Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: Kc8GgQkfPw6s6eFPu9CzFyYSBq90OnvzMJLp3jzkqRM=
Subject key identifier: 86:B6:64:23:C7:50:EE:86:B1:FB:4B:4F:99:E6:D8:91:2D:B1:09:AE
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019EC149A4FEAFB11D4BAA8290CFC40AAA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0829
Signing time: Sat 13 Jun 2026 14:01:29 +0000
Manifest this update: Sat 13 Jun 2026 14:01:29 +0000
Manifest next update: Sun 14 Jun 2026 14:01:29 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: OXUS6+2XeXJVZEqz3iKuRftdcQzr/pUNUEZpdSBCcp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:a4:fe:af:b1:1d:4b:aa:82:90:cf:c4:0a:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jun 13 14:01:29 2026 GMT
Not After : Jun 14 14:01:29 2026 GMT
Subject: CN=86b66423c750ee86b1fb4b4f99e6d8912db109ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:41:86:fa:f7:8e:30:ad:8f:79:dc:59:84:
30:59:82:93:9f:eb:77:47:c6:7d:f6:24:1c:18:1e:
f6:1b:f7:55:90:0a:2d:1f:0b:16:08:36:27:c6:b2:
e8:f4:7f:a2:61:22:1e:03:b4:f6:ad:61:a6:e9:d4:
3d:0d:b4:5f:65:05:1b:09:9f:4e:45:40:85:b1:08:
50:d9:ea:f5:bf:07:12:a6:be:55:94:99:a6:2a:9f:
d9:e9:ce:30:1d:3b:74:23:a5:bf:a6:7b:14:dd:ee:
f7:d1:7f:2b:4e:61:4e:f3:8f:b2:43:b0:99:d6:79:
e5:53:05:6f:f2:7b:48:1a:c3:95:0f:5c:18:85:db:
9f:79:2a:a4:11:ec:32:0b:6c:03:83:3b:8d:e2:d6:
7b:7c:62:9b:ee:06:51:2a:1f:a3:c4:16:70:ed:8a:
74:6f:5c:d2:f7:33:e2:7a:86:76:99:67:69:2e:52:
ef:12:a0:dd:db:2d:33:34:64:f3:e0:19:7e:17:f0:
81:5d:8e:8a:37:0a:c6:e0:0f:70:d2:68:db:51:f5:
1c:63:62:26:ab:7e:89:ea:1f:cb:9e:79:7f:de:b1:
6a:a8:6c:66:4a:dd:31:ba:18:70:e0:96:b0:33:19:
28:8f:22:32:a4:8e:f0:a6:7b:64:a5:d2:c2:83:31:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:64:23:C7:50:EE:86:B1:FB:4B:4F:99:E6:D8:91:2D:B1:09:AE
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3d:9f:f6:57:9e:44:3b:39:37:5e:ad:43:17:ea:a7:91:f6:
d5:91:a2:ca:e2:9c:e1:4a:19:29:ac:cb:1e:77:4b:e6:17:f9:
29:54:35:a3:ae:55:77:29:79:f7:27:74:56:76:79:fb:25:1a:
88:61:3f:dc:e4:3b:51:a8:7c:1f:1e:07:52:6a:c8:90:80:86:
99:4c:df:51:c9:13:14:5d:61:d4:56:5a:07:a1:31:25:bb:d5:
f6:27:b1:dc:e7:ba:3c:52:cc:ba:c2:cb:f8:a0:e6:3a:da:2b:
c1:8b:48:71:2b:9b:96:c4:0f:a9:69:fe:fb:73:fa:5a:42:a3:
79:b0:70:ac:fe:27:72:f6:69:86:40:2e:6d:35:7e:6e:c9:24:
bd:65:65:74:c1:c5:c2:a1:d4:a0:06:42:d8:51:b4:e2:95:9e:
6f:75:bf:05:5c:51:e4:6f:ff:91:f0:1e:bd:7c:b1:25:36:a2:
78:2a:14:cf:a1:b3:16:e1:d1:ac:a3:8e:c2:54:b5:e1:92:ea:
63:72:d0:7c:96:1f:9b:a0:07:5b:c4:cb:ba:f4:74:18:ae:8b:
2f:9e:2e:68:62:cf:66:a7:e8:08:5f:d8:9d:b2:f4:31:56:d9:
63:1b:44:1f:5a:e9:a6:67:80:52:3a:83:4d:55:2d:73:d5:91:
d4:a5:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:23 2026 by rpki-client