Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: 9Ul5/6VPc26eoQQk+W1vUNqwNoe7+LUWhVDzuoeTh9M=
Subject key identifier: C6:1B:8E:B1:F8:C8:13:A2:05:98:42:45:54:0F:C7:99:01:95:74:49
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 019FACE38E60577DB18BCEC305D1109034D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 08:00:21 +0000
Manifest this update: Wed 29 Jul 2026 08:00:21 +0000
Manifest next update: Thu 30 Jul 2026 08:00:21 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: cSagKlPo292LllhNvCskOXdb650WOwaQfOltCQ9yyhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:8e:60:57:7d:b1:8b:ce:c3:05:d1:10:90:34:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Jul 29 08:00:21 2026 GMT
Not After : Jul 30 08:00:21 2026 GMT
Subject: CN=c61b8eb1f8c813a205984245540fc79901957449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:cc:47:66:f3:f2:b8:17:98:61:be:6e:56:
69:ed:e6:a2:21:3e:b1:a4:cf:3b:5e:07:b3:c1:ee:
b6:19:2c:ed:a4:3c:96:fa:6f:85:a8:97:cf:dc:dd:
b7:1c:52:a5:2b:91:25:ea:a8:4f:8e:96:7a:6d:b2:
bb:45:4c:57:22:70:05:25:10:27:18:40:d9:d8:ca:
d4:bd:74:e4:3f:53:99:01:00:ea:74:24:27:e4:14:
94:3c:aa:ba:4d:d3:b2:57:4c:43:ec:f7:63:5c:bd:
c2:f9:62:9b:1c:5d:de:56:54:de:9c:13:a5:e6:e6:
9a:8a:2c:44:5d:87:ae:0f:2f:aa:6d:3a:1b:89:68:
d7:af:c2:3b:e6:f7:8f:ba:35:46:e6:d9:6a:39:db:
8b:37:75:58:c4:65:2c:2f:04:d1:55:ca:cd:bf:ff:
9c:e3:21:8b:62:f9:ca:aa:7e:a2:3e:aa:fe:3d:60:
b2:8f:18:a0:47:e6:99:80:a0:b7:74:a8:93:84:00:
ae:27:c1:48:86:a4:0b:08:9b:f5:99:ee:40:5c:6a:
d9:1c:60:ca:97:1d:78:3c:fe:4a:2e:df:0f:cb:25:
48:d2:bc:6e:8c:45:f4:72:68:61:ea:da:e0:98:a2:
69:d8:c5:69:62:a1:68:7a:b3:30:45:0f:d3:1b:78:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:8E:B1:F8:C8:13:A2:05:98:42:45:54:0F:C7:99:01:95:74:49
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:aa:fc:ad:9f:ad:48:6c:2b:12:31:e1:6a:b7:29:f8:76:5e:
59:4d:7b:ad:8e:73:9a:40:08:d5:58:d2:b5:ab:89:7a:2c:29:
ad:f8:4a:d4:ee:4c:2b:65:99:84:2d:ff:12:3e:d4:84:23:3c:
62:2d:7c:7a:d4:7a:de:a8:f2:f1:73:c8:45:de:1f:bf:6d:50:
d8:30:46:10:58:a6:74:a4:61:cc:dc:7f:78:a9:69:e8:03:c7:
a2:96:69:fb:f8:ff:3d:08:79:90:7d:09:2c:37:f4:43:47:b3:
3a:0b:1c:b3:e8:45:0a:97:12:46:7f:8c:e0:be:d9:85:f3:1b:
d4:66:87:ed:b6:ba:05:23:41:83:8f:63:87:8b:98:3f:52:dd:
6d:9e:a8:ae:f2:7e:c9:fa:06:b1:ff:95:c4:e5:de:06:6c:5c:
9e:54:1d:7c:34:2b:55:d2:3d:34:35:3c:7d:75:93:66:a4:01:
b1:27:d0:23:8a:da:a7:0c:52:9c:ac:1c:ed:f4:b8:cd:03:fa:
23:af:91:7a:1c:c5:37:09:97:47:5f:c6:f7:72:0e:9d:69:64:
a5:9f:84:c7:12:d2:da:c7:1f:fc:aa:99:c7:52:61:b4:7d:92:
d9:b2:4f:82:38:1b:cb:a6:e8:27:22:13:83:b8:01:b1:69:73:
0a:2b:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:14:12 2026 by rpki-client