Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: u0CCxrDNNcMHtL0/cp2wn4xoKDW2HGuxblyZsGfur0E=
Subject key identifier: B8:34:D4:2D:9C:4A:E2:CD:EB:E4:44:1E:12:BB:7B:27:CC:8B:7E:57
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019FA7868DC2A09A7E1F47DEA3BA4E1C6F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 07:00:40 +0000
Manifest this update: Tue 28 Jul 2026 07:00:40 +0000
Manifest next update: Wed 29 Jul 2026 07:00:40 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: BOYUSGAcWwWD8DxrVs8c5plkaGwLXr8T4QpiTg6bIyk=)
3: tB6SdtPeaNHkXKdCFOrT0cZRLQo.asa (hash: hEt0QePrXimypD2t1C7kRdRaY7tLoSp85y3ztSay7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:8d:c2:a0:9a:7e:1f:47:de:a3:ba:4e:1c:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jul 28 07:00:40 2026 GMT
Not After : Jul 29 07:00:40 2026 GMT
Subject: CN=b834d42d9c4ae2cdebe4441e12bb7b27cc8b7e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:82:f2:95:de:40:b9:0e:5f:bd:b4:32:19:
7d:ab:dd:6f:3c:1e:2e:88:3d:c3:16:6c:dd:02:3c:
4c:f5:90:9e:03:64:33:e1:bd:66:4b:0c:e6:fa:7e:
e5:f0:96:d7:ad:63:d2:a9:2f:be:4f:49:3e:16:a7:
f5:88:b3:1b:e0:bc:e5:70:ef:c4:1b:7f:73:4a:b0:
47:6f:6d:88:36:c5:25:00:a5:48:e9:d8:d3:db:57:
32:8a:c7:5c:5e:a3:3b:e5:ce:db:17:51:15:a2:25:
4b:3f:54:0e:cc:95:df:43:f9:ea:33:8c:fe:ef:4a:
93:9c:b4:ba:a7:de:e8:db:0f:4a:bd:31:c1:d0:d1:
f0:d1:c9:a7:0c:71:91:ab:95:f8:97:a7:55:18:8d:
df:ff:29:84:1d:07:bf:c2:a6:e9:28:9e:1f:fc:a3:
bd:fe:a0:2d:ab:13:c4:de:0d:7d:2b:f0:88:d9:7e:
9e:01:8d:ea:01:1e:74:3b:43:d8:7e:1e:b8:ff:71:
4b:9b:3b:24:c8:94:f1:f3:6c:8e:49:1a:21:02:24:
a8:ae:7c:34:05:02:96:7d:87:a9:78:6d:e8:a4:37:
2c:53:d9:40:82:11:a1:7d:4f:51:ad:c5:09:37:7c:
25:56:fb:34:eb:34:e3:ad:e7:e4:23:de:61:e2:da:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:D4:2D:9C:4A:E2:CD:EB:E4:44:1E:12:BB:7B:27:CC:8B:7E:57
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:01:e3:58:31:38:ad:5e:51:b6:4c:32:59:2f:e5:fe:ef:
1b:61:22:d5:2f:54:e1:a3:97:8f:2b:a8:60:40:b9:5b:fa:6b:
26:e4:9f:f7:e3:1c:4a:1b:84:f1:d1:a1:a1:ed:a5:ab:6b:d4:
95:91:b3:5d:83:32:5c:4d:8d:86:45:ae:9c:b2:6b:70:af:c5:
00:3f:4b:ba:42:da:f0:a5:21:8c:a6:f7:d8:3d:8c:aa:6d:08:
61:e5:56:15:d0:e4:6f:e8:bc:3e:40:22:4c:e3:e4:a1:77:c1:
63:9c:1d:e5:f4:a6:a6:fd:8c:02:e8:3b:84:c9:e6:a8:8d:b6:
2e:79:78:e4:56:05:e2:43:5a:46:4c:07:71:64:b5:0a:81:33:
ec:27:df:f1:60:09:d7:4c:75:78:04:a9:10:4e:79:66:a3:85:
05:36:df:00:28:11:f0:52:11:8d:48:69:ad:c6:da:6f:6a:3c:
11:27:0c:09:47:17:96:cd:d6:2e:97:20:fa:2c:14:53:c6:30:
61:ac:ae:4d:9f:32:2d:bb:4a:83:ee:ee:f1:86:03:a3:c3:5b:
11:4b:2b:a1:f5:cc:0c:7a:ed:e7:43:13:fd:9d:87:b8:f9:23:
09:77:10:c8:bd:81:d1:c0:24:b0:b4:f2:a8:90:69:b8:a6:79:
7a:7f:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:15 2026 by rpki-client