Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: jU/SxeI3cHEvEE9WZIVm2VZNKszo1YDPuJAkviwmRTA=
Subject key identifier: 40:C1:3F:36:0E:E2:62:F4:34:73:96:BF:A0:88:B2:01:6B:CD:0A:92
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019FAA8819254E67EE0EC6D7EABBAFB73BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1758
Signing time: Tue 28 Jul 2026 21:01:13 +0000
Manifest this update: Tue 28 Jul 2026 21:01:13 +0000
Manifest next update: Wed 29 Jul 2026 21:01:13 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: 6fKW4hlAyr570pofUkPzPM5pFbAo1DW5G/yjnvh1D78=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:19:25:4e:67:ee:0e:c6:d7:ea:bb:af:b7:3b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jul 28 21:01:13 2026 GMT
Not After : Jul 29 21:01:13 2026 GMT
Subject: CN=40c13f360ee262f4347396bfa088b2016bcd0a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:77:63:2b:26:72:f9:9e:37:16:14:32:a1:
2d:c0:60:42:f5:f4:ce:df:e4:45:33:47:a9:63:36:
95:33:f6:8f:6a:ef:46:2d:f7:fa:60:61:ac:f5:75:
f8:ef:64:4e:62:51:53:ec:aa:5c:b7:eb:53:1b:c9:
72:d9:51:6d:f7:7a:2a:58:58:d2:67:90:82:60:e0:
ef:8d:3f:8f:c0:32:32:e6:aa:c8:5a:b9:8a:c4:79:
8d:8d:91:3d:43:5c:5f:b8:05:5b:26:42:71:8b:ab:
00:b0:0c:e2:63:c7:b2:33:04:2c:40:b6:b2:3c:2e:
45:46:90:ba:94:1d:42:d4:19:86:0c:8e:78:00:b1:
23:ee:f6:c8:0a:ba:ec:54:8c:61:d3:a6:22:0f:13:
11:cb:e4:14:ae:37:bf:31:4f:99:ec:fd:4e:6b:b6:
e1:0c:49:c6:ad:24:7a:34:ba:79:4d:f9:ce:a0:da:
ec:ba:7f:1a:53:f4:33:d8:26:fa:a4:27:53:36:44:
ad:c4:54:e1:e5:b7:7f:a3:86:71:99:40:e9:f8:d3:
45:0f:92:6f:20:07:cf:ec:d9:63:32:16:f9:ea:91:
43:5a:d0:f9:bb:43:56:b6:19:c9:74:21:60:19:0a:
a9:a0:20:bb:64:d4:ee:0d:fc:d2:02:07:6b:0b:86:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:3F:36:0E:E2:62:F4:34:73:96:BF:A0:88:B2:01:6B:CD:0A:92
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1a:1f:95:d0:52:a2:54:9c:ed:22:3b:56:3a:60:c4:2f:89:
04:b6:ef:f1:b5:a8:82:0a:a4:7d:92:53:63:01:14:09:4e:85:
6d:e3:c3:dd:89:4a:37:c8:4f:cb:80:3e:ef:6a:c7:c5:84:bc:
d2:55:36:bd:b0:0c:08:12:af:72:61:1f:59:d3:ca:e5:14:23:
03:57:6d:76:7f:7a:34:29:1a:fe:30:35:46:45:6e:ad:5b:95:
e1:60:45:2a:f6:17:45:5c:37:fb:54:d1:46:02:7a:f1:15:dd:
16:ab:8d:7f:c7:37:cb:34:5f:b9:c9:65:75:1d:b3:60:c7:af:
9b:c4:aa:d4:52:3d:c8:2f:40:22:00:c7:9a:f4:e3:08:1f:2c:
f0:cd:4d:3d:80:2b:0c:b8:3e:69:57:1b:84:2f:cf:27:bf:ba:
f6:c1:f4:34:94:52:6e:5b:ab:bc:74:5a:21:fb:e6:5b:28:99:
d2:55:42:4b:51:8c:d5:7c:72:be:4c:b1:7e:d5:81:11:89:eb:
59:58:3a:4b:f9:7f:1f:25:17:b1:de:cd:96:44:0b:21:65:f7:
09:ff:e1:1f:11:28:95:70:b4:5e:3d:0e:ff:0c:f9:a5:1e:26:
86:8c:57:c9:44:23:67:76:09:db:c8:9f:78:09:7b:65:e6:e2:
f8:64:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:06:54 2026 by rpki-client