Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: u01i3o9rTGmy1r1X7TEnwZV/6AJjJg6AJySPt2JvBnU=
Subject key identifier: 5E:7A:04:D9:C3:92:B2:22:3C:7A:F4:E5:9C:5D:5A:A7:30:25:13:3D
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 019FAC75AAA01A9EC37A04B994901EB877E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:20 +0000
Manifest this update: Wed 29 Jul 2026 06:00:20 +0000
Manifest next update: Thu 30 Jul 2026 06:00:20 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: MtXCKheStfGGUmrZjMtq5x16oXv+EkqAdtvCyaCZyvc=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:aa:a0:1a:9e:c3:7a:04:b9:94:90:1e:b8:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Jul 29 06:00:20 2026 GMT
Not After : Jul 30 06:00:20 2026 GMT
Subject: CN=5e7a04d9c392b2223c7af4e59c5d5aa73025133d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:17:69:a2:63:33:b0:2c:ea:68:27:3f:fd:
8e:8e:e7:dd:b0:a9:eb:5d:01:9b:b4:1e:49:3a:a3:
20:ff:dd:56:82:ba:ef:fe:2e:10:cc:bf:d5:e4:30:
69:fc:6f:0a:df:d5:d4:b3:75:09:8e:92:86:66:bd:
8d:61:e3:f6:4b:dd:49:27:f1:7d:64:44:dc:21:6a:
28:83:23:f7:f2:0f:7c:52:8c:3b:8a:4e:d2:a7:24:
2b:0e:33:32:01:f2:e8:cc:c4:0b:89:cf:92:fb:03:
ce:26:7e:5f:98:87:13:00:ec:d4:08:15:27:b6:cb:
b1:6f:cf:fc:45:df:44:ed:e3:d7:f5:60:6b:96:54:
9e:3c:21:8b:53:6e:59:ef:47:13:ab:52:79:ad:c8:
1c:48:66:b4:c9:51:ca:3a:70:c1:09:3d:49:70:f4:
71:7d:5a:7c:db:6a:95:cb:10:d6:a9:ca:69:32:68:
61:c1:e7:e9:c2:dd:e2:42:4c:88:e8:8e:43:4e:ad:
9a:28:a5:16:66:3d:0a:ea:09:46:9a:7d:c2:da:df:
d7:0c:67:f2:6c:a8:1d:c8:8d:0b:88:13:cd:85:0c:
03:20:09:b7:e0:27:ce:c1:cd:71:fe:24:75:3c:10:
35:27:8f:cb:6e:d8:06:52:69:0a:fe:4f:8a:27:ea:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7A:04:D9:C3:92:B2:22:3C:7A:F4:E5:9C:5D:5A:A7:30:25:13:3D
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4d:52:e7:a1:af:77:a4:76:03:7d:ea:14:ff:86:9a:1a:80:
51:be:80:a5:45:97:55:21:ed:83:02:cd:d9:3a:d0:da:0d:69:
f9:c7:89:ed:ac:5c:2d:57:6d:14:56:0e:94:4a:39:da:87:0a:
b2:a9:bf:cc:40:1d:3d:44:38:4d:5d:e4:de:72:06:e1:96:ef:
2d:59:67:c1:43:f1:8d:81:f9:ce:95:d2:cd:1d:4c:65:e3:8a:
1b:1c:66:81:48:c2:f6:fc:62:c4:ed:03:26:66:22:2a:3c:f7:
3f:10:1e:33:ce:9f:53:48:19:25:42:09:27:7b:68:c6:27:38:
8a:03:9e:5f:39:55:dc:4e:5b:c6:c7:8d:8e:eb:20:d1:c3:fd:
e7:b4:f5:6a:df:ad:23:0b:55:d1:18:48:97:bd:ef:df:69:70:
5f:88:f0:7e:ca:bf:5b:db:1f:e6:19:1d:57:e6:5e:72:24:0a:
50:8e:34:2e:8f:f7:99:70:ac:74:ee:93:2c:f8:1c:41:11:bd:
19:47:f3:9d:e9:1f:c5:13:59:4d:d6:20:4c:8f:0d:fd:30:18:
fc:55:e0:e7:1b:34:18:8d:a0:06:9c:d5:8a:a5:c9:28:aa:7d:
0b:28:8b:09:af:32:ed:9e:2a:f4:39:9f:7b:92:11:c5:0d:39:
cf:a7:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:05 2026 by rpki-client