Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: J3Fy1etHQLMPfUptsxBhBoXcMS4FZIgp3g0Mi7aVbnk=
Subject key identifier: 4A:C8:0F:0C:59:E0:E1:64:38:A9:82:AB:3A:12:60:19:09:69:0D:B7
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019FAA888222EEEB1665EF33EFC714F0452B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1642
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: 26ZpN8Ehzwa/J5+Y/g+qXRVvCIxT56XcZMNi9RiMS4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:82:22:ee:eb:16:65:ef:33:ef:c7:14:f0:45:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=4ac80f0c59e0e16438a982ab3a12601909690db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:c5:12:95:6f:ad:3a:86:0f:cb:e0:ba:9a:
cd:52:b3:32:be:dd:0d:c9:a9:ca:a8:dd:7b:21:a5:
a7:7e:c6:50:22:fb:1a:b8:84:47:a9:4f:af:31:92:
ba:e2:c3:2a:c0:95:63:bc:8a:0b:6c:8d:da:e9:7f:
12:7c:25:82:ee:85:df:b0:5d:5f:1a:e0:db:62:e9:
dd:41:c3:ce:04:24:88:6c:01:ff:99:b9:fb:59:ac:
06:dd:6a:a3:7f:d6:89:2c:15:a7:54:92:b6:50:97:
b2:97:a7:53:da:a3:af:20:ea:91:49:cb:8e:15:37:
6a:bb:11:db:1b:be:1d:6b:bf:3f:43:a7:16:75:f9:
61:9d:ed:e9:48:a3:2f:39:c6:3a:ab:b9:bc:bf:f1:
2e:36:6b:11:22:13:49:ce:72:14:6a:9d:bf:72:de:
07:d7:80:17:86:37:c8:24:c9:3e:cf:c8:c8:6e:83:
1e:1d:53:d9:b7:3a:11:df:5f:81:79:92:b0:5a:5c:
e5:c1:29:90:29:56:d4:b8:3a:ba:7a:42:a2:9b:54:
e1:38:c5:a9:1a:44:dd:c5:7f:43:af:84:0b:97:90:
a9:76:73:01:f9:87:1a:81:18:0e:a6:0c:9d:fd:42:
a7:c6:e5:fa:8a:2e:d3:0c:9a:42:9c:6d:ed:08:d2:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:0F:0C:59:E0:E1:64:38:A9:82:AB:3A:12:60:19:09:69:0D:B7
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8a:5b:dc:e6:5d:64:47:c5:f1:a2:97:c8:88:4d:9a:1a:3a:
1b:e5:77:ce:15:35:1b:68:a6:70:e4:1c:6d:c3:56:9a:67:a1:
5d:0a:cf:13:b9:4d:f5:36:11:f9:ca:41:a3:bd:ab:74:26:17:
b2:28:ce:9d:2b:e1:14:9b:fe:81:18:03:4b:06:9c:be:c2:30:
02:fd:28:67:42:fc:45:46:72:cc:ec:a0:e3:9e:c1:4c:de:02:
80:80:90:fe:27:2b:58:61:55:2b:36:55:c6:7b:51:30:8c:79:
c3:91:d4:d4:6a:fa:5a:75:1b:b3:82:6e:3b:35:b1:ce:ff:5b:
19:03:cb:d6:e1:a9:de:bd:7f:52:fd:7b:aa:3e:4c:d6:77:95:
3b:46:fc:81:7f:c8:75:66:8a:ad:ae:e1:c6:b2:43:ea:3c:75:
ce:89:22:5a:9b:a2:01:ff:22:54:f2:61:11:75:5f:de:7a:b4:
a4:6c:d8:c5:d3:ff:43:b3:b9:02:03:45:07:de:84:b0:9e:88:
a6:e9:35:5f:b1:c2:ba:19:b1:24:ff:9d:6a:f4:e3:4a:1e:3a:
9b:4b:e3:b0:97:10:ee:f6:c8:56:8d:91:00:b6:53:96:19:7b:
3d:82:a0:a6:a2:ff:87:65:da:29:e4:67:f9:b4:15:fe:fc:42:
6f:a8:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:14 2026 by rpki-client