Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: ZGuUz05yJzuZZWL4YDHiOX13VGhOIHgNA3Nohpf1CUU=
Subject key identifier: 26:24:47:0B:BD:13:B5:75:10:43:1D:9C:BE:AF:49:9D:08:02:AC:6A
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019FACE3CF5CF8430400EAF1690A98AEB55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0E79
Signing time: Wed 29 Jul 2026 08:00:38 +0000
Manifest this update: Wed 29 Jul 2026 08:00:38 +0000
Manifest next update: Thu 30 Jul 2026 08:00:38 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: WV7jGtxiWBqXbIIWIeSpJxWeVll6KTXAxuuQ2/imf1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:cf:5c:f8:43:04:00:ea:f1:69:0a:98:ae:b5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Jul 29 08:00:38 2026 GMT
Not After : Jul 30 08:00:38 2026 GMT
Subject: CN=2624470bbd13b57510431d9cbeaf499d0802ac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:9b:4c:ce:aa:e3:6c:77:eb:01:7a:0b:73:
6e:cb:e3:49:48:c2:17:20:29:2c:98:1b:57:50:6f:
80:60:35:2d:c1:8a:32:e2:07:7f:4a:1d:2f:3f:c1:
50:a9:f7:5f:10:a7:7d:68:90:94:0f:e8:16:e3:f8:
92:a4:fe:13:c0:c5:72:91:5e:8e:e7:69:bc:9c:5c:
2c:21:c3:4b:d0:a6:3f:74:b5:d4:c8:b3:8d:89:e7:
e9:d2:1e:1d:b9:c1:16:47:ac:15:7f:77:f7:4c:58:
22:90:30:f6:e3:34:80:29:90:26:d3:5c:60:26:fe:
8f:8c:4a:41:02:e6:fc:bf:d1:3c:10:f9:79:01:6f:
8e:49:76:49:72:c0:51:30:44:0f:6e:00:bd:c4:0b:
66:2e:c3:7b:12:fb:d0:cc:ab:a1:00:b9:ed:cf:5b:
28:57:f6:26:09:93:70:9a:e0:bc:16:18:c3:96:06:
c1:4b:43:8a:ca:3a:7f:08:6a:27:4b:4f:a0:8a:0f:
70:9f:86:17:8d:38:24:46:4c:67:24:7c:90:95:b9:
4d:49:db:86:e5:c1:f1:33:97:71:0c:1f:28:12:6c:
58:f9:70:83:fe:54:56:de:8a:2d:b7:f2:26:99:3e:
cc:82:74:05:6c:78:79:5a:55:ba:99:b9:83:bf:f6:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:47:0B:BD:13:B5:75:10:43:1D:9C:BE:AF:49:9D:08:02:AC:6A
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:83:fc:37:73:25:64:c1:b8:2c:ce:9b:2d:77:11:eb:ac:bf:
2e:e5:48:85:99:7a:99:bd:33:a6:3b:54:01:69:f1:d1:48:96:
a6:85:05:45:e2:cb:cf:88:85:69:c7:e1:74:d3:4c:bc:2c:1b:
4b:d7:28:82:ae:22:bf:75:3f:7c:7e:d0:64:96:b8:79:69:4d:
43:ff:8f:6a:9b:ac:2e:67:57:a6:2d:2b:5f:65:2f:a7:8f:e9:
6e:2e:04:fc:34:e9:e7:83:58:24:e7:5d:99:2a:c2:e9:5b:0f:
ac:d1:b2:ea:6e:14:3b:7f:88:3b:1e:19:70:1d:aa:9d:11:15:
38:69:5b:31:93:86:ed:d2:56:85:e9:e0:86:ca:a8:45:c2:52:
a4:f1:07:b2:8d:0b:e6:21:d1:27:a0:93:58:74:1b:be:68:d3:
ac:c8:a3:31:14:c9:be:f1:c3:a2:79:89:42:e4:42:a0:c1:e2:
69:72:12:21:13:f3:f2:a4:1f:ce:ee:20:eb:44:eb:07:75:48:
c8:11:1d:ef:3f:a1:de:0f:af:53:6c:70:f4:61:9d:c2:db:71:
42:03:25:ad:5d:30:05:cc:29:89:c8:b7:b0:86:a1:90:e6:ce:
e6:51:fb:fb:56:e3:fb:33:3b:bd:d2:44:55:f8:34:19:75:e5:
12:89:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:51 2026 by rpki-client