Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: ERRLXzMpljKl7Wei+GaMsBP7f8KYIIikAaU/jpIg4EY=
Subject key identifier: 9C:F6:8D:B9:2B:93:38:65:B7:6A:BF:8A:01:86:8D:A3:77:5A:01:07
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 019FACE3E55A9736F4ACA6132CDAF1209A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0EF8
Signing time: Wed 29 Jul 2026 08:00:44 +0000
Manifest this update: Wed 29 Jul 2026 08:00:44 +0000
Manifest next update: Thu 30 Jul 2026 08:00:44 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: jO1tV3Ldmx0ddmesAq1HXUbjIydwbk0/EXOs8Tx1OcA=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:e5:5a:97:36:f4:ac:a6:13:2c:da:f1:20:9a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Jul 29 08:00:44 2026 GMT
Not After : Jul 30 08:00:44 2026 GMT
Subject: CN=9cf68db92b933865b76abf8a01868da3775a0107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:12:d1:f4:83:b7:bb:a6:bc:f8:3a:ce:b3:
02:5a:a7:17:9d:41:2b:de:48:d6:92:8b:16:e5:54:
da:98:3b:6b:b4:f3:04:64:38:19:8c:93:ff:c3:4f:
88:40:98:e5:53:be:f9:74:4e:6d:41:5e:9a:96:1d:
fc:a5:75:08:5f:5f:bc:55:a5:27:eb:b9:8e:bf:0a:
f1:27:11:46:bf:f3:73:ba:65:42:1a:71:86:57:7a:
c3:d5:25:5c:e9:fb:03:a7:3b:cb:02:8a:9b:c2:32:
29:86:3c:34:d9:cd:bf:20:98:81:65:aa:f2:f6:64:
26:81:62:c2:1c:0a:21:88:4a:27:6d:7b:cb:d0:95:
05:4e:2c:eb:5e:84:08:5b:27:bb:e7:ce:97:26:e3:
d7:35:38:6a:17:ef:62:c9:60:10:b2:0b:04:75:2f:
fc:7e:a3:da:69:2a:6c:f9:87:59:ff:3b:65:33:7d:
9e:c7:6c:dd:df:3f:28:58:e4:ae:31:e9:b7:fc:3c:
34:56:08:99:b5:cf:93:86:3b:2e:bd:be:56:ae:68:
52:61:eb:21:82:e1:d5:48:df:b4:4b:ba:fc:8c:e6:
73:f4:7c:73:e1:3c:79:93:c1:01:5d:76:6a:64:82:
fa:7d:c7:31:95:f6:22:f4:87:83:02:a8:ea:9f:5f:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:8D:B9:2B:93:38:65:B7:6A:BF:8A:01:86:8D:A3:77:5A:01:07
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7a:c4:bd:07:67:45:95:7f:80:74:1f:2f:cf:42:09:6a:6b:
8f:50:03:d2:30:de:44:cb:48:79:f0:ab:42:ff:3c:a7:8c:b9:
54:d9:7f:8c:ef:b5:7c:db:1b:47:f4:0b:e1:7e:1f:f7:2f:41:
e5:a4:d8:25:0f:14:82:bf:dd:5a:2f:3a:1a:ee:51:48:12:b6:
d1:00:22:44:cc:6b:ee:a4:c6:62:61:1a:04:aa:19:3c:b3:13:
43:fe:36:b4:82:08:23:0a:42:84:ae:02:26:1d:b0:2e:35:f1:
ce:7b:c6:fd:46:e4:fe:23:9d:b6:a3:8d:60:a9:30:94:31:c6:
a1:97:a7:2a:6c:82:92:35:bf:ac:d7:1e:16:da:84:62:79:ad:
9a:07:ad:0f:ea:fb:d6:c7:27:bf:3a:03:5b:b3:cd:ad:0c:bc:
17:93:0c:5f:31:07:9a:ca:10:fb:bc:77:ad:e7:c6:06:5b:b2:
27:ac:f3:47:2b:c3:24:3d:3a:41:41:04:98:fb:9a:0e:1e:25:
6d:b7:59:9c:dc:91:0b:6f:5d:b4:e6:03:d0:a8:2e:e0:a6:70:
5e:08:1b:2a:df:43:6d:63:5a:45:5a:23:41:14:33:ba:b8:f1:
d1:81:67:57:c8:ce:6f:f9:c0:dc:7c:08:9c:be:c5:22:3a:23:
67:03:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:34 2026 by rpki-client