32:72:b2:c4:9c:4f:b7:
5f:e4:b6:b6:c7:e0:c7:fa:f9:4c:5a:0f:6d:12:c1:
ea:02:b9:ef:6c:14:01:60:ce:bf:81:a7:23:92:d5:
76:42:b4:d3:c9:d9:02:c8:6c:93:55:a1:d1:3e:54:
6b:ee:f8:e9:43:6c:ae:37:84:fd:cc:9a:4d:26:19:
8e:31:c4:c4:e8:67:b1:00:0a:6e:ad:cf:ff:b7:a1:
2f:94:c9:2f:01:b2:fb:31:4a:9d:3b:25:6e:34:c4:
6d:d4:c2:cb:c0:6c:e5:89:d3:92:97:43:5d:0a:40:
b8:28:a4:a6:ed:ed:03:30:f2:39:a5:bf:68:d1:28:
c6:5f:fb:10:2f:64:f4:13:69:81:2d:c7:bf:2f:dc:
8b:cb:b9:f2:b3:f4:eb:30:95:cd:67:01:38:ab:70:
f9:e1:79:fb:5b:b5:5b:fa:7c:d2:99:87:7a:02:a4:
75:86:67:f3:4f:95:c6:79:56:05:f8:7d:d9:dc:ee:
63:02:31:71:29:e2:52:38:8d:37:3f:cc:96:17:e6:
3c:45:88:02:59:8e:45:7a:ab:b1:7c:6d:24:64:8c:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:33:3D:75:CD:51:79:71:B0:92:2D:8A:41:D9:85:8B:84:47:3F
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:13:4e:39:47:c6:15:3c:6b:2a:f6:8e:02:3e:5c:b7:b0:b0:
e1:7d:18:b3:e7:3a:d8:5b:38:5b:b3:b9:bf:c7:6d:03:6b:ea:
63:bb:56:fa:c1:62:a3:6a:ce:3a:f9:a1:c1:26:ed:e2:3f:dc:
b4:39:db:63:d6:75:64:fa:a9:b5:bb:be:ae:2d:58:37:9a:51:
80:15:d0:1e:80:77:cf:ac:40:b4:26:23:81:43:63:09:dc:f1:
ee:61:22:9d:f5:50:59:af:e3:a2:e6:c2:3a:09:3d:e0:21:76:
c3:74:d9:ab:ef:8c:8e:d8:12:81:cd:a5:5e:db:b9:81:71:56:
80:96:e9:70:04:be:b1:27:ae:d0:1b:cb:3a:43:27:75:15:14:
db:78:13:50:e5:43:a6:81:0b:34:d3:77:f7:26:4f:8d:36:f5:
c0:69:67:c4:e1:d0:ee:92:68:07:6d:90:e6:b1:35:92:19:cd:
f4:0a:73:8a:31:21:5f:b4:5f:4c:ca:62:96:8a:0d:f2:a1:1d:
92:dc:66:38:67:04:cb:ad:8e:c0:38:a0:ac:58:3f:8f:9f:c6:
8c:97:9b:68:82:6f:20:59:9f:c9:5f:e2:9f:f4:1c:80:00:05:
35:09:3a:e0:2e:a1:a1:35:fe:91:b7:b8:5e:1e:79:f6:e9:dd:
ca:14:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:20 2026 by rpki-client