Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: k4KYDZ52EMplL186dOHaxOeiT3Wduc1GlljbI++YpLU=
Subject key identifier: 84:BC:2B:9A:2D:3B:35:7B:A0:07:79:5B:40:C1:26:08:15:F3:3E:14
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019EC300C6E8675D17D84B4BD28689F9AD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 22:01:08 +0000
Manifest this update: Sat 13 Jun 2026 22:01:08 +0000
Manifest next update: Sun 14 Jun 2026 22:01:08 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: DzLXBXWE66Yef7chjHSfMW7t1isR0psdPgAgN+Qo19M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:c6:e8:67:5d:17:d8:4b:4b:d2:86:89:f9:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jun 13 22:01:08 2026 GMT
Not After : Jun 14 22:01:08 2026 GMT
Subject: CN=84bc2b9a2d3b357ba007795b40c1260815f33e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ac:95:9d:92:44:36:89:d1:ab:4d:6e:4b:4a:
2b:2a:d7:f6:6b:eb:91:15:1e:d8:82:c6:e4:be:56:
be:16:f4:79:80:3c:6a:15:56:99:4f:70:16:59:18:
32:28:7a:21:58:a3:b3:b0:be:cc:37:54:cf:aa:08:
9f:a0:af:ef:ee:f0:cb:89:9d:be:09:a5:50:f1:44:
5a:60:36:91:a0:c7:23:e9:98:37:77:4e:cb:cc:a6:
92:89:f5:f2:f9:07:1d:b3:e6:11:9c:d6:f4:1f:57:
48:4b:cf:bb:6b:c9:f7:e1:e3:9d:5d:b5:0c:02:60:
1c:61:5f:52:b0:9e:1f:df:92:21:8d:b4:83:2c:e6:
3b:4c:78:7c:28:a0:cb:92:15:4f:49:11:f7:84:3c:
cb:a0:e1:be:6a:ec:60:8a:c1:d8:97:c3:94:0a:24:
f9:ef:fd:1d:dd:34:38:49:e4:1c:a6:a2:b0:05:7a:
21:e3:6f:39:52:66:3a:99:af:80:d2:a8:a3:72:48:
27:21:71:16:c0:3a:df:d2:7b:77:06:6f:32:9f:1e:
be:55:42:e5:fc:d9:35:aa:f1:ed:cd:5a:3d:2e:d9:
82:2b:e4:f4:ea:12:be:02:71:e2:f5:ac:16:01:c9:
77:1d:38:33:34:f5:31:c1:09:68:1e:37:65:69:46:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:2B:9A:2D:3B:35:7B:A0:07:79:5B:40:C1:26:08:15:F3:3E:14
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:c8:d7:29:cb:be:7c:09:48:53:54:cf:57:7b:83:3b:b6:
6f:4e:83:64:ff:a2:e9:0b:9f:68:01:68:06:3c:5b:36:9c:4d:
b3:84:4a:7c:af:96:59:6c:93:99:2d:40:25:21:bb:6d:56:08:
66:7a:b4:76:21:34:d4:16:3e:db:8c:65:c0:05:15:15:bc:16:
8a:d1:63:c1:d3:96:c9:d1:5e:90:5e:58:1f:9d:f7:9c:24:77:
95:31:90:4d:62:0b:f8:78:60:4e:6d:32:ca:ce:54:8e:23:56:
a3:3b:0a:21:60:6c:6f:09:81:83:ae:8d:c6:be:e2:13:b4:e3:
6e:03:bf:80:6c:b1:f6:9e:06:e0:f2:d4:a6:32:38:26:9f:7f:
66:92:3a:4e:65:89:a1:b3:c1:49:df:ed:eb:61:cd:b5:13:ec:
82:1c:81:2f:c9:84:37:88:3b:5c:2d:58:51:51:93:fd:7d:d7:
79:ef:61:f0:3f:5b:38:18:4f:39:71:bd:33:99:20:47:31:5f:
0b:8d:96:4a:88:59:68:9c:be:ab:d7:bd:69:4f:f0:a5:53:6d:
21:ca:87:9a:17:2f:ed:34:3d:7b:1f:64:20:9a:43:9b:f5:4e:
0c:4f:35:08:66:8b:e8:3a:f9:07:c1:8a:3a:24:e1:59:07:ef:
8a:7d:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:46 2026 by rpki-client