Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: XxbTOvmn98rRoOLLyIS42FDnQoVg546uZ4kBaGdGNco=
Subject key identifier: A9:61:9E:93:37:F7:68:FF:1A:3F:B0:17:E4:6A:96:16:CE:1C:43:86
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019FAD1A9BF690E788F5E6951A3F6BA7D4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 09:00:29 +0000
Manifest this update: Wed 29 Jul 2026 09:00:29 +0000
Manifest next update: Thu 30 Jul 2026 09:00:29 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: Ate+KtBt3pY3QEpF1wO2Xwc6uHWSe0SH4/s5csq6JGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:9b:f6:90:e7:88:f5:e6:95:1a:3f:6b:a7:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jul 29 09:00:29 2026 GMT
Not After : Jul 30 09:00:29 2026 GMT
Subject: CN=a9619e9337f768ff1a3fb017e46a9616ce1c4386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:77:ea:7b:e1:e2:e2:91:4f:9f:e3:27:81:
fc:b6:fe:12:51:78:c3:49:30:41:ef:ea:de:db:6e:
e3:98:df:bb:13:e2:41:91:d7:f6:da:32:b4:7c:91:
cd:b8:89:58:49:94:92:92:69:0e:a4:38:01:6b:8f:
9d:4f:4d:bd:25:83:d7:0a:56:8e:60:48:96:9e:7a:
38:9f:15:5a:a4:ac:81:2d:e3:2e:50:b7:f8:53:e8:
ba:20:ad:f8:79:01:50:51:5a:b8:81:4d:be:84:04:
cb:d7:25:7f:69:5f:3f:63:53:a6:42:a9:22:d3:c0:
0f:5f:d9:72:0e:10:04:3c:3c:2c:db:32:46:b6:27:
2b:a6:8b:c9:3b:03:39:42:44:c7:fe:aa:36:2b:6b:
fa:91:fa:1e:98:ea:e2:cb:44:9c:7e:09:20:c1:f1:
9c:13:9b:3d:4a:d6:3d:9f:63:cf:db:47:ab:5b:5d:
da:79:57:12:b3:e3:ac:f6:7a:5f:08:b7:32:d6:f8:
e6:49:43:14:7f:e1:f5:a2:af:4f:52:a0:3e:f1:1e:
77:c4:1a:9e:7a:ec:9d:c9:a6:26:30:b3:25:2e:50:
07:bb:6a:d7:57:fe:e8:ea:24:fc:04:8a:57:51:ac:
4c:4c:9b:71:5f:21:3f:45:c6:16:31:66:17:02:1a:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:9E:93:37:F7:68:FF:1A:3F:B0:17:E4:6A:96:16:CE:1C:43:86
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5a:b9:4c:be:af:42:0b:a9:78:cf:53:64:3a:dc:48:21:df:
f5:14:01:2c:56:60:fa:77:f3:07:32:a7:88:91:e9:03:6d:e7:
59:dc:cb:5b:8f:c7:0e:36:4d:b6:43:d4:d0:5c:3f:43:ae:d2:
34:7b:f3:d0:30:35:57:86:67:89:f6:2f:2e:3b:50:98:a4:e7:
2c:14:c4:28:fe:2a:b3:9c:3b:24:af:47:f5:4e:68:30:de:47:
04:81:fd:90:1d:1c:80:49:11:9d:d1:7a:5d:48:7f:65:7e:51:
fc:43:cb:1c:52:03:0c:9c:da:c9:61:6e:44:2b:b1:02:65:59:
6d:76:2d:4b:cf:bd:96:ee:dc:45:13:aa:cc:63:9a:13:c4:07:
74:73:83:23:1b:f5:ab:93:2c:25:ad:b8:a2:6d:0e:ca:2f:97:
fc:19:61:64:9c:7d:da:a0:f2:15:d0:e4:db:9d:30:2e:bc:3d:
81:c7:dc:00:16:4b:2d:c9:85:ae:0a:03:67:8f:b9:17:95:63:
21:a6:84:02:e3:2b:46:ef:ff:de:7d:68:8a:74:2a:78:bb:60:
51:d1:5a:38:02:5f:15:5b:ad:03:3c:16:12:59:0d:5a:1c:38:
04:df:da:fb:69:5a:6d:ea:12:fb:9b:a2:dc:35:86:14:18:5b:
ea:45:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:21 2026 by rpki-client