Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: RgHou9DN1mBH/9RJcArvfeOAPJ6yu0rU7PTBH389HXw=
Subject key identifier: EE:4A:36:EE:FA:DA:20:25:1A:43:AB:02:8E:18:50:31:77:D0:C1:31
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019FABD19F244D1335E8A65AD79206BF0BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 03:01:09 +0000
Manifest this update: Wed 29 Jul 2026 03:01:09 +0000
Manifest next update: Thu 30 Jul 2026 03:01:09 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: /oqdu8wVZW6wiZP6c4sY5T4qXgphU7iFfB9FcjEVKsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:9f:24:4d:13:35:e8:a6:5a:d7:92:06:bf:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jul 29 03:01:09 2026 GMT
Not After : Jul 30 03:01:09 2026 GMT
Subject: CN=ee4a36eefada20251a43ab028e18503177d0c131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:17:56:3d:cd:eb:68:2e:ef:ec:9c:39:8d:
be:fb:42:8d:55:10:7d:bf:5e:9b:9b:ed:33:16:b3:
a5:0b:0d:f3:39:23:bf:29:d6:a5:90:43:df:6c:45:
64:f8:19:2e:af:b9:aa:bd:fe:ca:79:89:58:e1:0d:
39:57:c1:02:e5:11:ff:5a:86:1d:cd:2b:bf:ff:72:
e2:2b:a7:2f:a6:ba:01:f7:6b:0b:40:42:c8:b7:c7:
14:3a:39:85:95:55:16:0b:1b:7b:52:e8:7b:e6:33:
1d:81:df:46:0a:da:53:2d:b0:b6:c0:03:21:f3:80:
76:3a:78:eb:49:4b:6d:b6:e7:cb:9c:31:2e:5f:1c:
bd:d4:f1:18:5e:49:1c:62:1d:05:d2:94:ab:5a:71:
80:9c:66:33:60:ae:bb:eb:e1:06:27:5f:6d:c4:72:
2a:db:d2:1a:f9:c0:0e:ed:83:d0:26:0e:81:88:42:
4c:76:1c:42:40:db:10:c6:15:46:f0:7a:ea:de:c4:
23:65:59:24:3f:e7:d9:de:89:20:29:c6:4d:63:ce:
be:e0:e6:d5:c4:14:60:27:27:07:6d:10:f7:b4:e5:
b5:85:6b:70:6e:8a:ec:4f:f0:a8:8b:fd:55:74:b8:
91:e3:4f:b6:4c:90:b7:1e:ba:b5:e4:4c:8f:a0:43:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:36:EE:FA:DA:20:25:1A:43:AB:02:8E:18:50:31:77:D0:C1:31
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a9:13:8a:8c:98:1b:6e:f3:b6:20:f3:4e:2c:83:cc:dd:56:
8c:0c:70:e0:03:fc:6d:0d:9d:ba:10:86:5b:c6:f9:14:1e:76:
52:1a:45:1e:89:19:33:95:b2:ae:cd:d3:23:fd:55:4d:cc:6f:
c6:e8:0a:5f:2d:a1:1d:98:a8:fc:42:92:b5:cf:2e:cf:37:55:
2d:65:79:b4:14:e4:f2:22:20:9b:03:60:41:fc:04:09:82:4c:
d8:70:9e:4d:df:f0:2b:b8:90:87:f9:56:af:c3:2e:52:fe:2b:
a2:db:80:79:84:26:bc:10:b6:01:16:fe:64:96:a8:cf:f9:05:
ff:e4:27:b4:59:ed:fb:f0:a2:b0:15:fc:06:52:be:68:42:f8:
98:95:05:03:f4:0c:93:7f:35:d6:b8:0c:db:5d:30:bf:c9:bd:
34:ef:93:6b:bf:66:11:ca:94:57:6d:2e:90:8f:91:db:11:b5:
56:67:b1:c1:f3:20:33:3e:ae:ce:d3:b3:1d:f1:09:89:af:33:
70:e2:f4:12:af:83:cf:aa:f3:64:6f:9d:1b:69:f0:5c:8c:ec:
86:e7:ce:9b:41:04:01:59:47:c6:42:19:b4:6b:62:5d:ee:42:
c5:98:02:6c:ed:e8:3d:d7:bb:0f:d5:c3:5a:22:d1:00:24:98:
7d:79:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:21 2026 by rpki-client