Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: DgVEoLDyvrOIXj4gLKWUralub/0ZQd9YQkdV49qk8zs=
Subject key identifier: 7E:B7:A2:1A:3E:69:2A:B7:E4:D6:F0:22:C7:CC:8C:17:D9:AF:94:13
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 019EC14891069D054C995EFEBAAD95164220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0E7E
Signing time: Sat 13 Jun 2026 14:00:18 +0000
Manifest this update: Sat 13 Jun 2026 14:00:18 +0000
Manifest next update: Sun 14 Jun 2026 14:00:18 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: kTWfqKThKfIHKhKFNIPgzaedPSxHbQJVS5MqAM94onU=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:91:06:9d:05:4c:99:5e:fe:ba:ad:95:16:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Jun 13 14:00:18 2026 GMT
Not After : Jun 14 14:00:18 2026 GMT
Subject: CN=7eb7a21a3e692ab7e4d6f022c7cc8c17d9af9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:6c:77:f7:82:d8:71:3c:88:94:11:cd:ef:
23:cb:33:90:8f:d1:4a:ac:61:cd:c0:37:dc:e2:86:
7f:78:84:c1:c1:5c:85:73:96:95:4a:f4:87:73:b1:
fc:04:c2:ac:9b:e7:4d:9f:f8:df:88:25:c8:86:7d:
d5:14:2e:cb:a8:82:e4:d4:6f:57:fa:de:65:3c:e0:
06:d6:ea:27:16:67:eb:48:09:ea:78:46:10:d2:5e:
09:88:7e:38:c5:09:db:23:3e:0a:25:77:95:0c:6b:
f3:f8:5b:e8:1a:cc:5e:54:15:18:1c:cc:ff:28:bf:
2b:3f:31:87:d4:35:6b:82:fc:07:ce:b3:a2:8d:9e:
92:60:1b:a4:96:0d:06:e1:c1:4c:e8:2c:8f:bf:90:
9d:50:f0:a4:3d:b2:df:57:38:55:d1:b0:38:d2:d9:
26:b0:8e:88:b0:71:60:0e:8f:2a:01:2a:0a:c9:53:
3d:ff:3a:91:00:e7:64:8c:65:3c:79:e4:c7:ba:68:
45:6d:25:ec:48:57:6e:e7:37:ba:d8:91:9b:a1:63:
80:7a:df:0f:38:d4:67:a2:06:42:a1:32:2f:90:7f:
8e:3c:d8:50:9f:7a:7c:8a:5a:4e:e1:cb:77:68:40:
f3:2f:71:c6:6a:8e:7a:4b:38:30:51:07:dd:fe:7d:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:A2:1A:3E:69:2A:B7:E4:D6:F0:22:C7:CC:8C:17:D9:AF:94:13
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a3:d5:35:13:f2:6b:f3:d4:d4:bd:6a:ce:a1:bd:de:96:7e:
93:90:7a:4e:c2:ba:f5:f7:ba:98:1e:7e:51:58:29:23:2c:a5:
50:24:81:3b:d3:1f:63:dd:c3:5e:7c:29:89:e9:68:44:ed:5f:
d1:2a:97:83:11:60:5d:d0:cf:23:3e:fd:db:3a:c4:64:64:91:
3a:e0:52:76:d5:11:7f:e0:fe:c9:50:5e:cc:d2:1d:a1:22:e2:
30:6d:53:7c:86:51:e4:a8:e2:f2:28:cb:de:80:ad:24:2c:cd:
35:12:72:d9:b9:54:0f:75:96:49:2c:b8:2b:7e:35:50:de:2f:
34:16:47:9b:3e:a8:d3:a4:17:7a:92:70:5b:00:7f:41:0d:b0:
25:e9:2f:83:f4:50:7e:e0:ac:33:f2:22:07:18:67:ee:be:4f:
57:97:36:d5:d3:61:5e:f1:6f:56:12:63:5b:0c:6c:5b:9c:14:
ec:41:8d:b7:2a:b3:cc:45:5b:05:4c:d5:0d:1e:d1:9e:69:90:
0d:16:d2:12:b5:8e:f3:6e:4c:bd:1e:f0:a6:41:ca:25:b8:9c:
1a:f5:86:70:50:4d:19:0b:0b:ff:53:d0:a3:2a:e0:c5:d8:1e:
11:df:85:83:83:9a:8e:36:5a:44:94:60:64:ec:b0:3f:75:fd:
3a:ca:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:17:28 2026 by rpki-client