Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
File: kDstfw0D26MMK2Kn71bsuzg0j0Y.mft (raw, json)
Hash identifier: gozw/en+0clJcep7NI9usV8nc/lOw2lOabBGdGq5zNY=
Subject key identifier: E9:E4:29:6F:75:18:77:92:20:54:89:3D:0E:14:C1:99:5C:23:FA:B3
Authority key identifier: 90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
Certificate issuer: /CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Certificate serial: 019EBE477B3B7257AAC20F922FD178984696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
Manifest number: 0178
Signing time: Sat 13 Jun 2026 00:00:16 +0000
Manifest this update: Sat 13 Jun 2026 00:00:16 +0000
Manifest next update: Sun 14 Jun 2026 00:00:16 +0000
Files and hashes: 1: UbdL-NaNEP20waj3N_gDr5tJI8k.asa (hash: 9Y7I+qmxwpQRYcHd6Acr+sOvE9evJpPnh6mShkwnWIw=)
2: kDstfw0D26MMK2Kn71bsuzg0j0Y.crl (hash: WPkPuNNOA05UZEbxUVkTk2mGmaT9VI2UcVaWH+ElkDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:7b:3b:72:57:aa:c2:0f:92:2f:d1:78:98:46:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903b2d7f0d03dba30c2b62a7ef56ecbb38348f46
Validity
Not Before: Jun 13 00:00:16 2026 GMT
Not After : Jun 14 00:00:16 2026 GMT
Subject: CN=e9e4296f751877922054893d0e14c1995c23fab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:74:0a:1c:9b:57:f3:0d:36:e7:f0:b1:aa:
3b:82:3c:69:1f:29:dc:aa:28:25:dd:d8:54:32:a1:
58:46:d7:d2:c6:05:c8:1b:0d:4a:f0:79:36:a0:ed:
2b:8f:90:ee:39:c1:d5:5d:a9:77:6a:e3:3d:a0:3e:
3c:a5:4d:3b:5a:be:dc:bc:ab:ad:96:68:fc:aa:dd:
10:72:4a:68:ba:b5:37:d4:5e:9d:7d:10:1c:3c:fd:
03:7d:1b:ef:40:50:de:b6:0e:68:e5:94:ab:5f:0c:
f6:64:40:35:4c:94:75:2e:7b:61:c4:1a:7f:78:51:
86:22:f0:66:e7:9b:75:19:23:10:79:a3:e5:8b:cb:
f7:e6:d3:86:0b:ac:3e:d5:04:2e:dd:a3:31:d0:2f:
6c:a2:8c:28:6d:ec:ce:f3:88:a1:2b:ec:b5:25:22:
81:3d:f9:c0:bb:7e:79:6b:92:d2:bf:f6:a0:a2:2d:
9f:23:a3:07:50:88:d7:f6:06:5f:4f:67:ab:94:ea:
df:5b:63:b7:33:be:3f:ed:75:58:4c:cc:35:75:5a:
32:fb:1c:36:90:75:94:c8:91:32:52:c3:56:a7:c8:
bf:50:6e:6f:0b:82:79:9c:72:59:2c:84:b2:cb:36:
a2:b8:b2:18:69:b2:95:c8:a8:12:e0:61:a9:5a:1c:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E4:29:6F:75:18:77:92:20:54:89:3D:0E:14:C1:99:5C:23:FA:B3
X509v3 Authority Key Identifier:
keyid:90:3B:2D:7F:0D:03:DB:A3:0C:2B:62:A7:EF:56:EC:BB:38:34:8F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDstfw0D26MMK2Kn71bsuzg0j0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/02bd7c-fe39-46e9-bf75-c03c9fd8edc1/1/kDstfw0D26MMK2Kn71bsuzg0j0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:30:0b:25:04:45:f4:00:4d:01:d8:80:5b:a7:8d:be:7d:
cc:2a:d9:51:2e:6f:84:16:9e:e2:ed:df:a0:95:05:b7:4b:4d:
00:83:87:c9:17:67:a7:5e:eb:01:ce:a6:b8:3f:3b:ed:29:04:
65:2c:ca:e5:5e:db:ce:09:13:6f:6b:c1:41:bb:49:d8:cd:c0:
2d:dd:a4:ca:07:f3:de:79:b5:41:fa:dc:02:db:dc:ff:6d:74:
2d:92:d4:ba:c0:bc:79:18:24:ea:6e:b7:e4:56:d5:fb:11:bb:
c4:01:2a:9b:8d:0d:4b:df:3a:94:cb:32:ac:c2:f5:44:18:c2:
ee:fc:e9:d3:aa:a3:e0:59:03:ae:62:81:dd:89:0a:eb:7e:96:
f6:3a:f5:31:bc:f3:75:8f:9e:c3:60:e7:1a:e1:86:47:22:38:
29:33:32:37:7f:8a:f3:75:ee:66:ef:a0:27:d5:76:2e:26:dc:
88:4d:83:c6:ba:a0:59:75:87:59:6b:fd:53:ed:64:ad:21:4d:
70:e3:82:bc:89:21:3a:8b:a6:eb:da:e3:5f:5b:57:92:3b:5e:
57:0a:7d:ef:c3:4e:5c:ce:d4:27:35:55:57:8b:07:e7:d3:67:
af:ec:e1:c9:b7:66:3a:3a:c6:8e:46:c6:b9:cd:1c:31:8d:c3:
92:73:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:59:15 2026 by rpki-client