Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: o1EnXC++LMkhU29UqmdndhTrv6zc33ISh6vTgrZn8V0=
Subject key identifier: 59:0B:90:61:B9:3E:D6:F6:23:E6:E4:2E:9A:57:36:18:F0:C0:F6:1D
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019ED3192172B7B157F3D84C536117A3E64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 155A
Signing time: Wed 17 Jun 2026 01:01:39 +0000
Manifest this update: Wed 17 Jun 2026 01:01:39 +0000
Manifest next update: Thu 18 Jun 2026 01:01:39 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: LG/e0lXANFPoW36pzirBLAWrTcnUkj8pA3hretR0uYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:19:21:72:b7:b1:57:f3:d8:4c:53:61:17:a3:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Jun 17 01:01:39 2026 GMT
Not After : Jun 18 01:01:39 2026 GMT
Subject: CN=590b9061b93ed6f623e6e42e9a573618f0c0f61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:79:bf:b3:89:b4:1e:77:49:14:ae:d0:b8:
a6:f4:6b:3e:ec:6f:c1:1d:eb:8b:4a:df:01:a2:70:
9c:0e:13:e5:df:71:28:ba:5b:0c:2d:b8:9b:2d:74:
ce:c3:4e:75:18:74:f3:9d:5f:19:ed:d6:e7:c6:58:
dc:f3:c7:58:ca:21:e9:c8:b9:26:b6:c8:cf:6e:07:
07:97:a0:0b:3d:dc:71:e9:3c:af:8d:9a:27:f2:83:
0f:25:8c:5c:fa:fa:db:c6:63:b6:17:cd:48:37:bc:
c0:60:e7:53:87:6e:c3:2a:4f:e1:42:07:69:c9:a6:
63:5f:de:84:ec:22:a9:20:54:54:8c:ea:89:9f:28:
02:1a:d8:2a:46:dd:6e:bd:c2:af:e0:0e:9e:e1:4c:
71:d0:8b:3a:08:db:c6:b7:cd:ef:24:1a:9b:ab:e1:
5e:8d:f3:28:9f:b3:50:8c:a9:d0:91:60:55:aa:06:
fc:92:a5:21:1c:95:22:f5:8c:88:a7:8f:e1:e0:5b:
53:15:d4:4b:3a:05:31:20:49:00:08:d7:67:57:8f:
dc:0a:04:8f:39:bb:1a:49:7e:97:58:70:f9:17:d4:
61:4e:12:0c:77:cb:09:7f:0b:2b:ee:58:e1:cf:65:
43:7f:38:26:9c:c6:72:f2:40:47:e3:79:e4:87:45:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:90:61:B9:3E:D6:F6:23:E6:E4:2E:9A:57:36:18:F0:C0:F6:1D
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:cc:6b:cd:8d:2b:b4:97:12:eb:ad:cf:20:b3:9f:f2:7f:
87:9f:08:b5:ee:11:46:90:e1:8e:0d:11:5e:d9:cc:eb:6c:22:
4c:38:23:b0:f7:0e:78:6b:25:b8:83:34:da:b2:21:69:02:86:
b8:0e:f4:1b:b0:f5:72:58:e2:b5:65:17:3e:7a:a2:49:d3:de:
3c:1a:60:47:5f:53:b3:09:e9:05:dd:1d:6d:d0:53:c3:67:ed:
f1:1f:ed:57:1f:e0:73:5d:b9:2c:4e:8e:41:f7:3f:d7:cf:03:
89:33:da:fd:03:c1:cc:23:49:1c:b0:98:c2:c6:11:fc:f2:94:
cc:c0:79:77:14:5d:e2:ca:b9:a4:62:4a:e5:65:ff:be:4d:3f:
3c:60:b3:aa:8b:2f:2c:ab:a3:d0:0c:d3:31:27:10:10:c0:97:
7c:07:8a:6a:4f:c4:b4:66:da:52:fb:67:aa:5a:ce:aa:1c:67:
8e:cb:8a:49:14:7b:24:2d:a2:a3:bd:d7:40:8e:52:06:82:dc:
e8:e5:0a:3e:85:f2:d6:6b:09:20:88:b8:84:0b:81:9f:a5:f6:
6a:a4:2e:4c:f8:40:14:06:f8:64:a3:5d:b7:c1:9b:a8:5c:3c:
dd:47:f6:f9:7e:4b:09:d1:98:d5:34:30:00:f6:49:70:57:c6:
13:61:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:14 2026 by rpki-client