Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: BQ4caKs/RG+ab2EX5pCH68WPIrLvtXf4FVjyBRi140E=
Subject key identifier: 9F:D4:B7:52:8E:24:E0:CF:D6:2A:82:01:F4:75:86:DB:4F:48:AA:8F
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019EC0A3DF4C7E7AEB70437355554D80B32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 11:00:25 +0000
Manifest this update: Sat 13 Jun 2026 11:00:25 +0000
Manifest next update: Sun 14 Jun 2026 11:00:25 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: VsXh1e4cu60g5aqhFp2yU8cHyxYvxet9pBElO+l2a9I=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:df:4c:7e:7a:eb:70:43:73:55:55:4d:80:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jun 13 11:00:25 2026 GMT
Not After : Jun 14 11:00:25 2026 GMT
Subject: CN=9fd4b7528e24e0cfd62a8201f47586db4f48aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:b8:2b:80:90:a0:cc:37:b9:ca:61:ac:f2:
8a:96:c1:c9:13:2d:af:40:9e:4b:bb:39:d2:ed:25:
0d:94:1e:57:02:e2:1d:9f:df:6a:5e:73:ba:23:41:
3b:b5:02:e8:a0:01:fb:30:05:14:39:47:ac:73:13:
21:19:47:95:a1:38:78:6f:5f:59:07:d3:5f:8d:b6:
68:6d:ce:2d:17:8b:40:8b:dc:46:01:27:bf:8c:e9:
15:42:28:7a:59:a7:39:fb:11:13:1e:a3:45:a7:7c:
71:1f:11:0c:99:54:21:29:88:4a:16:ad:ce:69:59:
60:12:51:55:4b:9d:4a:88:0f:a5:24:6d:14:6b:7f:
ba:c3:7e:48:b8:0a:a4:e9:44:0e:af:c4:22:cd:50:
5a:25:7c:02:18:b5:b7:cc:31:b8:d9:0e:b8:2e:15:
8a:7d:30:f6:d0:6b:8f:d0:18:44:83:a7:3f:79:97:
52:0d:07:50:89:3b:93:0f:50:cf:fd:8a:24:d1:a2:
46:0e:57:2b:38:41:0d:00:08:8f:6f:87:36:f0:06:
5c:24:65:c6:7c:d4:98:83:d5:73:cf:a0:32:74:90:
65:04:78:47:ea:25:d5:99:b4:77:99:21:33:9e:07:
a8:a9:8d:05:3f:3e:c9:eb:53:ee:ae:11:31:d7:fd:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:B7:52:8E:24:E0:CF:D6:2A:82:01:F4:75:86:DB:4F:48:AA:8F
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:36:f2:6f:f7:41:a7:ba:ea:9a:82:01:e0:b2:24:ed:ca:30:
4a:4d:6a:1d:f5:38:25:43:d6:c2:a6:1e:d6:91:41:0a:d0:4a:
56:c5:d1:9a:d4:7f:9a:68:82:af:45:30:70:a9:99:3e:2b:c2:
5d:7e:05:90:9b:c0:db:e7:1f:2c:70:fb:b3:45:ff:0b:74:2e:
97:bb:8c:9f:35:63:bc:b0:3f:d2:a5:0e:b6:93:da:ab:1c:3c:
62:05:6d:e4:59:83:56:14:51:69:b7:26:22:df:3b:6f:db:0a:
4d:a3:01:63:6d:f3:99:ea:d4:77:b0:65:0e:d5:f7:a8:c2:91:
97:86:8e:0b:1f:ea:e9:ad:66:5c:7d:96:88:c7:a3:6f:36:61:
27:ce:24:b7:97:5e:01:79:07:e1:1b:3e:51:04:0e:f1:1b:28:
82:90:aa:6e:3f:00:27:db:ff:e8:1e:78:97:02:03:c3:5b:83:
53:b2:30:bf:53:5a:a3:70:a5:f0:e9:cf:37:10:85:7d:f8:8e:
f0:99:55:d5:20:5d:0b:71:96:26:5d:16:82:90:e8:8e:7b:39:
2e:ee:ec:0d:40:a3:fc:18:4f:ca:87:3e:e5:0b:12:af:02:2c:
6a:61:3e:a4:a1:7a:c1:5e:63:15:f4:3c:30:4b:f0:27:a6:70:
0f:46:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:06:01 2026 by rpki-client