Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: J7/Gl7Juy6426DaQpTFez2IsAy71LcAmgThT4bslyzQ=
Subject key identifier: 5C:FA:B8:99:4A:6F:21:7C:84:13:25:C9:1F:81:29:50:EC:82:B7:63
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 019FAA888B59AA16010E55136B5CC1CA6E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:42 +0000
Manifest this update: Tue 28 Jul 2026 21:01:42 +0000
Manifest next update: Wed 29 Jul 2026 21:01:42 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: jyqB0YI/DijKx28xOn2hTivpGE5Hu+RCl265Vb0xkhk=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8b:59:aa:16:01:0e:55:13:6b:5c:c1:ca:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Jul 28 21:01:42 2026 GMT
Not After : Jul 29 21:01:42 2026 GMT
Subject: CN=5cfab8994a6f217c841325c91f812950ec82b763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:87:3e:2b:cb:8e:fc:f4:3c:e9:14:a2:33:
91:ec:83:69:6b:51:55:c9:9b:10:40:ac:16:60:b8:
f2:2d:19:95:5b:01:57:41:10:6d:08:a9:b5:7b:86:
7c:d4:ac:68:14:2b:70:e1:22:18:22:32:88:96:fb:
48:bc:d0:c1:fa:dd:a2:0f:57:b7:42:b1:fb:6a:39:
24:1a:df:8b:c2:3d:02:27:01:15:ab:58:40:98:54:
ad:53:8c:f6:ad:5b:de:2f:4a:5f:55:17:12:12:6d:
56:20:65:59:99:2e:38:b7:5c:9e:30:49:d0:bd:4e:
51:5f:ca:2a:52:0c:36:c9:f2:69:49:d7:9d:46:3a:
0d:7a:85:9d:8c:69:52:24:b3:27:dd:8c:c8:83:33:
40:0f:61:d9:9b:1e:f9:f6:38:dd:fd:23:ae:d8:91:
b7:82:3d:8f:a8:b0:1c:e1:67:82:a8:aa:30:56:ba:
0d:d8:ea:8b:2c:a3:0c:86:6d:b5:96:04:61:b6:37:
ec:ac:b5:fe:f2:b5:88:e2:f3:6b:ff:b7:bc:12:1b:
19:b2:10:49:df:2c:8c:01:82:94:06:b3:d1:44:bb:
de:e7:3b:91:ca:b6:c2:3a:95:37:2c:c3:e8:43:42:
b1:1a:84:bf:70:89:fb:21:70:ed:34:79:a1:9c:f7:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:B8:99:4A:6F:21:7C:84:13:25:C9:1F:81:29:50:EC:82:B7:63
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c4:a8:0d:ae:32:cb:79:ae:30:ee:09:da:75:54:1d:62:60:
8b:57:5e:bf:ee:52:0e:31:a3:c0:d2:cb:fb:3b:61:c2:f0:85:
05:53:0e:1f:4a:ec:99:2e:6e:60:bc:7f:a9:b7:4c:85:bc:f4:
eb:01:bd:e1:64:0c:52:a3:1b:47:3a:4f:32:7e:70:4a:7f:6e:
19:55:07:38:1f:06:f8:90:f6:0a:67:05:e8:b0:6f:31:63:05:
51:1b:8e:9d:49:0e:a4:45:57:b2:38:ac:93:8e:67:2d:90:44:
8c:14:9f:fe:49:a5:6c:e5:f3:3f:c4:02:0f:9f:fe:a1:b9:3a:
84:93:75:30:fa:44:74:c9:16:0c:7a:93:48:e3:b2:f9:7b:3a:
b1:e5:41:6b:06:30:01:60:47:7c:9a:f2:58:50:93:76:a0:4b:
7b:21:fd:80:6d:1b:87:bc:8c:57:93:28:dd:1e:17:09:17:95:
d5:60:b4:02:9a:72:16:63:29:6f:36:56:64:db:59:7a:44:c2:
9f:8e:74:72:49:b8:49:80:1d:55:b6:aa:1a:19:f3:45:51:bd:
4e:3c:8b:0c:5f:e9:e1:ac:1f:8b:f2:8b:04:78:25:67:6b:8f:
ab:a6:c5:7a:1a:27:e2:fd:61:d5:55:86:51:0c:bc:d3:d5:c0:
0f:1a:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:51:18 2026 by rpki-client