Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: d4zkI6yWRGrYfWJ6b95qG6wgRI6Z/nr9npeYP62IZU0=
Subject key identifier: D6:3C:3B:F5:8D:CB:0E:9D:32:59:DC:EC:5D:6C:0A:62:D8:0E:88:9B
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019FA9E2795A58107CE097D845310AEC2F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 18:00:19 +0000
Manifest this update: Tue 28 Jul 2026 18:00:19 +0000
Manifest next update: Wed 29 Jul 2026 18:00:19 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: jhlfFu1iySzfYVH9xE+v1RY+sCKaTeVHYUnC7L46c/I=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:79:5a:58:10:7c:e0:97:d8:45:31:0a:ec:2f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jul 28 18:00:19 2026 GMT
Not After : Jul 29 18:00:19 2026 GMT
Subject: CN=d63c3bf58dcb0e9d3259dcec5d6c0a62d80e889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:f3:7c:61:92:90:65:d4:df:b5:f3:e8:44:
69:8e:bc:82:e9:b9:52:1c:55:38:16:22:56:2a:8c:
24:5f:a9:c0:29:13:cb:23:ab:10:a9:69:f0:39:95:
6c:19:f9:ed:94:ad:94:d5:2f:16:72:62:d5:09:20:
99:c3:4d:a3:bf:fa:cd:48:48:e8:95:eb:30:fe:ca:
60:e3:13:44:b4:d6:ca:f3:36:d3:65:6b:e7:38:1c:
7a:af:86:0b:7e:5b:04:4c:4f:3e:61:0a:f4:82:a7:
c6:c6:92:e3:9d:1d:07:bd:32:f4:ef:2a:e3:73:dd:
2b:fc:30:0e:52:85:53:a1:29:38:74:63:bc:2c:d7:
50:08:4a:5b:b0:49:47:95:ad:ec:84:dd:4c:5d:3e:
5f:e0:b1:73:11:2c:e3:7e:72:3c:43:5d:1b:03:93:
80:50:2a:bd:c3:17:d2:0a:05:96:ab:a6:6d:e4:a4:
8c:f9:cc:a4:db:30:f6:7a:b3:cb:eb:36:c5:06:99:
09:ba:46:93:df:fe:61:5b:02:e2:f6:74:fd:0f:61:
67:35:d3:d4:f6:87:c0:c5:84:86:13:62:eb:47:19:
e3:98:22:1b:07:27:af:8e:f9:42:b4:c6:e4:2e:45:
5d:6d:12:e3:3e:5e:c7:9f:7d:bb:38:3c:be:67:08:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:3B:F5:8D:CB:0E:9D:32:59:DC:EC:5D:6C:0A:62:D8:0E:88:9B
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:ba:05:71:b8:25:ab:3d:bb:0a:4a:e5:08:39:f2:ba:4e:
eb:99:9d:c5:b8:48:0c:61:ed:9e:fd:ff:e1:bf:10:83:da:be:
b5:4c:c3:da:10:47:f2:26:bf:43:0f:89:0f:ea:a5:47:6f:d8:
f2:bd:27:0f:64:47:79:8f:dd:c5:82:85:00:00:2c:4f:84:4a:
51:ec:60:42:7b:4d:bc:eb:5d:4d:2c:8f:85:db:7d:52:c1:40:
28:c5:f5:a9:ad:09:a9:0a:89:f0:c6:5e:dd:62:cc:4c:59:02:
5e:51:32:dd:3c:0b:53:b2:2b:de:ab:78:31:db:4d:b7:a7:c7:
bd:88:b0:e4:3f:fd:9b:3b:fe:c9:60:7d:66:f6:52:cb:d9:63:
74:a8:f3:55:e6:81:ce:10:36:27:67:62:54:bb:eb:41:d4:6c:
1a:3d:e9:3c:2b:50:53:53:57:9d:dc:ca:3b:ff:5a:df:4c:36:
da:d1:f4:33:35:da:60:27:18:9f:44:08:cd:82:53:14:e1:99:
f0:0e:08:2e:59:96:2f:13:d1:48:68:ca:99:45:a8:2d:b7:55:
51:62:fd:a8:e1:d2:53:fd:9b:75:c5:32:87:c5:07:12:a5:2c:
89:32:a8:e8:9a:d4:58:c2:2e:c9:b5:e0:3b:1d:8c:cb:07:a6:
1c:cf:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:14 2026 by rpki-client