Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: q2tsUfhdLvbGBg1PFjJQ/MU4rNyyeTuYXu2YTBAqr/o=
Subject key identifier: 5E:C4:4F:E8:37:D3:FE:37:C9:7B:09:0E:F8:5F:4A:F3:46:D0:4B:28
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019D9A74F360C30ABC96C2739EBCC041CCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 119F
Signing time: Fri 17 Apr 2026 08:00:48 +0000
Manifest this update: Fri 17 Apr 2026 08:00:48 +0000
Manifest next update: Sat 18 Apr 2026 08:00:48 +0000
Files and hashes: 1: gMde_Z2AYAfDjgfQgADaIVzJfHA.roa (hash: ohh0Sm+ArlanntYsQ32zJOzQvbfP0sXTcTAxiE+zWSU=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: MCiDK8ovHZILE+oWURa9qWV6Rh8/eRFJIE/GggLZ+5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f3:60:c3:0a:bc:96:c2:73:9e:bc:c0:41:cc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Apr 17 08:00:48 2026 GMT
Not After : Apr 18 08:00:48 2026 GMT
Subject: CN=5ec44fe837d3fe37c97b090ef85f4af346d04b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:50:b3:ef:ff:3b:57:b7:3c:02:a1:62:8f:
fe:5c:b8:72:99:5e:fd:60:0a:31:dc:43:51:fd:e0:
3e:31:dc:7e:d4:5b:f8:2f:2a:b9:78:f6:ab:78:fe:
f1:25:cd:c2:b9:67:0c:3b:1a:fe:ae:4e:6f:b2:8f:
4b:92:7a:7d:b1:2c:1c:3e:62:07:63:89:6d:0c:02:
51:ce:99:cd:4c:e0:b0:34:61:f8:a2:cb:0c:18:1c:
c5:4c:01:5d:e1:3a:e2:4b:72:2e:c2:61:01:3f:79:
92:18:ff:f8:c1:cc:87:3e:e7:c0:92:b9:2a:fa:f3:
b3:37:ca:e1:2d:a9:b1:e7:56:07:54:e2:14:a4:60:
e9:7e:19:52:8b:56:2f:47:ef:0d:5f:3a:02:18:2f:
88:bc:4f:c6:51:f5:69:a5:93:cd:0a:b0:8e:12:ad:
18:c3:ea:5a:ba:1c:77:a0:cd:c5:f4:a8:3f:e4:1a:
59:17:bb:70:15:98:14:7d:3f:5a:47:d4:d2:0a:cd:
eb:d0:7c:9b:1e:97:9f:de:0f:bd:45:d0:e9:50:47:
e3:ef:5c:e6:72:18:81:2e:8a:26:cb:0e:64:f4:c7:
79:7b:1e:5e:a4:64:b2:5c:4e:40:5d:83:02:02:6c:
91:bf:d6:b9:bd:58:ae:21:49:6e:29:7a:b9:d9:98:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:4F:E8:37:D3:FE:37:C9:7B:09:0E:F8:5F:4A:F3:46:D0:4B:28
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:08:35:2a:f0:21:ab:e3:b0:ab:d1:ef:5f:a7:09:f6:9e:
77:82:fd:de:5f:85:d4:d5:28:7f:51:95:9d:23:07:df:22:15:
72:a5:4f:0a:a4:9b:78:ec:5f:db:82:5e:96:ba:3a:57:2f:80:
dc:7e:d7:bd:38:cd:13:3f:63:cf:1e:3f:fd:16:6c:e3:02:2b:
88:c5:2e:87:f3:51:0b:66:b9:b5:8a:24:11:bf:a5:06:27:3f:
43:23:64:7b:d4:08:c3:eb:3b:5e:fe:e5:27:21:c6:6f:74:1f:
a5:fb:f5:43:49:bc:74:93:f9:71:84:26:e8:66:ff:df:55:7b:
4c:d2:80:ec:04:1f:fd:0a:11:98:cd:5c:cc:9a:8b:30:31:fc:
a7:8d:3a:54:e3:08:bc:a0:fb:ee:38:ab:cf:6e:94:31:7b:8b:
23:92:66:6d:c4:62:60:73:5b:b8:7f:bf:8f:18:30:13:3a:b1:
c2:ed:05:81:34:be:e1:d8:0b:93:bb:62:d4:68:0f:c8:14:40:
6e:56:ed:65:9f:03:7c:34:0f:cd:8d:bb:de:65:00:9e:64:66:
ef:e5:32:f0:63:d5:a4:5d:bd:29:e6:94:85:08:74:ac:7e:90:
aa:48:f3:d9:07:f4:c7:b0:53:43:e6:6c:1e:3c:23:d5:ad:1a:
8d:73:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:32 2026 by rpki-client