Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File: KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier: xHWLFcuWLbHUjHSsFNj0wqDNu+9cNTo0Yj9YAD7sHDI=
Subject key identifier: 2E:4A:8D:BB:7B:5B:49:19:4C:ED:1E:A1:DD:A1:5C:7B:89:A2:3B:22
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 019FAA1ABF301FE6B4BF186F9B26BA310CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number: 0782
Signing time: Tue 28 Jul 2026 19:01:47 +0000
Manifest this update: Tue 28 Jul 2026 19:01:47 +0000
Manifest next update: Wed 29 Jul 2026 19:01:47 +0000
Files and hashes: 1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: Kq/iLHeu+qb2fYdIUZEoziLicnaBwHdze76o2DMWNK0=)
5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:bf:30:1f:e6:b4:bf:18:6f:9b:26:ba:31:0c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Jul 28 19:01:47 2026 GMT
Not After : Jul 29 19:01:47 2026 GMT
Subject: CN=2e4a8dbb7b5b49194ced1ea1dda15c7b89a23b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:6f:85:91:b2:44:9c:6c:27:83:ca:9a:3d:
45:69:08:a0:59:ea:b1:d6:6f:f5:db:1d:23:d6:6f:
ca:58:d1:97:d2:76:78:be:65:52:11:b2:4b:3f:96:
d5:f5:19:5f:dd:8a:fd:95:92:15:fc:4b:67:be:09:
6b:dd:87:3f:e2:9b:22:9f:31:5f:9c:40:8f:88:81:
a0:3d:b3:5c:aa:5b:3c:24:d0:07:1e:9c:06:03:27:
90:71:53:f4:54:84:a1:4c:b7:b9:9d:e0:f0:db:44:
1c:12:e6:eb:0d:a6:78:57:79:0c:b6:33:d7:c8:a9:
1d:be:66:6b:d1:12:87:77:5a:70:c4:dd:96:86:2d:
4d:8e:49:ed:6c:bc:3b:a0:09:b0:b9:f2:84:1e:fc:
58:76:21:b3:76:5e:99:18:7d:48:bb:82:66:84:3e:
24:6d:39:21:36:83:20:16:a5:79:b3:6e:00:d2:6f:
4b:fb:fc:82:3d:34:bc:20:79:9d:df:57:8f:88:b7:
5d:6a:84:55:e2:e0:bf:84:3d:92:f8:24:8c:a9:5b:
e4:b2:2b:d5:56:dc:ec:b6:25:e0:6a:e3:a3:7e:9e:
39:b7:b4:bd:e1:b4:ae:cc:2e:68:5f:25:b2:66:cd:
0f:c2:88:e2:0d:25:ad:96:43:0c:ac:86:21:09:99:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4A:8D:BB:7B:5B:49:19:4C:ED:1E:A1:DD:A1:5C:7B:89:A2:3B:22
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3a:81:f3:6c:ae:ca:f0:f1:5a:7a:e6:58:a6:e3:a0:43:00:
7a:0d:3a:f3:78:cb:e7:76:d9:03:ca:b1:f8:6c:9d:40:61:96:
36:2e:83:9f:65:e0:84:d1:2a:ae:5a:57:f3:39:5d:4a:e5:99:
0f:9a:85:9d:5a:72:3c:8c:5f:bf:47:64:bb:e7:a0:69:15:7d:
7b:16:df:33:f6:95:80:ea:b5:82:00:94:c5:1f:27:40:2b:dd:
b2:99:f9:0f:56:b3:25:b2:11:da:f4:6f:3e:45:3b:31:04:c8:
25:9e:13:0c:ae:fb:6e:1d:ef:64:e2:8d:77:be:3e:70:91:3a:
8c:ee:99:0b:a8:67:3c:03:8a:bd:10:87:ac:9a:24:de:df:c3:
83:94:66:ed:c8:c5:86:bd:47:a3:cd:2e:44:c7:cf:73:6f:e2:
7c:68:b5:1f:24:f0:3a:66:53:99:1d:5a:cf:b5:fb:5a:a3:5d:
72:ff:59:62:df:e4:b4:89:64:40:06:f5:b0:69:4c:ac:39:c6:
3d:19:5f:b8:4b:c0:ed:3a:82:64:96:0c:5a:d0:67:33:28:b5:
28:01:d6:d0:f5:65:0e:00:c4:6a:50:23:72:f1:5c:36:38:45:
53:87:fd:4c:6e:48:96:fd:80:f0:16:b9:6a:94:6b:c1:a5:56:
14:d9:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:23 2026 by rpki-client