Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: eawozYz1Ts+Nr1lWENhLnKuykwh0nFUqywQgckWk1eE=
Subject key identifier: 31:FB:41:AE:A0:77:1D:2F:31:26:12:2D:45:B1:C0:75:C5:00:86:B8
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019FAAF5F3E45A93DD3728C13996F6634EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 08A2
Signing time: Tue 28 Jul 2026 23:01:13 +0000
Manifest this update: Tue 28 Jul 2026 23:01:13 +0000
Manifest next update: Wed 29 Jul 2026 23:01:13 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: 81HIDwyMpUfV3Ihn8LB5dxrUmu9LJN710yPRj8dQnUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:f3:e4:5a:93:dd:37:28:c1:39:96:f6:63:4e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jul 28 23:01:13 2026 GMT
Not After : Jul 29 23:01:13 2026 GMT
Subject: CN=31fb41aea0771d2f3126122d45b1c075c50086b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:e6:50:ac:33:59:66:44:20:fc:9b:51:cb:
6d:65:4e:41:94:02:31:b1:7c:d3:a4:77:fc:46:e0:
5a:a7:b7:47:ef:79:04:0e:b3:2a:c1:f9:0a:71:0b:
34:17:5c:a9:b5:a6:1f:c5:38:95:e4:aa:ad:d9:a9:
6e:f0:d4:3f:be:df:5c:05:22:05:7d:ac:5f:9a:0c:
63:76:ae:1c:1f:8a:bd:81:3f:dd:77:26:84:bf:12:
4e:46:78:c1:8d:9a:8e:64:dd:cc:a7:a3:9d:c2:a0:
8f:be:52:34:2b:d5:89:f3:18:15:ee:a4:7b:5d:9d:
95:de:e4:b8:aa:1c:02:0a:64:39:1e:78:4e:b5:97:
44:49:bc:3f:6a:65:8a:d0:96:8d:57:bc:34:ea:76:
ab:04:d1:35:67:7d:15:10:57:94:63:a1:00:e1:e3:
37:43:9d:98:1b:ad:f1:b6:4d:29:f1:55:1d:37:7b:
77:36:ea:3a:19:1d:24:84:d2:5e:5d:77:ef:62:ad:
6e:59:e0:5c:1d:d2:be:51:19:53:cf:ea:72:d4:4e:
b0:3a:e4:8b:b4:0c:db:80:aa:16:cb:04:7e:4f:25:
0d:da:89:3f:5b:3e:3f:99:dc:c4:a2:a4:f6:54:a8:
13:c6:68:10:50:e8:15:59:3c:b3:f3:98:a4:b7:0f:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:41:AE:A0:77:1D:2F:31:26:12:2D:45:B1:C0:75:C5:00:86:B8
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:26:1d:69:40:6e:ea:29:0c:35:64:c2:00:25:bf:cc:1c:
ae:c1:7b:0f:e6:6c:bd:e8:d9:a8:81:f4:a0:af:69:ac:33:70:
4d:4e:f4:53:70:18:a7:2b:19:35:b8:8c:a7:17:04:ad:d3:df:
34:2e:7c:cb:40:22:34:92:14:03:bf:c8:e5:88:9d:c2:9e:ee:
69:8e:ce:56:11:4b:79:3d:8f:d0:9e:89:e9:5e:c9:2f:b8:3a:
22:11:db:c0:0d:75:49:91:32:06:46:9b:d0:c9:6f:ab:3b:85:
d1:d2:b8:bc:30:a9:d8:c3:69:a7:dd:59:2c:51:d0:5f:49:14:
0a:2d:48:63:2b:94:00:e3:7b:5a:b6:0b:00:16:da:b0:87:eb:
19:b0:cd:66:c5:be:e7:27:7c:36:e8:91:51:b3:fb:e1:f0:3f:
70:e2:3d:f8:e2:79:17:f3:1a:c3:fe:02:03:47:f5:14:04:e0:
b4:01:85:f0:23:00:dd:e7:b3:db:e7:7e:89:2d:41:86:46:6c:
a9:cd:8a:aa:02:fd:05:f7:c3:aa:a9:89:aa:ed:b3:5d:76:82:
24:0b:85:6a:30:0f:8d:44:49:36:8f:3a:23:b6:34:fc:21:96:
cc:e4:c1:9b:50:06:1f:1e:c3:08:46:cf:22:84:64:f1:f6:36:
31:13:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:57:16 2026 by rpki-client