Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: 5q8LHebMSqlKoLn3q+AZSb+HOmjK9c+2HAWnGXQrOKs=
Subject key identifier: B1:F0:D3:F3:81:B5:87:FD:A9:8D:4F:72:C9:47:19:9F:21:57:46:C4
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 019EC3A583D7A7C0B865D4FECC104E3E2BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 0199
Signing time: Sun 14 Jun 2026 01:01:04 +0000
Manifest this update: Sun 14 Jun 2026 01:01:04 +0000
Manifest next update: Mon 15 Jun 2026 01:01:04 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: 5u3FFMArakHCOWHgKzLdrmmQ9hEiFZLL9zBE91BoM4U=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:83:d7:a7:c0:b8:65:d4:fe:cc:10:4e:3e:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Jun 14 01:01:04 2026 GMT
Not After : Jun 15 01:01:04 2026 GMT
Subject: CN=b1f0d3f381b587fda98d4f72c947199f215746c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:7b:17:c3:6d:2e:a1:3b:83:24:71:f5:9f:
31:34:1e:93:6a:6a:b8:3f:13:51:93:52:9f:2d:10:
d3:03:25:de:1b:46:5b:eb:a4:0b:46:23:76:57:e2:
ca:28:fa:f6:df:a0:2f:e8:42:76:7d:ea:5e:12:5c:
da:9c:dc:50:1f:4c:25:2e:92:38:56:38:75:ec:15:
09:9f:e7:f7:8b:00:20:c3:1b:d0:9e:35:67:c9:87:
24:55:7e:11:a9:32:da:11:b7:79:8f:ba:d2:a3:32:
a3:de:0d:64:7e:f2:53:68:5a:a9:20:44:e6:8a:80:
e0:90:9a:55:d3:79:db:10:ac:67:8e:c7:3d:7c:0c:
9c:2a:b4:1f:3b:d8:ff:d6:f6:80:29:e4:e0:a3:c7:
ba:cb:85:f2:95:84:51:1a:cc:44:86:2a:d8:b9:14:
65:2f:d4:98:b9:5b:c4:e8:71:08:2c:ec:5b:e5:70:
7f:94:d7:42:f5:cc:1e:31:62:80:8e:8c:19:b6:5c:
83:dc:6f:21:da:6c:66:37:80:34:df:55:4a:bd:71:
36:24:90:4b:99:18:26:9a:5d:61:97:31:68:24:fe:
c4:c3:b1:16:09:a3:a6:0a:3f:dc:e1:e5:2f:ba:93:
5c:ed:bb:b8:37:98:2b:59:94:6e:96:b1:fb:6c:41:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:D3:F3:81:B5:87:FD:A9:8D:4F:72:C9:47:19:9F:21:57:46:C4
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ca:08:71:d3:75:cd:83:79:36:29:bc:d5:04:f9:35:e0:d7:
32:4a:dd:2d:4b:4c:d3:14:0b:c3:f9:ad:14:2a:8c:2b:39:9b:
7a:0f:04:52:d6:1d:4e:19:e7:e0:06:1c:b2:1c:41:43:8e:6c:
5d:1d:db:1a:22:7d:16:b3:b9:21:59:08:a5:ef:0e:33:a0:ba:
23:8a:93:3a:18:f1:80:10:8d:e4:6e:d5:8e:84:28:13:8a:b3:
6e:16:c3:15:24:c4:15:46:80:73:b2:b1:cb:7f:0a:6e:ec:f3:
9e:9c:4b:e0:f7:41:40:78:81:6f:54:ed:37:04:cb:3a:4d:9b:
08:75:12:d4:3d:37:2e:54:d8:16:ed:a1:11:91:d7:1a:08:64:
5c:a3:75:27:5b:b6:02:66:4e:a0:3a:5a:2a:a7:0a:1f:46:21:
82:f6:aa:0a:a1:22:e6:4e:b4:0d:50:90:78:59:45:8b:e6:da:
94:a2:91:d3:cf:be:63:39:33:28:ca:07:5b:ac:8a:fd:dd:a1:
11:16:b9:8d:06:65:b7:27:af:49:ac:e7:b2:5d:3d:f3:85:5e:
73:29:84:f6:9d:aa:17:a1:81:bc:4f:39:0d:c4:05:b7:e0:50:
ba:f6:bb:82:67:e4:5d:1a:32:d9:65:0e:8b:5e:48:e6:58:f6:
89:61:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:29 2026 by rpki-client