Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: jDkLPX9UJV71BimBaipj78z93vVS/k95W6cHzgu+aRE=
Subject key identifier: 1C:D7:1F:8D:1E:B3:33:35:80:41:CC:0E:C3:7B:DD:83:FF:60:13:06
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 019FA974A127168AFA626DBD48ECC0BFF8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0EF5
Signing time: Tue 28 Jul 2026 16:00:20 +0000
Manifest this update: Tue 28 Jul 2026 16:00:20 +0000
Manifest next update: Wed 29 Jul 2026 16:00:20 +0000
Files and hashes: 1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: XFKnLaSNRk4w68Sks2zoI7quvgWFezKnQjCPvqsDKNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a1:27:16:8a:fa:62:6d:bd:48:ec:c0:bf:f8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jul 28 16:00:20 2026 GMT
Not After : Jul 29 16:00:20 2026 GMT
Subject: CN=1cd71f8d1eb333358041cc0ec37bdd83ff601306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:86:af:53:82:e6:4b:58:3c:c0:fa:96:be:
c4:63:13:37:2a:be:fe:58:be:6d:5f:4e:85:b3:0c:
2d:13:92:c1:f7:ff:ec:35:48:2e:be:3b:d8:62:bc:
bf:1a:0c:c1:7c:cd:2a:d6:3b:84:ed:e8:d2:3e:21:
9d:69:a9:b6:18:50:59:39:28:4c:73:cb:47:a5:4a:
c6:5c:14:3f:7c:99:15:65:c0:82:c1:0b:ae:e1:a2:
f2:1a:c5:12:64:bc:f8:a7:f1:0c:2b:d9:8a:ff:ac:
ea:8d:99:16:e9:c5:74:af:0a:4b:c7:7a:0c:fe:65:
b5:53:79:df:e0:3c:ee:06:f9:ac:6a:84:3c:17:24:
f2:00:62:9f:06:3a:82:7d:cc:f9:62:aa:6d:6a:a9:
ba:dd:b9:25:8c:47:27:2f:ef:93:06:fc:62:ba:f2:
fe:65:93:b1:e4:6a:07:8e:d9:bb:3f:1a:0e:36:3a:
7b:d9:32:bf:f6:de:87:55:7f:dd:63:14:01:f0:ff:
96:9d:67:b1:e8:72:71:d2:96:e6:5a:07:b7:31:a1:
c7:b7:bc:e3:17:f4:c7:c8:2f:89:9a:81:d9:eb:3a:
ad:9a:95:23:32:e8:12:9f:b4:3e:4d:45:01:78:b1:
e7:dd:d1:e4:df:25:08:5b:18:84:f5:7a:cc:be:7f:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:1F:8D:1E:B3:33:35:80:41:CC:0E:C3:7B:DD:83:FF:60:13:06
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9a:14:51:8c:13:e7:2d:ad:19:ae:40:b6:20:51:d8:c1:50:
e3:cf:80:0f:ba:0e:9f:30:5a:83:3e:fc:e0:bc:33:0d:64:70:
e7:01:84:09:a3:e6:f4:70:49:9b:a0:ac:2b:cd:a3:0c:8b:fe:
a3:0c:c4:25:81:12:29:3b:60:13:0d:dd:df:f9:72:f0:fb:fc:
8d:b8:ab:94:c1:60:e2:19:3e:08:fd:63:c9:da:d0:c3:eb:68:
67:59:b7:12:9d:40:0b:26:27:8f:48:26:62:26:2b:bc:a5:a6:
8f:5e:d4:b1:8d:5d:e1:58:f8:b3:3f:14:22:72:5e:ae:a4:91:
26:14:e7:e3:ef:79:f9:a6:40:da:aa:52:2d:0a:61:8d:68:36:
cb:ab:f1:fc:b1:26:6a:1b:6b:69:eb:2c:31:47:bb:d0:7b:e7:
cf:66:cf:a7:26:bb:83:b7:6d:47:39:7a:f7:4d:15:7a:49:56:
5c:3d:1f:50:25:f0:88:6c:f6:bd:64:08:9b:d6:59:ad:b0:cf:
fd:3d:12:e3:17:e5:fe:54:51:80:f7:3b:49:b0:0c:b9:2e:cb:
4c:4c:06:a5:bb:dd:b7:33:4f:8e:4c:0d:65:40:8e:ce:86:ea:
0d:d1:4e:fa:9f:73:9b:09:70:d2:80:2d:53:2f:6c:ec:c1:bd:
78:24:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:49 2026 by rpki-client