Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: sSynlYzpMc/ALjaUqKN3cR1vYLAAtPnEKpEdCOAZsOo=
Subject key identifier: 68:55:57:35:C6:8F:0F:85:94:B9:7A:0A:74:4F:AB:90:FB:D1:28:A0
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019FA78759603E67F3E2A7AA2C39B82D68F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 07:01:33 +0000
Manifest this update: Tue 28 Jul 2026 07:01:33 +0000
Manifest next update: Wed 29 Jul 2026 07:01:33 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 8otTZ3BgEtZzDceqp5984qU88N3GnpOJe06LZyHSJtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:87:59:60:3e:67:f3:e2:a7:aa:2c:39:b8:2d:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jul 28 07:01:33 2026 GMT
Not After : Jul 29 07:01:33 2026 GMT
Subject: CN=68555735c68f0f8594b97a0a744fab90fbd128a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:c1:6d:26:c8:e0:e2:13:f1:1f:2c:14:63:
15:45:9b:50:e0:88:a3:cb:7e:51:f6:b8:b4:fc:bd:
ee:6d:73:fb:15:3b:50:40:3d:da:c8:13:94:33:59:
2b:70:82:c6:5d:e1:5f:2c:b6:0f:07:3b:9a:df:dc:
8f:fd:0a:25:87:a0:26:20:be:48:9f:10:e8:e4:c9:
4a:61:11:38:5e:4c:6f:4d:fa:fe:a6:6c:d0:fa:d0:
83:af:8c:8e:b1:4e:bf:8a:d4:8d:5c:63:14:34:b4:
72:99:21:54:50:e4:54:9e:2b:f5:47:59:8e:e3:a2:
a6:cd:e8:34:65:0f:3a:1f:55:d7:de:47:21:26:58:
3e:f9:b3:03:38:83:dd:b1:b0:1d:2f:26:50:c4:f9:
b4:2d:a3:54:31:13:13:21:3f:64:71:6e:62:a4:01:
b1:4a:1a:23:20:e6:d6:f8:9f:74:2a:37:05:da:e4:
3c:f2:0c:44:08:92:48:72:a5:49:62:fa:d5:67:fa:
ed:4e:99:2e:c6:7a:2e:83:9c:d3:9b:3e:74:b8:7e:
f0:c7:a3:90:e1:61:16:08:3d:c0:17:0f:9e:af:10:
50:bd:b3:42:d9:42:1a:7f:7e:6b:ca:99:ba:ca:78:
91:b0:26:08:81:a5:6f:ae:9c:71:b2:8b:9f:d0:a8:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:57:35:C6:8F:0F:85:94:B9:7A:0A:74:4F:AB:90:FB:D1:28:A0
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:cb:b0:2e:cb:f8:2f:e5:2e:d0:15:61:95:c5:68:24:53:
0f:5b:64:9e:5b:c8:4b:88:41:a5:d9:5d:ab:a4:02:b7:1b:db:
7e:18:76:83:e7:c3:00:71:85:c1:09:1f:8e:87:3a:1e:e6:c8:
25:2a:98:65:60:e7:46:47:05:2a:c6:bc:77:95:3c:38:d5:9e:
93:24:7e:35:e9:b2:f1:19:17:74:54:77:bc:66:5c:aa:e1:18:
92:6d:5f:7f:c7:59:6d:77:aa:21:78:be:03:7e:38:c8:95:cd:
fe:47:e8:99:f2:bb:38:e2:7b:40:0c:02:73:33:eb:cc:df:cf:
7e:c3:3d:ae:98:f2:ec:f2:4a:bc:92:07:e7:d9:bf:21:2a:61:
aa:ba:0a:75:18:8f:2d:a8:99:11:3d:24:f5:41:45:ff:2f:0f:
0b:c0:ae:78:92:38:15:99:9d:51:3e:94:a3:24:30:84:34:65:
18:c0:11:e6:9c:1c:4e:50:32:d9:85:47:32:11:eb:3f:b6:81:
1b:a6:0c:16:fc:8f:22:05:d4:22:11:31:c9:71:f3:f2:6a:d4:
2a:78:3d:27:68:db:21:46:d4:6b:2e:4d:0a:9f:05:41:3a:8a:
a7:f9:2b:a3:94:89:2f:1c:93:0b:41:8c:79:29:1f:30:e4:fc:
e4:d2:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:58 2026 by rpki-client