Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: m9NprehtiDZSzU1nnrr9euvc1WwdSszQlZIZ3lFfqyQ=
Subject key identifier: B5:D7:C8:AC:90:D1:1D:62:BF:88:30:40:3E:CB:CA:3D:56:EF:77:BB
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019FABD1248085BD4DC762047FE8119AC87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 03:00:38 +0000
Manifest this update: Wed 29 Jul 2026 03:00:38 +0000
Manifest next update: Thu 30 Jul 2026 03:00:38 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: si2XvysXoi4m5q4Qc7QlinEL3WbgZzYWLzlKDO+Rk88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:24:80:85:bd:4d:c7:62:04:7f:e8:11:9a:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jul 29 03:00:38 2026 GMT
Not After : Jul 30 03:00:38 2026 GMT
Subject: CN=b5d7c8ac90d11d62bf8830403ecbca3d56ef77bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:de:7b:fb:d2:8b:72:d0:a7:19:92:eb:e2:
92:f7:41:32:54:c7:43:1a:f4:e2:89:1e:56:50:b1:
d7:f7:92:62:76:23:b8:cf:de:6e:af:57:7d:76:e2:
79:40:4c:45:95:7a:0f:f5:a0:6d:7f:b1:13:9e:c3:
3a:23:88:aa:95:c9:40:90:35:d8:da:8d:12:c6:2b:
4e:b6:6b:d8:5e:26:08:06:2b:5a:70:0e:8b:74:4d:
0c:cd:4f:23:3a:a2:f9:9c:de:9b:6d:f9:61:67:bc:
f0:a1:89:2c:cb:ab:72:79:c6:54:58:dc:31:3f:31:
6e:7b:cb:0e:d9:1b:ff:e4:41:bb:6d:b3:19:dc:49:
ef:c5:b8:74:fd:42:69:28:a7:6d:d3:d6:e3:e8:b7:
04:89:80:34:fd:ad:e1:bc:83:e8:b6:db:ad:b4:67:
af:69:6d:70:b7:f0:ba:72:aa:d5:7e:03:db:9b:9e:
22:50:8d:f1:bc:97:10:6f:73:0f:43:19:78:4d:a0:
be:4d:3b:d0:fd:0c:43:b0:a5:b2:d7:44:3c:50:8a:
f7:30:f2:71:df:7f:a4:2b:bf:85:76:2e:10:6e:5f:
d2:1f:57:b3:5d:fd:9b:a6:e9:f8:dc:6a:ca:80:73:
6b:13:3b:e3:da:f7:97:ca:87:ce:0d:4c:f0:51:8d:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D7:C8:AC:90:D1:1D:62:BF:88:30:40:3E:CB:CA:3D:56:EF:77:BB
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:96:fe:b3:4a:d7:00:7c:fc:24:0e:0d:f4:c6:4a:2b:d4:7b:
ea:ad:68:85:b8:0b:eb:eb:88:00:16:16:09:2c:88:13:57:3d:
90:8b:60:a6:8b:df:a7:91:75:05:e8:13:c1:9e:e1:e9:06:ed:
7b:43:b8:70:de:00:07:b5:c3:6e:45:b9:04:db:e7:a0:d8:0b:
27:bf:d0:79:2e:ba:cb:68:8f:26:ae:c8:6c:41:b8:3e:e6:53:
ac:5b:56:8e:b7:5c:29:eb:27:08:ae:2a:87:fc:b2:56:95:80:
ee:7e:08:ee:12:df:5f:0d:df:22:f7:d5:c3:19:9c:c0:5b:7c:
65:59:d3:93:98:57:0c:53:67:55:75:65:2f:77:29:92:da:3c:
1c:3a:57:db:af:ad:9d:34:94:ea:ac:4c:83:66:54:ec:17:78:
cf:b2:02:8a:6c:8e:2e:2d:4c:8b:2a:9d:7a:01:15:38:c8:cc:
09:17:d8:86:c0:94:a8:7d:f1:18:16:de:94:16:ef:ae:72:da:
69:4d:bd:55:39:4a:d7:6e:70:4d:74:24:ad:cd:54:08:60:13:
3f:46:98:64:60:35:08:cd:b4:f5:0d:50:b3:7a:5c:f4:06:5c:
2e:41:2b:1f:c6:d2:e8:06:03:22:83:99:71:4c:90:bc:7b:19:
67:23:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:47:03 2026 by rpki-client