Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: eG7iPyXQszxr5Lb1xlrEApeptpHb5ZU7AV433Uc63dg=
Subject key identifier: D3:99:78:A7:F7:5F:17:BE:A6:C6:DC:20:EE:89:DE:0C:2E:73:49:C9
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019EBF23ED4E74D98E45A65BD3873AC35762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 15EF
Signing time: Sat 13 Jun 2026 04:01:03 +0000
Manifest this update: Sat 13 Jun 2026 04:01:03 +0000
Manifest next update: Sun 14 Jun 2026 04:01:03 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: tpFH0JjNBFceMLdOCl5kZElUg/dmK5rj4tWduEQv400=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:ed:4e:74:d9:8e:45:a6:5b:d3:87:3a:c3:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Jun 13 04:01:03 2026 GMT
Not After : Jun 14 04:01:03 2026 GMT
Subject: CN=d39978a7f75f17bea6c6dc20ee89de0c2e7349c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:4b:95:e9:eb:6e:12:ef:9b:2b:7e:67:9a:
6e:54:4b:48:bc:72:78:3b:f9:28:75:e3:77:cc:82:
8b:e2:c4:d6:71:77:a0:f6:44:aa:b3:e0:9c:61:e1:
a2:97:8a:82:78:87:e1:ff:ed:70:42:10:ce:4f:fa:
45:63:6c:a2:17:71:33:6e:c0:07:89:f1:f0:8e:c2:
b2:b9:4c:29:55:e4:3d:f8:f4:53:32:9d:6a:56:72:
55:6f:f6:4c:e7:7c:48:2f:7a:73:b8:c0:2b:e2:80:
4e:99:82:86:89:a4:c8:f3:bf:24:c9:69:fb:3e:eb:
d1:5b:5c:cb:19:d8:39:42:d9:da:b8:3f:4b:20:21:
aa:34:35:e8:f7:6a:80:9c:48:a8:36:c2:ee:05:b0:
9b:8b:65:d9:65:74:97:17:7a:d3:5d:42:76:cc:b2:
bc:9c:68:58:16:91:2d:99:38:32:64:65:0e:11:75:
61:54:73:08:91:c9:82:9d:f7:89:44:8b:aa:0d:0d:
83:0f:e1:00:4a:9d:00:7f:49:30:a9:dc:69:ce:e0:
9c:04:16:00:95:82:67:bf:ac:e5:39:78:6c:9b:15:
b1:f9:6a:6b:73:2d:a7:5f:af:ff:12:a0:dd:fd:2a:
e9:f1:b3:8d:27:85:ba:72:6c:3b:60:ea:69:7d:4d:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:78:A7:F7:5F:17:BE:A6:C6:DC:20:EE:89:DE:0C:2E:73:49:C9
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:f1:4f:85:d9:56:4a:45:cc:a2:10:bb:b0:5f:61:6d:e7:
97:3c:d0:a5:82:b8:d0:4c:f0:30:05:29:59:83:e3:f0:30:95:
63:b5:3c:83:68:70:ee:dc:93:f5:0c:7e:a8:53:8a:e1:7d:39:
3f:da:0f:7f:ba:f6:39:b8:00:b1:e9:50:ae:91:9a:76:a5:f6:
98:c0:f1:db:f3:03:b7:b1:84:df:b3:e3:8b:0c:2e:55:9e:6e:
65:1a:0e:39:0d:d7:65:5f:10:6c:66:75:02:93:f3:65:8c:6d:
34:2c:bc:09:40:9f:dc:fb:e4:db:d2:68:7c:cd:ee:ae:50:48:
ad:34:93:d4:f2:b4:d2:be:9b:69:f4:89:22:c9:9c:58:0a:cb:
58:51:0a:e8:2b:aa:b0:94:6b:b6:50:d5:39:c5:40:4e:d0:e2:
26:7b:0f:2f:d6:06:be:6c:a1:bc:2c:ee:1d:bc:66:8c:97:59:
9e:ec:41:95:a1:0f:00:73:f4:49:04:2e:7d:ad:7b:05:91:af:
b5:3c:2e:3e:15:57:dd:aa:f2:20:6a:5e:11:4e:68:cb:6c:01:
bc:cb:26:3e:ea:02:cb:ef:fe:e6:55:44:4c:ed:32:0e:3c:e0:
54:ac:58:72:8c:cf:03:17:04:be:ed:6b:fd:68:1f:97:88:01:
f2:8b:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:01:14 2026 by rpki-client