
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: /ZuRwEHDg4o+yD5mV/WSBnbwDAeFlsC1ZajMC+q0D2Q=
Subject key identifier: 1F:05:73:1C:D7:C0:41:E8:AB:92:CC:C7:D1:81:ED:51:D9:40:47:3B
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019FA9E29FC215D08AB4F106B58B28B0AF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 1193
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: KLDVORCOCmva2z++m9CKPrkwuMpaneKjgCfUQuIQHrc=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:9f:c2:15:d0:8a:b4:f1:06:b5:8b:28:b0:af:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=1f05731cd7c041e8ab92ccc7d181ed51d940473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:40:4e:4c:aa:a7:c6:40:f4:51:73:7a:08:
fb:6e:82:29:e8:b9:0d:18:c4:8b:fe:5d:b7:03:2e:
98:48:35:75:6d:4b:d1:5f:0e:d5:05:74:4a:ae:d6:
7b:54:b0:7f:4d:6c:6a:a7:f0:b2:ec:c4:e8:3d:4c:
f3:e5:6d:fb:26:79:2c:77:d1:3f:42:cb:a9:65:0f:
d6:cc:e3:b1:ca:40:90:4d:63:69:b0:d6:90:72:b7:
cc:90:6a:e8:ad:98:0c:56:30:76:d7:fc:af:76:89:
96:64:67:68:c0:69:cb:91:25:31:47:6b:69:cf:9c:
a4:98:2d:cc:58:f0:f1:ba:c6:8f:07:11:87:04:26:
b6:7c:f3:56:b2:1e:57:0e:fa:ab:5f:3f:0b:66:6a:
81:d7:ee:e5:d0:ef:48:59:92:14:0d:a1:af:3b:ff:
45:08:c1:be:89:49:92:8b:a4:64:e6:86:b6:a2:98:
c5:23:65:40:a9:69:7f:a5:5a:8e:0a:1a:c1:4b:9a:
c2:73:08:6b:38:61:8f:bb:ad:6e:46:72:4d:25:1c:
7e:a8:61:e0:bb:62:7a:6d:17:85:0c:30:87:d6:cd:
7e:56:35:a4:25:a0:7a:18:5f:19:42:9e:f3:4c:d0:
fd:10:d0:5e:87:c7:3a:dc:6c:96:c7:9a:5b:d3:45:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:73:1C:D7:C0:41:E8:AB:92:CC:C7:D1:81:ED:51:D9:40:47:3B
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:33:36:a9:e1:87:2d:45:5f:be:25:e4:30:5c:5b:0c:d5:7e:
da:09:5a:36:79:c5:18:18:1f:f5:3e:8d:52:46:a4:7f:68:23:
81:fe:02:62:45:99:bf:dc:93:d3:6d:a5:6b:0f:2a:fa:58:16:
d4:eb:37:85:9f:e9:11:aa:f2:ad:96:b4:6d:10:9f:cd:eb:57:
97:15:da:c3:88:49:a3:c2:ff:7b:3b:13:83:40:a7:88:6c:d6:
20:cc:fd:43:be:e8:d8:3c:b1:4a:b3:ef:d9:2d:43:d8:82:5a:
80:5c:78:8e:f6:e6:95:a3:7a:6a:9f:e5:3d:32:90:d0:b6:ed:
e7:50:0d:46:05:cc:21:84:b9:dc:fc:d4:eb:4f:86:a5:0f:2e:
8a:f2:53:a1:9e:30:2f:d8:ba:9c:d1:5f:4d:c0:bb:be:1b:44:
75:b1:32:29:54:c2:28:ac:9f:99:cd:a1:de:a0:52:3b:fb:81:
27:4f:a7:1f:6e:5d:2d:db:03:c5:c5:ed:d2:54:b0:7c:72:92:
64:9f:4a:28:94:12:29:42:d4:ee:7c:91:26:3f:1a:b1:eb:50:
f2:80:26:0b:ca:e7:13:e4:aa:40:75:91:70:fe:4b:e4:c6:fe:
81:1a:61:4c:15:2a:d0:a6:00:73:31:ab:06:1e:2a:9c:55:ac:
66:a9:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:17 2026 by rpki-client