Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: hwXW00W5+ag4kauAHxFZiF6dkcoXCcfFSxyS9OqtcSI=
Subject key identifier: A2:BB:B6:09:26:4A:3B:1C:49:BF:6C:EE:A8:61:D1:D7:AD:96:80:78
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019EC1EE3876F854AF418E6B5BA6003081E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 11AC
Signing time: Sat 13 Jun 2026 17:01:15 +0000
Manifest this update: Sat 13 Jun 2026 17:01:15 +0000
Manifest next update: Sun 14 Jun 2026 17:01:15 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: PVwsZ/99LQZrWjFBiPOquBTmUICYrysH5//CNL3OPbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:38:76:f8:54:af:41:8e:6b:5b:a6:00:30:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jun 13 17:01:15 2026 GMT
Not After : Jun 14 17:01:15 2026 GMT
Subject: CN=a2bbb609264a3b1c49bf6ceea861d1d7ad968078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:6d:c2:b0:2f:39:66:e8:e6:48:87:bc:fc:
94:c9:11:0d:c0:6d:2f:cb:b6:1b:db:97:2a:45:d7:
9d:a4:12:c2:ba:ac:00:9d:44:f8:e6:c3:d5:5f:ed:
f4:5c:42:33:26:82:68:a5:bc:d9:da:23:45:0b:00:
c5:8c:b9:38:41:9e:f9:53:6c:f1:50:46:14:a2:e7:
e5:e9:33:48:eb:15:0a:2a:d7:a1:03:e4:3c:cf:31:
58:03:dc:06:c8:59:c8:bd:d7:e4:22:81:76:63:b8:
ff:99:df:3a:a8:54:e0:24:69:99:d1:25:66:52:a1:
6e:da:88:81:49:28:ce:cd:8a:cd:3c:5c:20:a8:92:
1c:cd:92:12:50:35:69:94:6d:ab:ee:fb:97:d9:7f:
12:1e:dc:92:62:36:98:81:af:8c:9f:8a:87:a1:32:
41:dc:10:a1:4b:0c:cb:db:0a:86:2d:e2:3b:98:75:
f8:97:00:81:11:ed:21:8e:3e:bc:99:0e:a5:2f:28:
5d:b0:16:4b:0e:e7:32:be:31:65:b1:ce:3d:43:fd:
5c:08:5d:07:ed:20:1c:a7:b6:b0:36:18:22:08:2e:
3a:07:2c:66:f6:b4:2d:66:f0:ac:ff:61:e2:d8:2b:
28:90:1e:7a:d3:42:c6:7f:6a:be:cb:55:a5:f8:90:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:B6:09:26:4A:3B:1C:49:BF:6C:EE:A8:61:D1:D7:AD:96:80:78
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a6:d0:67:d6:fc:5c:22:4f:8c:6e:a3:b2:c5:4a:8f:f9:44:
73:eb:3a:64:75:89:03:81:d8:b1:b1:b8:bb:0e:82:6c:77:61:
c9:97:a0:f1:ed:d9:0d:b6:a6:3b:de:d2:e3:f7:5d:ed:94:f4:
1f:65:6b:42:fe:1e:93:e4:f0:05:23:b8:3f:4a:7b:a9:5f:82:
47:cb:8a:a0:d0:fb:2e:85:8f:0e:1a:35:af:0d:be:43:f4:13:
48:c1:e0:0a:7c:6f:89:c5:fa:1e:03:b9:1e:3d:08:43:92:e7:
f5:07:33:c9:81:88:1a:5d:84:c4:02:b2:7f:97:aa:de:63:be:
6d:f3:38:06:ca:44:32:ba:ce:19:77:bd:99:7c:96:d6:cd:5b:
75:45:80:fa:0c:bf:e4:4b:d5:4a:a8:e4:77:b9:6b:ca:db:a3:
7c:5d:38:91:56:46:15:5c:d8:2c:3a:b8:7c:87:06:a5:65:97:
82:e4:d6:64:9d:5d:37:59:32:14:b2:a0:a9:6c:e1:a1:e3:36:
8e:1b:75:84:01:88:ef:f1:fc:cf:1b:fa:56:18:07:1b:e0:5c:
e7:43:ab:42:39:a0:96:bc:96:3a:27:a7:65:61:50:ce:69:90:
71:e9:72:41:1f:28:d3:e4:6a:ac:79:55:c8:a2:e1:1f:52:ac:
ef:06:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:22 2026 by rpki-client