Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
File: kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft (raw, json)
Hash identifier: 6ov3VNI5L5aAFKsXae93JGKqnsd8nubJ6LSci0LhJaE=
Subject key identifier: D6:A6:E7:BC:F3:90:42:42:24:D8:66:F6:EC:58:78:0E:1B:C6:B0:17
Authority key identifier: 91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
Certificate issuer: /CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Certificate serial: 019FAC770471CA28669F208F75B8F5736F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:48 +0000
Manifest this update: Wed 29 Jul 2026 06:01:48 +0000
Manifest next update: Thu 30 Jul 2026 06:01:48 +0000
Files and hashes: 1: dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa (hash: Df8yIA2woKIcIr/lHUrWEZ4NVPdZqkSz50++AQwCXPk=)
2: kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl (hash: UCbwoTF81iphaVAlEfTvhFC9J/ySmAlYZ5J0gCiwIW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:04:71:ca:28:66:9f:20:8f:75:b8:f5:73:6f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Validity
Not Before: Jul 29 06:01:48 2026 GMT
Not After : Jul 30 06:01:48 2026 GMT
Subject: CN=d6a6e7bcf390424224d866f6ec58780e1bc6b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:07:13:c1:c2:a5:27:eb:ea:84:3f:1b:0a:
81:84:a1:13:0a:35:7c:1c:32:19:65:ae:f9:5e:64:
6e:b6:29:67:d7:16:76:c8:ea:03:23:32:ac:83:ea:
07:2d:c3:03:33:39:9a:09:1c:76:fe:f8:d0:0f:96:
76:e0:0f:be:a0:a5:0c:9d:55:65:80:32:63:5f:c5:
67:5e:5a:94:d5:86:9f:cc:6a:fc:59:94:9c:53:d5:
e7:f2:53:70:1f:bb:b2:90:ae:17:0d:70:85:a0:25:
60:e1:ca:b5:87:d7:c6:66:e7:be:dc:3d:7d:73:84:
43:3c:fd:b3:01:96:15:5a:9a:e8:67:b9:22:53:2e:
42:db:32:ef:15:04:40:48:ef:75:2a:4d:88:96:5f:
e2:e2:ce:45:fe:3b:f6:76:de:be:ff:09:2e:4a:c3:
75:b3:c9:70:35:43:00:0a:ec:f4:67:ce:aa:9f:0b:
85:90:a8:70:b3:cd:6f:db:f9:90:fd:63:8e:6e:4b:
cc:f7:38:de:38:a2:ab:4c:24:c4:60:57:18:35:df:
77:ef:b9:ad:87:58:48:a7:91:9d:bd:be:79:28:60:
95:4f:4e:9e:e8:bc:62:e1:db:9d:7b:95:67:57:89:
87:58:da:7f:0b:bf:01:f6:ac:99:ba:fd:ec:1d:e3:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:E7:BC:F3:90:42:42:24:D8:66:F6:EC:58:78:0E:1B:C6:B0:17
X509v3 Authority Key Identifier:
keyid:91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:dd:59:4b:5b:f9:a0:9e:53:3b:d2:9a:26:a6:95:2e:89:
23:8b:fc:48:1c:92:3a:a0:a2:db:af:38:35:bb:4a:cc:e2:40:
8b:76:4e:b7:fe:44:d3:11:2c:0e:ea:5a:9a:6f:5f:0f:1f:98:
bf:49:b8:a3:dd:b3:40:d4:ee:24:34:cb:c3:f0:07:9c:1f:e3:
6e:93:ca:c4:c0:05:f5:be:f8:52:ce:5d:03:c8:a6:4f:22:e4:
b2:76:1c:2f:2d:3c:03:a4:01:f3:e8:da:82:35:89:45:7f:35:
9f:82:94:99:00:6b:82:53:03:bf:e6:a9:fd:b5:fe:a4:3d:37:
ac:62:7a:63:08:89:ef:ee:01:19:d6:7f:4f:83:bd:3b:36:8e:
f2:08:df:1c:db:df:04:ee:7a:48:85:26:7c:a0:75:94:f4:0f:
52:ff:be:5a:ef:8f:e7:a3:5d:c5:a6:e8:b3:a2:be:d3:3e:30:
86:68:25:51:fc:95:b4:d9:89:c2:ad:83:16:68:de:6e:68:df:
e6:df:88:7d:48:6b:bd:22:66:0f:d0:8b:95:3a:e6:82:4c:93:
9e:30:ea:01:25:04:a9:8d:b1:a2:76:80:23:c1:7b:2d:d7:e3:
a4:c2:18:d8:bc:f4:41:4e:6e:dd:4d:a4:90:21:51:02:e3:a7:
9e:f4:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:08 2026 by rpki-client