Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: pRenmUidV/NvCs/QO3RCZiSHSo7RolS/BYqm6ODMGeI=
Subject key identifier: C0:D8:07:EB:B9:BA:46:1B:63:70:79:1E:F1:D2:87:E9:56:9B:00:F5
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 019EC300B6804D3ACB403423860ACA5AE489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 17CB
Signing time: Sat 13 Jun 2026 22:01:04 +0000
Manifest this update: Sat 13 Jun 2026 22:01:04 +0000
Manifest next update: Sun 14 Jun 2026 22:01:04 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: sCr+Wlsa3fxxb2rc7eFUyiVoXAsSZXbT0KsxQFkCt4I=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:b6:80:4d:3a:cb:40:34:23:86:0a:ca:5a:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jun 13 22:01:04 2026 GMT
Not After : Jun 14 22:01:04 2026 GMT
Subject: CN=c0d807ebb9ba461b6370791ef1d287e9569b00f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:7e:13:bc:2e:9c:f5:c3:55:65:be:ab:80:
b0:7a:70:70:33:2c:63:0f:93:27:ec:6f:74:5c:2c:
4b:08:76:9e:63:c8:ba:ac:38:ab:0a:16:fe:dc:10:
96:42:ff:60:0a:7f:86:83:96:35:80:0c:42:aa:18:
17:99:47:9e:e1:d5:f3:ae:99:ee:5c:23:43:06:40:
0d:af:3c:7b:73:5e:55:11:19:86:b8:c3:f3:71:f8:
25:c8:14:3e:86:7f:ec:de:36:55:d3:43:30:69:6e:
28:2e:6f:3c:67:29:05:40:72:2e:e4:8a:78:c4:7d:
c0:49:0a:52:37:a2:17:15:94:79:41:93:b0:cb:31:
e6:eb:5b:85:b7:ee:c3:c1:8a:39:36:97:f4:f8:0c:
11:6d:2e:c8:39:7e:43:88:a4:15:ec:3d:d5:34:e3:
87:56:0d:aa:ef:e6:62:6d:82:f6:79:c2:da:3b:69:
6d:67:50:b6:f9:7e:82:f6:99:3e:1a:79:9a:7f:f0:
1d:e1:bd:8b:85:8c:2e:4f:1d:92:8c:5e:02:2a:7c:
b2:f2:00:3c:b6:68:ae:ab:88:43:e4:15:d0:bb:65:
dd:3e:51:1b:cd:68:09:6f:51:49:a2:7c:2c:b5:45:
43:c8:74:f7:ac:fe:85:7f:54:38:a5:1b:c4:b7:19:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D8:07:EB:B9:BA:46:1B:63:70:79:1E:F1:D2:87:E9:56:9B:00:F5
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:01:e7:6f:62:94:d1:20:da:49:b2:c3:e9:60:ae:a5:25:
f3:3f:13:31:4e:92:a2:e1:3a:27:5c:9c:de:45:a3:38:6c:4f:
0f:03:a8:87:6d:03:3e:38:04:fb:7d:53:8d:f0:6f:aa:b1:4b:
6b:4c:1a:39:ea:7c:d5:3c:7f:37:ef:5f:c3:59:b6:8f:aa:09:
0c:bf:c6:13:94:b1:46:21:4a:4f:85:7f:12:d0:b3:62:06:d5:
9d:02:62:94:48:9f:49:25:55:5e:b5:a2:b1:ba:6e:f1:48:c8:
cc:3f:e0:82:8d:0c:93:cf:53:15:75:58:c6:62:ef:ad:6b:1c:
04:62:24:90:f6:d0:08:54:46:ef:76:1e:9f:6c:f0:79:7c:8d:
42:d0:0b:3f:3a:73:00:27:4d:d8:62:aa:ff:31:32:31:eb:f6:
64:0d:e1:23:61:ad:50:7d:1a:ee:0c:68:40:70:8c:5d:59:0e:
14:18:4d:d9:13:73:76:6f:ef:89:85:bc:08:a0:7c:b1:4e:64:
31:38:e4:06:e2:d5:5a:74:f9:6b:33:39:f7:d2:b6:c9:5b:cc:
de:2c:68:c7:40:8e:d8:40:33:2e:35:6d:63:40:ac:5c:54:6d:
db:9c:80:08:2b:c2:da:63:24:9c:d5:0b:5f:a4:02:f1:63:01:
01:cd:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:46 2026 by rpki-client