Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: 2aAuaM5M5Bvb/uNkudKL2vekXhW7qRpHGMduwW44a6I=
Subject key identifier: 2F:6E:39:19:31:51:8C:E8:08:EB:CD:13:EA:78:8A:4C:1B:FD:7A:90
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019FAB9A3AA8CD9B9B3604EE3449F933F75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 1225
Signing time: Wed 29 Jul 2026 02:00:39 +0000
Manifest this update: Wed 29 Jul 2026 02:00:39 +0000
Manifest next update: Thu 30 Jul 2026 02:00:39 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: P43kQuTzG/rkHipfy5dVJYdQMS2pHkVCMfRJ8ELMk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:3a:a8:cd:9b:9b:36:04:ee:34:49:f9:33:f7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jul 29 02:00:39 2026 GMT
Not After : Jul 30 02:00:39 2026 GMT
Subject: CN=2f6e391931518ce808ebcd13ea788a4c1bfd7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:37:14:ce:83:4c:ba:b5:f5:b6:ef:48:4b:
e7:01:70:03:cd:c3:91:28:f1:7d:fa:e4:2f:1c:b6:
2d:03:80:84:ab:2c:fc:50:a1:b2:73:8d:eb:91:cc:
76:87:ae:94:2d:09:f2:d3:65:c0:a0:24:15:bb:23:
4d:db:43:48:72:87:b5:73:83:e7:67:61:e8:89:04:
33:cc:11:d6:65:0c:28:cf:43:44:3b:e2:a9:77:16:
f5:96:44:2c:41:38:c4:2d:c6:4b:c5:5d:b7:e0:a9:
00:ee:fe:df:2f:0b:1b:4e:29:c5:f4:27:2b:1d:3a:
1e:48:51:7a:6c:ad:8a:90:8b:6d:9f:69:d4:20:b1:
c5:b1:c1:3b:b8:92:66:7d:a7:3d:16:c8:6c:d1:12:
50:f9:b3:8b:39:04:de:5c:cd:bc:43:22:ba:ff:e7:
69:79:9c:00:f7:0d:68:59:c3:9d:7a:03:64:6a:7d:
1e:e6:46:d8:c4:32:46:3d:4c:67:4e:c4:10:11:3a:
c7:6e:79:0a:a5:de:76:c6:20:ef:1a:2b:c3:0f:2d:
78:13:32:ab:64:0d:f1:23:a0:0a:81:a8:93:48:16:
ca:ad:80:19:b9:8a:eb:d4:da:b2:53:3b:c5:32:d9:
4b:8c:f9:a7:29:5f:9a:3e:5c:db:da:8d:79:20:d2:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:39:19:31:51:8C:E8:08:EB:CD:13:EA:78:8A:4C:1B:FD:7A:90
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:10:68:c4:18:95:1e:6b:b3:77:94:66:38:66:60:2f:98:9a:
b4:b1:a3:11:c1:8b:b2:72:10:21:28:0d:87:ed:b3:6b:7f:f2:
a4:17:86:9c:a2:e2:01:12:7e:55:2e:7e:06:5c:ff:18:7b:fd:
26:23:87:eb:6a:8e:6a:b1:58:d2:35:61:d3:45:c8:a6:38:36:
30:9d:f1:a0:e0:d2:f6:fc:cf:5c:44:c7:fa:94:b7:a1:11:b0:
66:5f:7f:ec:d0:24:32:09:78:98:6e:9a:cd:bc:f5:03:b5:a5:
44:6d:b0:75:2e:4a:4a:b1:29:8b:60:48:d0:f0:9c:4b:a5:78:
97:bd:1a:10:84:cb:e6:97:83:90:32:70:78:5c:5f:59:1c:7d:
7d:9c:0d:bb:c7:70:b5:3f:85:62:d2:7e:68:0a:1c:38:bc:1b:
06:8b:97:b0:89:01:b8:9e:c8:b6:3e:c3:fe:fb:36:c1:dc:0b:
52:dc:b7:e6:70:b0:d8:b8:12:f5:19:4d:1e:5c:5f:27:86:ef:
81:32:1f:7d:92:da:8c:03:ca:07:5a:01:65:cc:09:d9:a5:09:
35:65:9a:14:e7:1b:3c:fd:b3:d6:c2:71:84:ec:57:75:7b:a7:
47:82:7a:6d:d7:63:de:2d:23:ac:9a:ce:56:60:bc:c4:9e:f6:
39:49:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:13 2026 by rpki-client