Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: leivZkmpexBL7HpVJMFS+i5TbPyeJmDMPGJ2XID99aE=
Subject key identifier: B4:DE:D9:0A:33:25:55:D9:DB:2C:82:C4:4A:B1:DE:42:BC:38:69:0C
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 019FACACF3E290113FCD324F953D6A864187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 19E1
Signing time: Wed 29 Jul 2026 07:00:43 +0000
Manifest this update: Wed 29 Jul 2026 07:00:43 +0000
Manifest next update: Thu 30 Jul 2026 07:00:43 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: w+RkaRnQ+MsLT8tK4yaH/KLjU3j6UIuMZS0hy9wUMdU=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:f3:e2:90:11:3f:cd:32:4f:95:3d:6a:86:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Jul 29 07:00:43 2026 GMT
Not After : Jul 30 07:00:43 2026 GMT
Subject: CN=b4ded90a332555d9db2c82c44ab1de42bc38690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:68:eb:ad:7a:c6:47:da:1b:51:77:7b:67:29:
fd:85:5f:d7:47:86:28:89:83:45:99:70:0b:52:ab:
db:cf:84:be:20:38:26:99:1b:3f:25:5d:09:ba:30:
66:e7:91:a0:7a:45:91:6e:39:33:f1:81:69:43:c0:
91:1e:68:78:ec:d3:33:68:5b:b9:a0:28:77:dd:f7:
0d:84:12:d5:6e:02:9f:b6:51:56:19:78:f4:08:ff:
49:05:6f:d2:d2:21:e5:ad:ee:b5:93:29:5a:b0:11:
2f:02:5f:05:0c:b1:8c:10:b2:76:9f:cf:2f:b9:d6:
f2:ad:2d:ed:b4:00:7c:f2:8e:a9:1a:3d:18:39:d6:
62:5b:51:d6:a4:1e:6e:30:ba:ca:d3:54:b9:fb:a1:
fc:9c:a8:a1:01:03:41:d3:d5:78:25:05:70:de:74:
b4:2d:04:31:ee:4e:2f:7e:22:54:8d:30:91:bd:2f:
a7:18:12:f7:a4:ff:6d:23:e2:15:71:1b:02:50:e9:
62:b9:e8:48:38:66:3e:23:b7:b8:6d:85:4c:d6:e1:
59:ea:9f:c3:66:13:28:d5:6a:f2:fd:2e:31:32:c9:
b8:1b:a8:88:d6:bb:11:f8:49:69:c7:8c:5f:01:fc:
dd:a3:f8:96:c2:de:dd:95:69:95:99:68:21:5c:b5:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:D9:0A:33:25:55:D9:DB:2C:82:C4:4A:B1:DE:42:BC:38:69:0C
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6f:cd:b0:11:0e:c0:fc:2b:44:4c:66:d1:ad:a2:10:50:eb:
47:34:ac:5e:9a:e6:78:4e:01:7a:a2:c1:b4:dc:8c:13:bc:f4:
37:2b:cc:44:78:b6:ff:c6:74:e5:11:73:c9:d5:a1:c2:ec:fb:
71:0c:70:b3:90:37:39:ef:f7:fe:1f:8d:89:a4:23:b2:23:0f:
53:84:ae:d8:b8:9c:4c:41:12:48:6e:67:27:32:32:4a:09:4e:
43:72:db:32:24:73:1c:b1:09:c3:9f:2e:9a:6d:19:ec:6b:80:
4a:b9:82:c0:45:7d:bc:61:16:4f:d5:10:f0:f1:47:90:ac:1f:
6e:27:38:2d:3c:ae:f7:9c:39:50:f6:32:3a:29:6b:cf:b2:58:
2b:94:32:ec:25:8e:ce:d5:66:8d:a2:b7:0b:14:5b:08:cb:8d:
f7:e3:f8:0c:2b:53:5d:d6:25:cf:83:27:29:67:78:52:b7:42:
f8:16:0f:ea:e7:46:22:a2:67:84:3d:ba:c4:35:cc:be:ff:7b:
11:bb:86:93:57:78:d4:c6:93:c1:fb:92:b2:94:fc:ab:cd:a8:
5f:57:4d:33:a0:6c:21:39:13:95:66:5f:2c:e4:f3:fc:1d:c8:
4d:f1:09:c3:30:89:9a:91:6e:a2:d2:30:5e:ea:ba:88:10:42:
35:d4:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:35 2026 by rpki-client