Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: KwTe0/dLtOyKfQCLzM0a1jliyF28KWRxjpvbAuBI/U4=
Subject key identifier: F6:F1:AF:47:7D:7D:4F:42:AB:3B:65:87:D5:40:49:64:80:4B:D4:05
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019FAED2FD6A7EB2ADDEC86EC29C7039C55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 17:01:30 +0000
Manifest this update: Wed 29 Jul 2026 17:01:30 +0000
Manifest next update: Thu 30 Jul 2026 17:01:30 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: a+FqD1WOOUux6PhcpxfNRTQ6l4Ns32P7yf1XBWXrfbg=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d2:fd:6a:7e:b2:ad:de:c8:6e:c2:9c:70:39:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jul 29 17:01:30 2026 GMT
Not After : Jul 30 17:01:30 2026 GMT
Subject: CN=f6f1af477d7d4f42ab3b6587d5404964804bd405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:2f:6f:68:70:2f:4b:ab:7d:a1:3d:51:3f:
2c:bc:89:d4:dc:fb:7a:44:bf:4f:ef:8a:04:d7:08:
40:d1:47:2f:3c:29:b9:61:e8:87:00:7a:f3:83:98:
63:44:d6:f4:91:05:f0:b0:98:62:04:c2:80:5b:7f:
38:a9:01:32:0e:b3:08:2f:ea:b2:83:02:4b:c7:0c:
28:3c:16:87:ac:32:42:01:0a:0b:8d:5c:08:7d:e1:
a3:2f:a0:6c:02:b1:84:09:f7:fc:da:b4:86:4b:70:
22:ff:b5:44:bc:a2:37:d4:c1:64:bf:7c:dd:81:89:
3b:ef:bc:72:88:a4:f8:c8:8a:90:50:ec:bb:cd:25:
0b:a0:9d:6c:2c:23:3c:4b:f7:28:17:26:80:51:bf:
3e:4d:f8:9d:38:53:60:eb:03:82:c4:7d:28:59:7b:
35:9d:fb:76:13:be:0d:d3:a8:1c:46:d0:f8:74:8d:
e8:d4:3a:e8:e5:fe:6f:ad:20:ce:ad:55:7a:e9:a4:
03:9e:75:16:29:da:ce:a2:7b:12:53:bc:12:c3:d3:
af:c1:63:4b:5e:dd:4b:d4:f7:7a:2a:b7:c4:42:98:
8a:d2:72:38:cc:28:5a:e4:8a:16:db:56:c8:ab:69:
f9:94:66:34:ad:aa:d1:b9:b2:69:0f:d2:ef:37:46:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F1:AF:47:7D:7D:4F:42:AB:3B:65:87:D5:40:49:64:80:4B:D4:05
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:a7:99:1b:fb:6d:11:19:ad:45:f6:fc:9a:fc:fd:f8:5d:
21:91:bf:24:94:4d:73:75:84:d9:ca:0d:ac:8e:1a:a0:1f:99:
ae:ba:cc:0a:98:9a:1e:51:b8:b4:f2:b9:b3:66:1e:bd:4d:95:
f1:22:58:76:25:25:0d:7d:56:be:c8:33:72:2a:f2:28:bb:87:
c3:54:1b:f2:ba:73:74:b5:58:6a:04:c9:3a:df:4a:38:68:b4:
49:e4:73:eb:cc:ff:28:49:9e:d2:31:76:dc:ed:f8:4d:4d:92:
8f:40:56:fa:53:d9:e0:63:d7:93:5a:d6:7d:14:c6:cc:f5:3b:
27:6c:1e:2b:c5:24:36:7b:4b:11:60:6f:90:93:33:93:30:2e:
8f:85:c0:ab:31:48:f6:8d:cd:19:b7:1f:99:b2:6d:d1:ae:d4:
72:6b:a3:c8:f0:74:b4:c5:7f:1d:3f:14:97:a8:79:71:a8:71:
a8:e5:a5:d1:8d:f2:b1:ca:f0:c5:28:c6:b6:5b:91:7a:e2:ba:
4b:f5:68:8b:1f:c9:54:c4:c4:74:12:bf:16:6e:6e:8a:98:f7:
62:96:17:0c:e1:02:ea:4a:7c:5f:35:a2:ca:09:c3:7a:05:05:
9e:80:42:35:22:6a:4a:37:d7:ac:39:b4:eb:8d:a8:24:7e:c9:
20:32:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:27:45 2026 by rpki-client