Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: OegZacemU7l/8rT73qV3l31gkTdXhjkJt/bZzhUlxos=
Subject key identifier: 31:C4:19:61:8C:38:8A:DE:3F:B4:33:F2:E1:88:06:6C:51:CC:84:B4
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019EBFC916C260DB4878F2BBDB1256FD2838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 07:01:27 +0000
Manifest this update: Sat 13 Jun 2026 07:01:27 +0000
Manifest next update: Sun 14 Jun 2026 07:01:27 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: e3I/XA11je2DV95gdGCozjsHnanWluYK/LysIqcbMEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:16:c2:60:db:48:78:f2:bb:db:12:56:fd:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jun 13 07:01:27 2026 GMT
Not After : Jun 14 07:01:27 2026 GMT
Subject: CN=31c419618c388ade3fb433f2e188066c51cc84b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:e4:6e:46:d1:04:35:0f:3a:b7:d6:a7:5a:
e1:dd:67:d1:61:4a:8a:7b:7b:1e:a3:22:e6:25:37:
b9:23:01:65:17:a4:d8:35:24:e7:31:f4:c7:cb:a1:
2c:df:25:64:69:9c:01:0b:a9:b8:53:66:14:39:1c:
e9:65:2c:27:e1:3d:0e:e1:e0:91:82:c6:6d:6f:bc:
4e:75:4e:87:11:fb:08:3b:cc:5a:bb:92:3a:f5:9e:
4a:a7:db:9e:55:1f:bb:d9:fc:31:a8:ef:ae:f8:0a:
5e:68:12:4b:5c:6d:17:a0:6f:8b:04:eb:e9:08:68:
66:7c:99:57:f6:92:87:3e:2e:3a:c0:17:85:02:6e:
41:8e:1b:ac:2d:ae:58:34:63:83:df:ed:00:04:61:
2c:05:4b:15:76:a1:c1:a4:ba:6b:37:28:95:0e:2d:
a1:cf:89:d8:28:5d:e5:6c:27:fb:91:74:72:35:8a:
41:33:43:7f:9e:d1:48:3f:f2:89:19:23:f5:21:00:
71:c5:06:8e:f4:c5:42:f7:0b:e7:e1:0f:44:9c:2d:
cf:c5:63:49:d9:61:0b:f9:3a:da:b3:9d:f7:93:28:
97:0d:1a:db:1c:27:fe:c3:9a:08:32:0f:37:13:5f:
87:bf:31:34:4b:ac:19:02:f0:80:4b:02:18:33:96:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:19:61:8C:38:8A:DE:3F:B4:33:F2:E1:88:06:6C:51:CC:84:B4
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1c:54:7f:64:72:8b:cf:3c:b4:ed:f0:c0:7f:73:65:b9:28:
05:c0:dc:a9:b7:74:36:2f:39:d1:fc:c9:35:ca:f6:a9:a4:56:
0b:f4:d5:dc:fe:73:8b:f4:e3:ad:ae:88:7d:d4:ef:30:8f:f4:
7f:11:be:68:85:e8:8e:74:bc:9a:cb:6a:ef:6c:97:bf:27:b1:
c8:69:d0:a2:9c:b4:64:82:bb:58:9a:ae:4a:e7:7b:41:41:5b:
e2:82:41:eb:c5:09:b7:c5:93:14:02:ea:10:df:0c:c4:de:22:
89:d7:e1:4e:dd:cb:65:6c:8b:e4:df:d4:f5:6c:75:9b:b1:50:
83:16:74:0c:b0:22:de:d5:04:3b:d6:c9:1a:52:9b:27:a5:33:
61:a0:18:55:9e:d3:26:d7:79:62:b2:ef:30:a3:d2:e3:ec:72:
c3:b6:ba:95:9b:bb:f5:5c:f8:b2:87:c0:0a:51:98:07:18:55:
9e:1d:f5:4a:1f:73:17:8c:dc:e2:94:81:17:b6:84:ac:1e:aa:
f1:23:a5:a7:2d:5a:9c:e7:8e:1a:b7:e5:51:05:4b:3d:94:cb:
1d:94:59:d2:22:8a:7a:b6:11:d0:f7:f7:88:4f:00:0e:8f:7d:
eb:09:fe:48:d0:80:b8:86:6a:8e:05:2a:cf:66:b9:04:5e:9d:
f1:b9:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:28 2026 by rpki-client