Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: OEFxSIMvSpdNJnT5hDlvA6ChQIi8EVkPB7KNak/RABE=
Subject key identifier: 30:62:77:DF:F9:C8:F0:58:D8:73:7A:E6:0D:76:E5:D1:0C:2A:EC:21
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019FABD0CC1856C5679F732AF84299479F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 03:00:15 +0000
Manifest this update: Wed 29 Jul 2026 03:00:15 +0000
Manifest next update: Thu 30 Jul 2026 03:00:15 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: zKeSn8sxzDMCsEYH9FDRFA6QVwXvPYe6+jwMDtOimio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:cc:18:56:c5:67:9f:73:2a:f8:42:99:47:9f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jul 29 03:00:15 2026 GMT
Not After : Jul 30 03:00:15 2026 GMT
Subject: CN=306277dff9c8f058d8737ae60d76e5d10c2aec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:87:3e:9f:22:e7:59:76:47:b4:97:d8:01:
da:a2:fc:92:a1:36:09:8f:05:81:8e:0d:63:bc:19:
60:59:af:f5:96:c2:e2:2c:ff:fe:f0:c3:1e:85:6c:
7f:24:c6:ef:4c:64:12:cd:47:60:16:e6:37:91:4a:
b5:d7:59:bd:e3:c8:42:78:4a:81:63:9f:24:29:b4:
e3:da:e9:9a:e7:dd:63:7b:8b:d0:01:ea:b1:fb:41:
5e:cb:db:0a:65:92:1d:c5:b7:0a:c8:03:28:24:03:
b3:4a:6e:d6:b1:a1:5e:f8:1f:83:76:e2:7f:0b:ab:
1c:9b:87:55:af:b1:21:f5:e7:97:03:26:4b:9e:6e:
db:6b:ea:38:81:8d:4e:b3:30:bb:fd:28:c3:c8:a2:
48:dd:27:be:bc:e9:38:07:b2:af:fa:95:03:45:83:
20:99:d6:af:58:05:c9:3e:4d:e4:5f:2f:76:fe:63:
16:61:67:42:29:38:db:47:5a:33:6f:ed:13:b3:f6:
f7:28:22:b2:15:e5:41:6a:b6:57:c7:bd:b0:55:eb:
37:3b:2b:b3:86:18:f1:64:f1:47:d4:00:97:f8:56:
1e:d5:57:79:91:5b:13:30:b8:2d:35:f4:83:a0:79:
47:43:cb:c3:06:5e:38:b6:b9:e1:42:80:2b:af:ff:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:77:DF:F9:C8:F0:58:D8:73:7A:E6:0D:76:E5:D1:0C:2A:EC:21
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6d:98:ae:0e:ca:ec:fb:40:5a:59:10:51:c6:b7:65:d0:77:
94:e5:dd:ca:2a:ec:29:b9:b1:1b:8a:72:f1:f5:89:b4:73:85:
12:5a:be:88:92:0e:15:e1:18:fd:5c:af:f6:78:b9:64:08:b0:
2c:d3:c6:7e:01:58:b7:f0:b8:be:ac:fc:e2:e9:17:6a:4f:4c:
1a:6c:78:61:2c:7c:ba:94:56:3d:25:c4:e2:f6:fa:b0:e5:69:
1f:fe:5c:0c:e7:a5:b1:32:66:d3:88:b7:e5:d2:98:61:64:31:
7b:4a:26:fe:29:8d:ec:61:4d:77:c8:d3:76:09:ac:69:20:62:
ac:83:48:08:d9:ed:81:f3:2b:9a:6d:b8:d0:f1:c4:77:d5:7e:
c7:6a:85:a2:e1:3b:95:3b:49:b0:78:4c:4e:9d:35:59:21:c4:
d7:96:77:56:70:2f:8e:d4:df:54:df:67:0c:58:19:04:80:e5:
a6:9c:de:28:4b:b9:8d:31:d0:33:43:93:1b:c0:7c:70:19:b4:
e9:bb:3c:67:16:bd:92:e0:fc:59:47:ce:b2:98:f6:45:cd:06:
2a:d8:e7:ad:77:d5:06:17:9f:f0:db:06:54:eb:20:b2:7c:b1:
64:3c:ca:13:18:8d:5b:6f:c3:fc:73:11:82:3e:12:1b:f6:89:
b8:34:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:20 2026 by rpki-client