Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: L3LgfKVgM/S/WBMmlfE5glTGWTzqLrkUu7sKuU88pTE=
Subject key identifier: D0:45:25:8D:EA:3D:1E:71:B2:B1:C1:A1:E2:20:B6:91:E3:D2:D7:98
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019EC0A4653250887F264133971B6CDBF691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 132D
Signing time: Sat 13 Jun 2026 11:00:59 +0000
Manifest this update: Sat 13 Jun 2026 11:00:59 +0000
Manifest next update: Sun 14 Jun 2026 11:00:59 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: wG2PHQtXsFE5cx+r28Y+YN1t1rS//ASecMdyA9qzpCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:65:32:50:88:7f:26:41:33:97:1b:6c:db:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jun 13 11:00:59 2026 GMT
Not After : Jun 14 11:00:59 2026 GMT
Subject: CN=d045258dea3d1e71b2b1c1a1e220b691e3d2d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:66:15:aa:f3:29:35:2b:72:79:10:29:46:
9d:75:6b:d4:c7:29:71:55:45:a4:4b:66:f5:74:7b:
12:92:2f:63:41:95:81:2a:bc:01:ea:95:d7:de:9b:
31:bc:7d:b8:58:cc:02:31:33:06:b2:be:88:5b:1b:
0e:35:b1:0d:56:99:37:4c:8d:cf:90:94:fb:f4:fb:
40:6e:c5:fa:01:46:3d:1b:b4:bf:1e:2c:c3:0a:ba:
16:5e:67:a9:c5:d0:ea:1f:40:ff:07:05:34:5b:79:
24:e4:ba:f9:15:ad:53:35:da:42:a3:e0:47:89:a4:
22:a0:5e:04:ba:d9:3f:59:eb:18:8c:95:5f:94:9e:
4e:ef:01:46:21:37:07:15:3d:c9:69:ed:e2:c9:4b:
bc:56:bd:57:b2:53:cf:23:3a:8a:ca:3c:0b:f5:2e:
bc:20:94:7e:82:aa:ec:d1:39:ae:e6:3b:a9:78:96:
2a:fb:36:cd:24:cf:70:75:af:6c:1c:e2:73:95:d9:
a9:ec:c7:56:c1:c5:a8:31:b9:f8:51:2e:02:c8:97:
e4:9e:34:26:05:f5:93:76:24:83:09:35:41:02:52:
68:aa:d6:16:ac:64:16:4a:ec:e1:b7:75:f2:2e:d6:
71:f2:7f:f3:f3:8f:c1:80:25:aa:df:71:f2:8f:32:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:25:8D:EA:3D:1E:71:B2:B1:C1:A1:E2:20:B6:91:E3:D2:D7:98
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f7:71:70:71:f4:1a:c8:e8:09:ab:f9:89:4e:72:1a:cb:65:
a4:3c:e7:8d:e4:dd:2d:e9:21:47:17:7a:7b:10:cc:90:dd:9e:
b9:e4:b9:0b:29:f4:fe:da:bb:2f:c9:03:28:66:c0:db:1a:58:
89:60:a1:40:a8:53:35:86:fc:47:d5:fc:a1:af:cc:56:97:b3:
41:e0:56:b8:be:97:d1:13:4d:d9:7c:60:93:12:6a:6f:b1:0c:
53:8a:da:ad:68:95:d5:54:b9:a9:cd:f0:27:9f:cf:98:5a:cd:
af:a0:9e:6b:72:ab:ae:0a:96:38:4a:8c:da:ff:de:3a:3e:e7:
51:63:73:61:18:70:d6:66:66:17:c7:69:e5:31:8a:58:10:15:
df:9d:3e:6f:54:c5:58:a2:e8:b7:28:cc:90:3e:68:46:91:fe:
35:20:eb:35:84:ab:10:6e:62:54:03:2f:b7:e4:40:c7:de:c4:
4e:86:27:9c:4b:12:1a:41:5a:0a:e4:4d:25:2d:fb:d7:fd:81:
74:c2:9c:5a:8b:c5:e5:06:48:d0:21:b9:e7:0a:68:af:5d:89:
86:a9:b9:a9:15:dc:19:8f:36:2a:7d:6a:9c:c4:8d:09:1a:d1:
97:58:3d:49:3c:dd:ff:c2:24:96:51:53:79:e1:c7:09:61:88:
48:be:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:27 2026 by rpki-client