Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
File: kcvU3ulACZF4SiL7T0Kypy5eMPI.mft (raw, json)
Hash identifier: YjWORTB0+wpXzJCykIl6KmYMzL7ye/9iexTucZ4lTEw=
Subject key identifier: AE:F0:79:61:F6:EC:4F:3F:75:7C:83:D4:34:E8:A8:0B:44:FA:4F:9B
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 019FA898EA4C77416FCF8B1B5E0FDE69725B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:21 +0000
Manifest this update: Tue 28 Jul 2026 12:00:21 +0000
Manifest next update: Wed 29 Jul 2026 12:00:21 +0000
Files and hashes: 1: dfMJsRYPaWYegojrV6JhI297OJk.roa (hash: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=)
2: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (hash: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=)
3: kcvU3ulACZF4SiL7T0Kypy5eMPI.crl (hash: EcgR4fTFCTON//AdMhN5TG3dp8irD+OEY37PSkY2Cws=)
4: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (hash: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:ea:4c:77:41:6f:cf:8b:1b:5e:0f:de:69:72:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Jul 28 12:00:21 2026 GMT
Not After : Jul 29 12:00:21 2026 GMT
Subject: CN=aef07961f6ec4f3f757c83d434e8a80b44fa4f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:d7:02:e0:a4:df:2b:2c:5b:96:a7:b7:4e:
4f:50:95:76:5b:ae:fa:bf:9c:37:98:44:69:45:11:
0a:7a:8d:90:62:d7:95:cf:31:e8:24:75:0c:d8:a2:
63:9b:3e:dc:f0:fd:98:48:c7:ec:23:19:1c:0d:d9:
7a:2f:1d:d9:53:f3:97:39:78:e0:96:4f:00:a1:4f:
4f:c2:ed:67:fe:5f:de:57:d7:50:78:32:55:c5:83:
fd:9e:f1:46:d7:01:d1:64:2b:3d:4e:70:60:bb:1b:
af:f5:d8:76:23:25:f4:d3:8c:f1:0f:7c:b1:18:69:
a2:8a:58:a6:8f:ba:61:5b:a4:b8:c3:bb:f9:e6:74:
ba:9c:ed:9a:1f:9d:1a:f2:20:b2:39:b2:42:fc:24:
48:ab:37:8a:05:9c:36:c8:25:c6:77:de:c0:95:fb:
21:49:04:9a:4d:1d:73:6d:e2:1b:53:15:a8:72:73:
6a:28:e8:6c:8d:1b:b1:1f:55:26:ae:ac:4e:4f:76:
7c:81:7b:8f:e9:d6:ca:33:30:a4:76:5a:ac:12:81:
d3:10:69:85:fb:bd:3b:1b:7c:e9:0e:25:e5:5b:9e:
4f:13:47:0f:89:4f:4b:2a:03:b9:bc:9c:45:cd:b0:
c6:ee:e3:b1:cd:a5:1a:1a:2f:5b:5c:bc:a1:19:b9:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:79:61:F6:EC:4F:3F:75:7C:83:D4:34:E8:A8:0B:44:FA:4F:9B
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:0c:3d:77:96:3e:73:5b:d8:0e:28:b1:fa:c5:2f:00:98:
2f:c4:84:56:74:1d:6a:95:6e:43:ab:c7:87:c2:d2:72:ff:ad:
ff:88:e5:ae:bf:be:0d:8f:ec:4a:01:04:15:1b:2f:e5:48:f1:
7d:42:a1:23:32:8f:8b:d7:98:dc:1f:d8:97:7e:f7:75:45:4d:
bc:16:83:96:fb:37:f4:d6:59:47:cc:37:c4:d4:84:e8:f7:40:
7f:5d:e9:51:d7:91:b2:54:10:6c:73:d6:83:39:f2:9a:56:a6:
06:68:5f:b7:8f:b1:a1:59:8d:d9:2a:81:36:07:a2:e2:46:6b:
37:c0:b5:43:62:bb:f7:68:11:47:94:d8:ba:57:b6:1d:b5:64:
9d:5b:9b:f2:d6:68:c9:c6:c8:84:66:3b:94:8f:d4:2c:f4:22:
53:e3:b6:15:78:f0:4f:1c:8e:a6:81:5b:bc:db:e2:ab:e5:1c:
f3:19:44:51:2f:bd:74:e3:c7:97:d5:93:e5:c8:cf:69:6b:13:
ee:50:11:b9:38:8f:65:05:6a:b1:fb:b4:aa:19:f3:3b:2c:84:
57:4a:26:37:04:f5:b7:4a:4a:28:f9:79:43:4e:5e:2b:37:53:
c6:0a:18:41:32:05:61:ac:ed:2c:68:44:f1:f1:30:86:d8:9f:
ed:b1:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:36 2026 by rpki-client