Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: asFILX9whl222xSTYqZSZ1orta3rMJKJOzP/6R0o8cs=
Subject key identifier: CD:FD:6E:A9:D9:D9:90:36:FE:9A:A2:E8:A2:49:BB:69:B0:36:59:67
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 019FAB9A4BFD413446D9DD3E4592BCB64DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 072B
Signing time: Wed 29 Jul 2026 02:00:43 +0000
Manifest this update: Wed 29 Jul 2026 02:00:43 +0000
Manifest next update: Thu 30 Jul 2026 02:00:43 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: N6HAdNKl2qjQ24S2iepz7Nr1V4ghFwGvD7bLHGk+Qqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:4b:fd:41:34:46:d9:dd:3e:45:92:bc:b6:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Jul 29 02:00:43 2026 GMT
Not After : Jul 30 02:00:43 2026 GMT
Subject: CN=cdfd6ea9d9d99036fe9aa2e8a249bb69b0365967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:a3:46:f0:00:01:c5:32:2f:eb:88:e3:44:
96:36:fb:e1:59:15:69:23:31:a8:9a:bc:34:21:65:
71:75:9e:f3:1d:be:ad:f2:11:5e:16:f6:7c:bc:2d:
c1:fa:02:22:da:3a:57:54:8c:74:74:4b:bd:75:cc:
bd:de:d8:37:94:32:5f:af:ab:3f:a0:e0:b2:ab:16:
7d:ab:72:39:ea:cd:80:b8:04:43:69:7b:6c:85:a2:
02:f7:50:5b:a0:78:a7:8f:58:c9:ba:ba:b4:6c:88:
6e:4b:c3:16:b8:13:a5:82:fd:55:51:12:ed:c4:f6:
3d:47:46:ae:af:be:b4:34:9a:e3:05:94:3d:61:21:
18:30:93:23:4a:9d:ef:fc:73:39:df:76:ea:5b:4b:
a1:f4:e0:c3:72:9d:c0:43:da:ff:a8:00:a3:28:a6:
19:1e:2c:f3:26:c0:4b:61:54:f5:85:e4:4d:8a:25:
d9:ac:a8:0f:a2:40:80:8b:01:80:4c:03:6e:8d:38:
3d:93:5b:f2:d6:62:a9:0b:d5:9d:1d:24:d3:04:f9:
01:34:22:d8:17:26:ef:83:b0:12:2f:a9:a6:ed:93:
2e:13:43:1d:d2:b1:a8:e8:d1:35:de:36:1e:29:2c:
40:45:e4:7f:ba:63:b4:a7:16:53:aa:75:ea:a8:a1:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:6E:A9:D9:D9:90:36:FE:9A:A2:E8:A2:49:BB:69:B0:36:59:67
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:96:84:ba:ee:83:a1:4b:c6:79:d4:24:45:b3:ba:d3:42:2d:
19:be:de:33:94:12:c3:0d:8f:ee:ef:41:0e:0a:bb:22:77:39:
96:74:9c:83:60:25:02:e8:7d:0a:47:21:3e:67:3d:25:e1:6a:
4e:fd:e5:c5:d2:e4:e7:24:e6:5e:66:3c:10:fe:0b:96:cf:70:
1e:d4:9c:8e:12:79:01:ad:dd:c0:96:1f:c1:fb:5e:21:c7:9f:
b3:9d:05:af:f8:1a:ec:b0:cf:36:40:ef:43:d7:27:98:d6:e2:
3a:bc:21:34:6c:52:81:75:94:ef:88:87:8d:ba:e4:97:6a:02:
79:44:4c:82:98:5c:4e:d0:e2:ef:1c:22:07:30:27:06:8a:dc:
9f:48:15:1a:b8:bb:05:f8:db:1f:ee:15:34:b9:31:01:5a:57:
e9:79:4a:be:9c:61:80:4c:85:97:a6:70:2b:61:b1:dc:63:2c:
cc:c0:c2:d7:81:2d:3f:71:74:e3:57:04:f6:c8:a8:88:c2:34:
9b:a0:99:ab:94:fd:a1:ca:84:3e:66:3b:a3:1e:50:9e:0d:b8:
33:f4:0b:ea:34:a9:b1:78:68:eb:e3:90:d0:5d:af:27:20:f9:
12:66:1a:5a:54:05:4d:20:58:b6:33:18:3f:ea:f1:af:70:0c:
9c:ad:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:26 2026 by rpki-client