Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: yuPVzEGU4OxmaMUY1l4jvM9aCzQdQzpcjrn7zyrIksY=
Subject key identifier: 4F:66:08:3D:0A:6E:28:36:F9:A5:4C:93:08:AF:75:9F:7E:28:6E:C5
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 019FACAC9BE333A7519481242F67DE22B1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 07:00:20 +0000
Manifest this update: Wed 29 Jul 2026 07:00:20 +0000
Manifest next update: Thu 30 Jul 2026 07:00:20 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: /z3Y2zvuMULi/0Wg+gbLIwvSQ3pIaYFVosuX5HxPe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9b:e3:33:a7:51:94:81:24:2f:67:de:22:b1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Jul 29 07:00:20 2026 GMT
Not After : Jul 30 07:00:20 2026 GMT
Subject: CN=4f66083d0a6e2836f9a54c9308af759f7e286ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:b5:83:55:d5:3a:dc:54:6d:ed:69:e4:f2:
3a:45:5c:d9:98:ee:fc:20:87:48:74:f8:0c:48:1a:
f1:b8:fb:0b:f0:93:35:fb:7b:f0:90:05:fa:30:e9:
45:83:66:f5:3d:30:1d:15:c2:6d:f8:13:df:4a:33:
6a:f5:77:62:4b:32:4e:99:e1:9b:0c:1a:11:e7:6a:
04:59:47:47:15:81:91:18:0e:ac:93:35:d5:e9:f2:
a8:45:3a:96:c8:9f:7d:ab:c7:74:3f:bb:89:81:73:
db:a1:f0:c2:85:2e:95:97:6c:44:e3:40:59:12:b3:
3c:69:ab:e1:7b:f9:f1:ac:33:13:1a:e0:69:35:eb:
f0:0f:5c:8c:ac:ff:7d:ac:63:19:56:39:00:8f:f3:
ad:34:30:8b:67:2f:9f:45:99:f4:5c:80:62:de:c9:
3e:c7:ee:7b:f0:49:1a:c1:68:20:e4:92:91:10:42:
cd:25:f2:a9:82:53:29:34:e8:a5:0c:c4:a5:2c:bc:
62:41:af:19:55:d4:79:e6:31:fa:36:88:3d:f1:52:
8b:91:53:51:6e:95:56:4e:b3:48:94:d2:aa:e0:8a:
56:5b:23:12:6b:d4:84:a1:62:6f:f2:51:9f:b1:3f:
e9:16:eb:a3:3e:f4:4c:d9:e6:51:a1:70:97:9c:75:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:08:3D:0A:6E:28:36:F9:A5:4C:93:08:AF:75:9F:7E:28:6E:C5
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:34:30:09:e9:da:49:05:47:7a:ef:d6:57:27:11:73:8e:a1:
e6:3d:94:a4:95:4e:8a:85:41:59:8f:da:3e:fa:f2:8b:f3:91:
b3:97:9f:5e:b9:30:df:58:1b:eb:1c:43:b6:42:58:54:20:72:
56:19:41:ae:50:23:ba:1b:96:dc:6c:12:3b:97:9c:1b:06:5a:
c6:19:7c:cb:fc:d3:b4:ea:af:cb:7d:ed:09:09:8c:44:09:75:
0f:b6:05:94:1b:67:dd:7b:70:34:55:46:ea:bf:ce:41:b8:97:
41:56:9f:e8:92:83:9f:e0:7c:86:18:c7:7d:b9:2f:ab:37:60:
48:cf:82:8b:21:24:39:55:f5:d6:89:cd:24:98:89:96:6e:49:
6f:7b:c3:57:d1:a7:9d:01:74:99:a1:79:7c:5d:44:26:aa:8b:
f2:8c:21:01:0b:90:3a:8b:31:a0:f0:0b:3c:ab:8d:64:5b:b8:
78:3c:b1:a9:f2:b4:24:c0:26:85:07:b2:5e:70:a6:d2:df:90:
41:a7:ba:b9:34:32:60:b2:53:78:49:a1:4f:3e:2d:0d:1e:f8:
de:76:4e:01:a5:58:cf:22:8d:c6:9e:b0:75:44:1f:12:ac:8a:
a7:61:18:a8:da:8d:ac:c7:79:49:94:1f:61:39:10:3b:37:e6:
71:1f:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:54 2026 by rpki-client