Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: 0VhWq89OWhq+X6hMov2nKEPmOp5aL/7Aisanrcbe7N4=
Subject key identifier: 0C:0B:C9:1D:7B:1C:58:BD:D1:5B:01:CA:35:D1:D0:86:04:01:14:97
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019EC0DAF5D673A681375A8F9B540D8BF7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 15C9
Signing time: Sat 13 Jun 2026 12:00:35 +0000
Manifest this update: Sat 13 Jun 2026 12:00:35 +0000
Manifest next update: Sun 14 Jun 2026 12:00:35 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: t0xyYdqcOKoIdC+imqPwIq1O+SW3g8J5zIk1afQC548=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:f5:d6:73:a6:81:37:5a:8f:9b:54:0d:8b:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jun 13 12:00:35 2026 GMT
Not After : Jun 14 12:00:35 2026 GMT
Subject: CN=0c0bc91d7b1c58bdd15b01ca35d1d08604011497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:a8:e6:9b:02:37:00:53:90:94:8d:29:fa:
77:f7:6d:d4:c5:ee:6f:54:32:7f:58:27:5f:c1:b5:
34:60:ea:8f:15:2f:38:b7:26:be:eb:0a:6a:ba:7e:
ce:e1:96:15:74:96:0e:39:57:3a:a7:ee:47:ce:87:
86:88:19:22:0f:a4:8d:f7:a5:21:1c:7d:bb:a5:41:
b1:be:c7:85:e2:8c:e2:72:3f:e3:2f:1a:f1:5b:69:
94:bb:40:f4:96:eb:8a:e1:a8:31:23:32:d9:70:5b:
ac:25:cd:ff:64:00:44:10:d7:75:27:fc:c8:25:36:
31:97:fb:92:f9:e7:66:3c:d9:21:9e:a8:33:87:d6:
80:77:cf:97:82:7f:8a:6f:17:ca:7c:7c:fc:b7:c0:
18:a8:f3:89:a7:d0:8c:24:21:72:27:2a:49:e9:0c:
21:11:51:ce:f9:04:16:ae:ee:a8:fd:18:57:a9:fe:
34:5c:34:5b:08:db:fc:bf:2d:da:be:b3:70:f5:51:
b1:70:66:72:b8:da:61:94:f6:94:49:6a:14:b2:b9:
fb:16:21:a6:e7:13:72:d8:e2:31:96:8d:63:14:3d:
dd:e4:28:3f:b1:30:4e:ef:b6:82:8d:b4:c1:18:60:
48:cf:c5:e0:c9:6c:65:b3:2b:66:f4:07:9e:76:2a:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0B:C9:1D:7B:1C:58:BD:D1:5B:01:CA:35:D1:D0:86:04:01:14:97
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:12:12:df:a1:0b:90:db:d4:1e:28:dd:ac:fa:ff:20:43:f1:
b9:b6:ad:ac:2b:09:06:40:23:8f:87:83:08:35:a7:76:d8:5e:
db:11:cf:1a:45:7a:c4:91:83:f5:8c:ed:d4:b2:e0:a7:f6:39:
8d:11:05:46:4b:00:34:ed:0a:dd:56:90:69:11:69:78:f7:13:
62:ff:40:39:a8:6c:7c:54:4a:8d:00:d6:b4:42:57:c1:67:fd:
72:9f:fd:f9:2c:d6:ee:44:cf:7f:af:85:f6:af:d9:4a:16:14:
3e:5a:f0:91:62:f9:9b:f5:93:fd:94:7d:08:df:12:72:b1:c9:
92:8d:de:7b:5b:4f:bf:a4:41:da:b4:cd:a4:44:37:b2:78:e0:
34:b0:66:30:8e:f5:56:52:78:d2:75:f7:5d:5a:ab:7b:86:80:
fa:a1:fa:18:2b:97:1d:85:eb:fa:cf:28:fd:3f:ab:e0:41:6d:
22:bf:02:6e:00:3c:ce:7c:b7:e2:41:66:74:fa:7e:7d:de:a9:
0b:27:60:d7:6e:0c:ee:0f:ad:c0:c4:68:03:fb:18:cf:fc:8d:
dd:56:19:6d:42:63:fb:17:95:50:ab:e7:b9:d6:b4:52:41:59:
0d:1a:f2:50:70:3c:31:fc:ba:c6:85:2e:65:a3:8b:87:a5:5a:
43:7a:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:44 2026 by rpki-client