Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: dDav9ly8hw4CcR99mkxXgBftUP4KJozZBNJdNuoF9rk=
Subject key identifier: 22:96:82:01:DE:20:39:6B:B5:E6:F7:5F:EA:91:31:B2:3F:F7:7F:50
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019FAC75C0EB03E35FD3A974174E83D3BE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 143A
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: tL/Fu8/j9rNUu4dUWJB3Xr08pW0acgRjEMxHjPKSxSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:c0:eb:03:e3:5f:d3:a9:74:17:4e:83:d3:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=22968201de20396bb5e6f75fea9131b23ff77f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:d3:bb:e7:86:8e:cc:86:32:86:57:5d:b0:
d9:dc:ce:5c:e7:92:e2:9d:55:5d:bc:5e:da:d9:56:
a3:00:7f:48:3c:a1:b9:73:c2:94:b4:cb:ef:0e:0e:
5e:86:06:06:8b:43:03:c6:36:70:2d:0d:57:92:85:
c7:92:2e:d3:7c:a6:d4:e1:fe:de:e7:48:76:30:fe:
d0:a4:14:cf:f8:65:79:8a:e6:6d:3b:6a:1e:4e:68:
20:2b:eb:42:3b:ae:75:f6:1e:5b:3c:0a:82:3e:21:
d0:cb:d2:29:fa:e5:35:e3:e5:25:66:b7:6f:cd:a6:
08:46:1a:76:86:33:06:b7:a9:89:6a:f0:67:ef:6b:
c4:33:5e:bc:21:8f:97:de:ae:89:db:2e:0e:5a:15:
d1:f3:1a:a4:cc:fe:72:63:67:f0:ea:59:56:81:bf:
0d:95:1e:63:59:de:51:91:c6:96:1e:af:46:48:de:
ed:b6:bc:d4:f0:f0:ff:3d:e7:62:b1:4e:e5:43:73:
00:52:c0:30:ac:24:60:bd:0c:cf:b6:b5:66:6e:d3:
23:a1:4e:30:0f:90:01:57:2d:b1:14:e0:e7:23:94:
00:b8:fd:c8:22:57:6e:30:a7:ad:89:3f:02:60:eb:
03:d0:a8:d5:12:b6:22:9b:19:3b:b5:0e:d2:e6:17:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:82:01:DE:20:39:6B:B5:E6:F7:5F:EA:91:31:B2:3F:F7:7F:50
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:f7:54:14:a6:41:9a:5b:af:fe:c5:1c:96:c8:41:05:38:
02:dd:4f:3d:ad:dc:90:e3:1b:c0:ee:ad:00:17:e1:9e:e3:f2:
9e:dd:77:b1:c7:9e:fa:62:94:99:ff:15:76:3a:f6:db:42:57:
74:af:3c:1f:27:a4:21:57:3f:bc:4d:f1:82:87:e2:80:04:62:
ab:6a:a3:b3:db:b2:24:45:82:40:4c:89:6f:48:dc:32:41:18:
7e:75:36:a7:6b:ff:5c:7b:47:88:c2:48:6f:73:89:d1:1f:a4:
c2:74:71:fb:9e:6f:de:3c:5b:ac:a9:04:af:e4:a2:19:3a:b0:
55:8b:08:b2:9e:20:3a:47:95:44:68:49:2c:1e:02:df:f1:f5:
c5:72:d1:34:7c:03:de:f8:62:5e:1b:1a:a9:bf:3b:c2:e9:13:
21:0e:23:77:16:d4:87:bd:6a:25:a9:a2:5e:97:f3:ad:e5:7f:
f0:18:4e:bd:aa:8f:33:83:f8:69:76:87:9d:93:69:a8:d4:ef:
38:0f:56:a1:b4:c8:7b:d7:31:91:4d:52:fe:bd:40:ee:5a:82:
d9:59:75:eb:b0:7b:e8:df:1b:21:c7:70:c8:05:ac:73:9e:5a:
ee:81:16:21:e8:1d:a8:4e:f7:09:ba:ee:74:cd:84:74:99:af:
65:ea:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:37 2026 by rpki-client