Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: sAQDw07z2Q8wA2WI7MYUFzbTVq+n73HogO3g86Ma00o=
Subject key identifier: 3D:80:3F:54:DD:9E:C9:3D:41:BF:D5:D2:B4:13:47:72:BB:E1:23:07
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019FAB9A9B7BAEF54AED21A2006D987DD289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 082F
Signing time: Wed 29 Jul 2026 02:01:03 +0000
Manifest this update: Wed 29 Jul 2026 02:01:03 +0000
Manifest next update: Thu 30 Jul 2026 02:01:03 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: +Xp0yl5KVLiP+ty3BtRu6DEwHcWY6Kr/EWxuB0E3XWU=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:9b:7b:ae:f5:4a:ed:21:a2:00:6d:98:7d:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jul 29 02:01:03 2026 GMT
Not After : Jul 30 02:01:03 2026 GMT
Subject: CN=3d803f54dd9ec93d41bfd5d2b4134772bbe12307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:32:c3:e4:f8:bb:70:ad:36:61:67:b0:f6:
03:db:a3:c4:47:6e:73:38:56:46:12:e7:44:ed:80:
6d:58:b3:f3:df:2a:10:af:fe:2a:d5:06:52:cb:a7:
75:e4:35:cd:f9:46:3c:2d:66:9c:ee:76:df:3b:48:
43:db:6b:0f:84:75:cd:d1:62:79:8a:10:e6:8d:82:
59:58:cf:ea:1e:55:58:87:75:81:27:3d:97:c4:78:
06:8e:9b:38:de:9d:be:96:5d:c9:ac:e0:09:5a:ca:
76:17:6c:d5:bc:32:79:ce:54:df:3b:ee:e7:0a:a7:
05:1d:72:b8:ee:51:8e:be:23:74:fc:4f:a6:93:73:
ac:7c:4a:03:76:34:20:40:42:22:ec:88:79:f5:0e:
9a:dc:21:83:b5:bf:0c:7d:74:a0:5f:c4:d7:13:9b:
d1:f9:ce:a7:66:6a:e9:9d:c3:91:53:c7:98:a0:f9:
36:39:0a:1c:82:cf:3e:b6:5c:09:60:67:cb:e0:af:
6f:c7:72:35:31:be:69:0a:ca:97:96:22:4c:e9:4a:
b5:d7:95:c2:37:44:05:9b:4c:1f:2c:46:c6:e4:f3:
a5:0c:50:78:77:93:42:58:3d:d5:1b:d5:f4:56:15:
77:e2:35:0c:13:24:32:45:b4:e2:8f:c7:b0:12:00:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:3F:54:DD:9E:C9:3D:41:BF:D5:D2:B4:13:47:72:BB:E1:23:07
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6d:3d:94:85:b3:92:06:ba:28:07:ff:c8:bc:cf:ee:c7:f4:
a3:f8:66:cf:21:fe:dd:bf:82:ce:2d:7a:ba:0a:99:8c:7a:03:
79:10:f4:b6:dc:f4:78:08:35:88:b1:02:2d:26:30:32:7a:e1:
d7:b6:ad:a9:b3:11:ce:72:f7:51:29:ae:b4:1c:7d:57:1e:35:
81:f2:be:cf:1c:b6:50:1f:02:34:12:96:83:9f:b3:9a:02:b0:
10:36:35:f9:34:63:fb:36:18:28:ad:3d:9a:ad:19:cb:ba:ae:
78:96:a5:67:8f:e9:c3:b4:44:3e:27:2d:32:80:19:19:da:57:
47:c1:b6:11:3c:97:e1:eb:df:83:9a:20:d2:ae:90:75:13:c7:
4b:d0:32:c0:6f:f5:ba:72:3d:62:f5:1a:02:50:8b:c6:18:d8:
59:02:e7:4b:b8:56:0f:90:d4:63:ca:12:f5:c7:5f:85:dd:12:
59:cc:7f:c9:ba:9b:d9:4c:da:3a:41:36:3d:39:83:98:af:ac:
0e:42:a6:55:78:5f:16:0d:e5:8a:d2:39:8e:36:e2:87:04:05:
4b:94:a5:16:e1:df:8d:a2:86:44:10:54:40:a0:f5:3b:33:56:
45:9e:94:c5:f9:69:0c:83:7d:b0:37:bb:be:0a:d5:36:55:b1:
8f:51:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:25:57 2026 by rpki-client