Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/20ad31-06d5-440e-b65d-916f82a19374/1/kxKOcw_VQXIICfllCi87oEXHipg.mft
File: kxKOcw_VQXIICfllCi87oEXHipg.mft (raw, json)
Hash identifier: ynoLQb3gyjXshDzErQVZFHzw2VIOYDnS7kHdr6T7E48=
Subject key identifier: E4:C8:12:46:19:65:F4:9F:77:F0:2E:02:8A:31:F8:8E:55:76:B9:9D
Authority key identifier: 93:12:8E:73:0F:D5:41:72:08:09:F9:65:0A:2F:3B:A0:45:C7:8A:98
Certificate issuer: /CN=93128e730fd541720809f9650a2f3ba045c78a98
Certificate serial: 019EB98F3B0ECC7B69E2E059119361232A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxKOcw_VQXIICfllCi87oEXHipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/20ad31-06d5-440e-b65d-916f82a19374/1/kxKOcw_VQXIICfllCi87oEXHipg.mft
Manifest number: 31
Signing time: Fri 12 Jun 2026 02:00:32 +0000
Manifest this update: Fri 12 Jun 2026 02:00:32 +0000
Manifest next update: Sat 13 Jun 2026 02:00:32 +0000
Files and hashes: 1: jXKs5yUBaq4QS9XIRNM0CZieRV8.roa (hash: 0oaOd4Xcnu2fp4RcF2Ni0LUyeVV1m4XUbLo145jzvpQ=)
2: kxKOcw_VQXIICfllCi87oEXHipg.crl (hash: RKHOkkwa+KbgMiFKffTP2EyRvyG5hEZGg1dzf5F1y1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/20ad31-06d5-440e-b65d-916f82a19374/1/kxKOcw_VQXIICfllCi87oEXHipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/20ad31-06d5-440e-b65d-916f82a19374/1/kxKOcw_VQXIICfllCi87oEXHipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxKOcw_VQXIICfllCi87oEXHipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:3b:0e:cc:7b:69:e2:e0:59:11:93:61:23:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93128e730fd541720809f9650a2f3ba045c78a98
Validity
Not Before: Jun 12 02:00:32 2026 GMT
Not After : Jun 13 02:00:32 2026 GMT
Subject: CN=e4c812461965f49f77f02e028a31f88e5576b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:c7:a4:89:ea:cb:64:20:27:60:98:b8:7a:
36:9e:e1:ee:ac:29:db:dd:f1:94:99:a9:dd:81:99:
26:83:b3:7d:c1:95:75:67:14:e3:dd:7e:46:ee:32:
b0:31:59:4e:42:5e:6e:24:99:2b:25:09:af:96:a5:
c5:59:70:cd:a4:9b:49:c6:37:c2:52:38:ca:76:8f:
e3:c6:6a:af:02:05:9a:36:92:41:e5:4f:37:7f:99:
af:17:ef:14:c7:fe:e0:d1:09:c8:ca:33:48:b7:df:
43:0e:3e:9d:6b:6e:f8:2f:ce:1f:f5:09:0d:0c:e3:
02:40:34:86:78:69:f9:29:fc:f8:6e:b0:b7:45:b4:
0d:05:0e:3d:ac:e3:00:3b:96:f0:57:13:cd:cf:8a:
48:83:f9:33:a3:37:c1:8f:26:6d:34:2f:c9:60:65:
1c:0a:36:b9:64:36:f0:8e:bd:b5:d6:9f:28:8d:90:
04:24:2a:40:5e:99:9c:ce:c2:e4:58:09:28:75:dc:
a9:42:b5:45:58:31:d4:e7:14:d4:1f:ca:fe:77:67:
82:52:7d:41:82:3a:2e:19:05:88:03:51:77:91:3d:
58:af:2e:d8:ca:64:ae:a9:38:92:78:69:1f:43:cc:
2a:ba:63:5f:cf:02:74:bf:b5:8b:50:5e:67:c2:e7:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:12:46:19:65:F4:9F:77:F0:2E:02:8A:31:F8:8E:55:76:B9:9D
X509v3 Authority Key Identifier:
keyid:93:12:8E:73:0F:D5:41:72:08:09:F9:65:0A:2F:3B:A0:45:C7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxKOcw_VQXIICfllCi87oEXHipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/20ad31-06d5-440e-b65d-916f82a19374/1/kxKOcw_VQXIICfllCi87oEXHipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/20ad31-06d5-440e-b65d-916f82a19374/1/kxKOcw_VQXIICfllCi87oEXHipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b7:c4:78:08:bd:0d:14:62:e1:d8:8b:14:7e:57:a2:2b:e1:
5b:4e:92:93:51:ef:7d:76:82:2b:73:d2:de:38:8a:fb:55:6d:
8e:07:71:d0:20:53:6f:9d:70:b5:ec:9d:11:ef:8b:ad:6e:55:
1b:c1:ed:1f:e0:d5:0e:3f:96:df:3d:20:59:e5:1a:b8:f5:c9:
a5:7b:50:74:c7:fa:fb:2b:46:83:4e:b9:2e:64:bf:ec:0f:e4:
81:10:5b:95:24:19:49:39:ba:d4:36:3b:6e:7a:99:54:44:73:
2c:fc:d8:b7:7e:3f:22:dc:6b:61:7e:3f:87:39:9e:14:17:4c:
2e:83:a7:ee:5c:e8:f9:a1:f0:6e:ae:cc:57:9c:b8:46:de:0d:
e4:33:0e:ac:36:e3:ca:5c:3e:24:df:40:06:37:0e:71:8c:44:
fc:e8:0e:60:91:06:4f:f0:2d:9b:50:02:60:72:d7:14:de:f1:
31:e8:63:e1:38:0b:17:57:65:8f:14:de:1c:c8:67:f7:2b:c6:
86:15:71:8b:cd:26:cd:e0:6b:d3:c5:cc:26:8b:b0:a9:12:51:
3d:b8:1c:b9:bb:df:65:ea:77:39:a0:f8:ce:a8:14:0f:99:b1:
ca:02:af:9d:cd:b6:c0:73:a0:c0:52:e5:43:c9:16:bc:1a:6e:
43:8b:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:34 2026 by rpki-client