Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
File: kN2X5P39zztPGp92Hs2Fs2hifow.mft (raw, json)
Hash identifier: fkBarA91kmpgdHImLMLRKRaKxwhWayqXXv+7bsejxa4=
Subject key identifier: 2C:BD:0E:0B:4F:65:4B:C0:90:2C:8D:7E:DB:F1:69:3E:33:E1:55:6A
Authority key identifier: 90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
Certificate issuer: /CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Certificate serial: 019FAC75AB95E2440325BA2D683FDDAAB6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:20 +0000
Manifest this update: Wed 29 Jul 2026 06:00:20 +0000
Manifest next update: Thu 30 Jul 2026 06:00:20 +0000
Files and hashes: 1: ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa (hash: lqjZMySa9xhu39DtKLF68f4mxjxAFpfXuyRlMIxaWIo=)
2: kN2X5P39zztPGp92Hs2Fs2hifow.crl (hash: 1Ca3OqTzoOofa4gFVqwlYgOusQ+LrScw/Jirolhd0g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ab:95:e2:44:03:25:ba:2d:68:3f:dd:aa:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Validity
Not Before: Jul 29 06:00:20 2026 GMT
Not After : Jul 30 06:00:20 2026 GMT
Subject: CN=2cbd0e0b4f654bc0902c8d7edbf1693e33e1556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:96:5b:45:98:cf:d7:34:59:03:80:03:54:
db:95:97:82:5e:1c:2e:51:45:f9:54:a2:e3:bf:f9:
d9:08:f9:1a:7b:2b:db:77:a1:db:94:94:58:84:47:
98:73:a0:49:9a:12:ab:0b:86:8b:a6:05:dd:34:51:
fa:48:cb:6e:e7:5c:b6:9c:68:c4:5a:58:aa:35:25:
4d:ca:34:ba:91:c5:22:eb:c0:af:3b:01:61:51:26:
87:24:42:ab:33:1f:d9:fa:4e:56:26:a5:27:0d:69:
9b:91:be:85:09:fa:79:9e:6d:1d:bc:76:9e:96:04:
de:37:f0:9a:9a:f7:0b:4d:54:1a:5a:60:ab:32:6c:
bc:02:8d:dc:fb:39:2a:d7:29:04:e3:87:97:e6:e4:
f6:bf:9c:b4:89:4a:f6:ce:62:be:81:63:40:e0:e2:
a5:42:0a:d3:a2:1e:7f:e2:12:98:21:31:e3:da:e8:
fd:50:52:da:1e:a2:14:67:26:7a:b2:8e:1a:f6:8c:
54:f9:cf:df:b1:26:6d:0e:47:81:4e:06:21:08:d1:
a1:cd:f2:1d:6f:47:90:27:25:42:aa:63:9b:fe:90:
0d:ca:cf:ef:10:70:4c:48:82:cc:07:e5:30:eb:ab:
95:70:57:a2:23:ae:e9:f2:d9:fe:cd:43:6c:5d:79:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:0E:0B:4F:65:4B:C0:90:2C:8D:7E:DB:F1:69:3E:33:E1:55:6A
X509v3 Authority Key Identifier:
keyid:90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:07:8c:a6:d0:5a:a9:a8:76:ee:01:5d:21:62:3a:82:19:
f9:fe:e8:fa:96:d3:97:05:34:d1:c3:1a:1c:17:c1:38:71:be:
65:54:b6:d8:f2:c9:6e:fa:f7:cc:ca:ad:b5:54:af:03:60:4f:
bf:0b:db:dc:b7:10:5c:df:61:37:41:3c:e5:ba:c4:43:bc:70:
fb:58:a3:92:40:cf:8b:bf:4b:2e:80:47:4e:de:1e:f6:a6:d6:
ba:f0:b0:43:7d:d3:10:40:a6:d7:70:5d:48:eb:b3:05:00:1c:
44:e5:c7:f7:f7:f6:ba:23:f7:05:0d:e7:07:ff:7c:b6:1a:59:
78:a9:2b:8b:fa:82:96:46:ee:9c:e1:84:e9:fd:3e:ae:d4:85:
dc:79:bb:17:57:0c:9e:75:8a:de:64:73:93:2d:de:d0:7e:e8:
58:0f:2b:58:57:36:44:32:13:5c:48:5c:ba:3d:97:eb:b2:88:
d8:ac:4c:03:0c:cd:cd:2f:97:24:b5:5d:6b:f9:8d:bd:ee:7d:
4a:26:5b:31:10:ed:a2:be:a1:88:d9:56:d0:07:9b:94:b8:91:
50:7b:94:6f:41:5a:1c:c1:61:19:1b:a8:59:6e:c7:8c:48:b5:
cb:e2:c9:3e:79:80:49:3e:26:e9:e9:db:5c:62:a8:b9:84:8a:
39:4c:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:16 2026 by rpki-client