Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: QgG0dO3xU72cb3xI7/DDOs5a0Ku60eeOesSvQ+eP6Jc=
Subject key identifier: E9:0A:6D:9D:3D:B0:FB:A4:5C:B2:91:1D:EB:C3:3B:A5:70:46:1C:37
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 019EC3DC5F5FF47B0F108921EB9DCEF91340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 1239
Signing time: Sun 14 Jun 2026 02:00:59 +0000
Manifest this update: Sun 14 Jun 2026 02:00:59 +0000
Manifest next update: Mon 15 Jun 2026 02:00:59 +0000
Files and hashes: 1: gMde_Z2AYAfDjgfQgADaIVzJfHA.roa (hash: ohh0Sm+ArlanntYsQ32zJOzQvbfP0sXTcTAxiE+zWSU=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: lu2tdGUCQQYXAjtccLhWDF1D91YZjPOdU2V9I6c7a4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:5f:5f:f4:7b:0f:10:89:21:eb:9d:ce:f9:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Jun 14 02:00:59 2026 GMT
Not After : Jun 15 02:00:59 2026 GMT
Subject: CN=e90a6d9d3db0fba45cb2911debc33ba570461c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:fe:49:01:3a:4a:37:31:eb:eb:64:e7:3e:
4c:c6:21:96:cc:4a:55:cc:9b:ee:52:55:5b:5c:ae:
df:24:90:1a:7d:b5:87:c1:f8:ca:bc:78:96:b3:3e:
56:24:6b:7f:c7:f7:91:1a:12:9c:c2:15:3b:6b:27:
a7:ec:a2:e7:20:e0:5e:3d:ce:18:70:1e:17:b0:f5:
07:c6:12:11:25:93:83:74:85:a9:d5:a3:6d:20:87:
8f:f9:64:a3:15:ba:d2:35:66:76:e3:e5:6b:dd:e4:
9e:7d:8c:2e:af:43:11:3b:57:9f:73:b2:42:61:dd:
ac:38:b0:22:b8:d2:2e:9a:d9:ac:0e:44:46:6d:d0:
fe:15:ae:50:b5:15:70:7b:d5:cb:4e:79:89:50:62:
73:7c:fd:09:ab:94:a6:01:27:94:cb:2e:db:5d:2d:
9c:e3:2f:0b:36:42:b6:16:c6:78:2f:9c:23:ca:55:
0c:c0:d3:6f:9d:55:99:15:f1:c0:e7:43:ab:d6:88:
3d:fb:e4:f1:4c:78:24:50:3b:2c:41:1e:da:b6:1e:
c7:df:0a:8a:da:db:c3:ae:b1:1f:ff:5f:da:14:dc:
0a:b9:b2:02:be:4f:06:d0:c9:80:e4:52:98:5f:f1:
31:7b:3d:cb:f2:a0:8c:c8:e4:1b:26:cd:46:88:dd:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:6D:9D:3D:B0:FB:A4:5C:B2:91:1D:EB:C3:3B:A5:70:46:1C:37
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b8:13:a2:7b:b7:0a:f5:06:e9:a9:d7:38:da:f9:43:62:2f:
5f:98:e1:73:58:e7:06:78:b2:d4:e5:6e:14:ce:61:a6:e7:22:
b3:7f:e3:62:8d:71:da:79:e6:8d:e3:f8:b2:46:7f:97:fc:0e:
6f:33:39:69:a2:3d:ee:54:e3:b9:cb:da:d7:d0:90:db:b7:a3:
3e:cf:33:8e:72:28:7a:ba:94:c1:61:15:79:f4:48:73:5d:ae:
77:aa:0c:72:b5:06:16:95:ad:fb:78:73:7a:c4:97:7f:c2:8d:
2f:7f:61:4c:d4:88:e5:31:24:96:3b:cb:20:24:7d:3a:14:eb:
22:8b:43:11:cd:d3:36:04:59:ce:f4:1b:49:68:91:8e:3b:94:
b7:46:4e:c4:c0:0e:fe:de:28:16:08:8d:4b:e4:81:e6:ff:39:
40:20:3a:15:40:06:e0:02:10:ae:1b:a8:9b:fb:1d:eb:64:82:
c4:7a:a1:fc:08:e9:3e:09:1f:4c:da:31:1c:6f:8f:5e:5f:d6:
bd:c1:88:a5:00:98:59:97:22:3c:9a:81:47:0c:52:99:cc:d5:
d4:d4:ad:45:73:5d:ce:a3:69:6f:09:6a:53:c0:ee:09:2a:aa:
e8:c1:ad:f5:5e:98:ce:89:7e:03:c0:fa:72:fa:e0:f9:0c:f7:
4b:a4:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:54 2026 by rpki-client