Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: uwFwrktwpAkTaQqvBr5uhQmPBg77ymupbmBUQOktZyU=
Subject key identifier: 22:5C:E0:12:B4:B4:CD:4C:11:19:73:C4:A1:D2:40:E3:36:CF:61:6E
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019EBF239C1F013B963B05F7BD64757DF226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 18EB
Signing time: Sat 13 Jun 2026 04:00:42 +0000
Manifest this update: Sat 13 Jun 2026 04:00:42 +0000
Manifest next update: Sun 14 Jun 2026 04:00:42 +0000
Files and hashes: 1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: sMCLFmbl7VfIP++0NKbFxqBBz2csysPpSfTP/K6MPcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:9c:1f:01:3b:96:3b:05:f7:bd:64:75:7d:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Jun 13 04:00:42 2026 GMT
Not After : Jun 14 04:00:42 2026 GMT
Subject: CN=225ce012b4b4cd4c111973c4a1d240e336cf616e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:29:95:5a:f5:62:70:30:49:91:78:9f:cb:
b1:fb:fd:5a:0e:c2:06:2f:af:8c:b8:c6:5b:94:d3:
8f:1d:4b:ec:be:89:17:97:08:e8:42:05:bc:cc:e3:
e1:29:ec:f8:85:38:ab:da:9e:2c:30:85:d9:ba:bc:
fd:59:5b:7e:59:c0:4d:64:07:3e:d1:20:9c:3f:71:
33:87:69:a2:3f:36:d0:93:65:9f:83:d9:d4:04:4a:
7b:bb:51:76:d3:07:06:69:33:84:98:ef:13:75:87:
ce:b9:bc:98:ee:e0:f8:18:de:d3:fc:02:d4:e7:8b:
56:76:ae:27:03:a4:5f:9e:05:32:71:f8:05:8b:42:
df:d6:c9:0c:28:2b:1a:01:71:76:6d:a5:8d:2a:15:
ab:33:24:92:b8:7f:49:03:e0:4b:a1:db:18:83:6f:
73:f9:b7:58:bb:48:f2:0c:15:f4:ef:06:6b:be:26:
22:57:c9:13:c9:26:1d:e5:87:20:a3:2f:fa:2c:10:
f8:5d:a0:c0:fa:ac:d3:20:47:f6:b7:17:4a:8e:e0:
56:cd:05:24:58:83:4f:3d:e2:ab:d0:0c:03:bc:e0:
50:40:9d:3a:01:53:b9:46:08:3a:a8:62:5b:07:28:
57:08:1c:bc:e9:6e:a5:27:f9:a8:a8:65:17:25:ef:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:E0:12:B4:B4:CD:4C:11:19:73:C4:A1:D2:40:E3:36:CF:61:6E
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:11:40:c3:43:49:c7:80:f7:92:7c:1b:15:5b:58:ab:ee:b6:
26:94:61:88:02:83:bc:8c:0e:51:be:d6:39:f5:72:9b:0d:7f:
e5:79:82:07:df:ed:0f:3c:52:86:aa:4b:c9:bc:21:15:93:7c:
62:a7:16:f8:69:1d:c5:35:a7:e6:e0:c7:4d:c8:22:a6:14:64:
90:29:5c:01:0a:7a:e1:73:6c:c5:c3:0f:63:07:4b:a3:cb:bf:
60:b8:87:ce:0b:1c:7a:a3:60:55:81:f1:06:4b:1c:62:04:e8:
99:4e:30:58:dc:25:8c:d6:95:8f:5a:bc:3a:51:40:2c:62:17:
46:55:ec:6e:90:c5:42:1c:47:3c:90:26:00:a0:d7:76:62:8b:
0e:60:f9:13:0b:64:3b:4a:7d:76:68:3f:d3:83:8c:7c:87:30:
60:46:af:62:b4:82:ed:cb:b5:36:79:79:20:0d:ea:a0:54:fc:
00:f6:9f:cb:2e:c7:3e:0d:b8:b5:e0:06:28:f3:cf:dc:9c:9b:
b0:ab:ba:35:fb:b5:37:97:c1:08:6a:84:73:37:a3:09:47:e5:
97:93:8b:64:60:4c:75:5c:9d:4a:4c:41:8f:67:cf:d3:01:3f:
00:b5:c9:5c:1e:c6:ca:07:5c:20:31:05:38:02:e6:6f:64:0d:
5a:c8:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:06:28 2026 by rpki-client