Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: +X6D1SVbBPkD23Cd8GOfhQI44x5DHFlLNICO96UW56w=
Subject key identifier: 64:94:16:F3:B3:C4:E3:A6:FB:CF:C7:EE:19:53:D9:CB:C4:74:94:FE
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 019FAC3EC6F88E8E1BFF994E7865B49CC2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 04C4
Signing time: Wed 29 Jul 2026 05:00:23 +0000
Manifest this update: Wed 29 Jul 2026 05:00:23 +0000
Manifest next update: Thu 30 Jul 2026 05:00:23 +0000
Files and hashes: 1: igP_j0gqdj6VYQfMBatyuvEtzjE.roa (hash: Cvo1yExlPO8Dsib93UiD0RmAn7lporXrd5tMSD8Uf7s=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: zIl3ihBEwPGVA6eZpkHso3SJMz2ewf/7OyOrRXt2U9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c6:f8:8e:8e:1b:ff:99:4e:78:65:b4:9c:c2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Jul 29 05:00:23 2026 GMT
Not After : Jul 30 05:00:23 2026 GMT
Subject: CN=649416f3b3c4e3a6fbcfc7ee1953d9cbc47494fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:05:1b:05:6a:60:6d:c2:7f:39:ba:31:9c:
71:34:74:cf:a9:ea:75:e1:57:18:78:ee:d8:85:81:
d3:38:56:6f:c7:0a:b4:91:2a:ae:34:40:ab:07:76:
bd:16:6f:e6:c6:6c:21:c7:1a:36:4a:24:9b:2c:e6:
40:36:94:c5:30:a4:e9:e1:09:05:d3:7b:cd:16:76:
8a:b7:37:ef:f0:ed:ac:13:ee:04:22:62:82:24:fb:
fd:dd:f7:c2:28:14:bf:92:18:c4:11:6b:e6:d7:83:
80:5a:1c:51:b6:37:ea:d4:9c:b8:cc:14:14:f9:7d:
bf:de:3c:b9:8c:81:6f:fc:32:77:78:55:5a:6d:ee:
cf:41:e4:d3:20:c2:1a:ad:25:ab:c7:ef:6e:88:82:
0c:12:fb:7e:72:fc:be:1d:99:10:98:22:16:92:01:
3a:82:f0:2a:9b:fc:c6:42:d7:be:b2:e5:aa:7c:f2:
88:bb:90:b6:92:6a:f3:6c:1d:df:e3:87:c0:10:08:
4c:1b:cf:2f:9d:a5:b0:2c:af:7f:99:de:33:59:e6:
80:be:da:ef:72:ce:f9:01:c1:ee:4b:67:b3:c7:e3:
a9:85:1c:4c:26:8b:6c:11:0e:8d:07:70:4f:1c:a9:
df:a7:55:cb:c4:6c:f9:12:b9:00:46:8f:2b:2d:98:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:16:F3:B3:C4:E3:A6:FB:CF:C7:EE:19:53:D9:CB:C4:74:94:FE
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:af:30:e5:8a:1f:93:c6:63:42:a7:e1:24:0e:20:e3:4a:fd:
93:46:78:18:b2:43:98:0d:a6:54:e5:96:9f:90:57:2c:7a:a8:
f7:e0:e2:54:0f:6a:14:93:a0:4f:25:5a:c9:74:a3:61:46:cf:
b4:81:af:39:23:fb:bf:0a:72:40:f0:62:11:d7:89:29:99:7d:
7f:64:cb:fd:31:3e:01:16:b8:3e:dd:80:05:26:4c:68:fc:4c:
5f:99:2d:95:ce:42:39:b5:5d:1c:c8:38:d9:4c:69:b8:63:ed:
91:73:91:7d:4e:48:ea:a9:3b:26:fc:8f:f3:26:43:5a:b2:96:
4f:e3:72:01:4d:e3:0a:ad:98:8b:be:1e:70:9f:d2:fa:18:05:
f7:38:31:78:92:ed:ef:18:bc:25:c1:52:57:11:2b:dd:b6:c5:
31:20:78:4e:90:b8:b3:31:2e:09:f3:2f:a6:2b:b4:ea:93:12:
8b:a9:23:a3:91:dd:c0:87:70:7a:84:27:cf:4d:02:be:9d:97:
a9:3b:13:ee:c7:69:da:5b:01:02:9c:d3:f0:94:84:03:de:4b:
39:88:9f:ec:5c:2a:13:4c:3f:c6:b7:f0:4e:0f:e5:2c:6f:9a:
d4:ae:cc:8a:65:0f:5c:e1:4b:cf:04:ee:7e:c6:34:c9:f7:a5:
20:9f:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:18 2026 by rpki-client