Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: cqevwCn5DeQ/lHa/36M0t9sS7Vv3VD6/7TQMWAGpIfg=
Subject key identifier: FF:F6:9D:2F:C3:CF:72:A1:7E:65:CB:C0:7F:6D:6B:91:17:1C:3A:BB
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019F8E6C3256C66676DA491484DD5663275D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 10:01:23 +0000
Manifest this update: Thu 23 Jul 2026 10:01:23 +0000
Manifest next update: Fri 24 Jul 2026 10:01:23 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: U/QTPngu9Y0g1ASaAykcAf4dI7LSRebLfNb5CirbL1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:32:56:c6:66:76:da:49:14:84:dd:56:63:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jul 23 10:01:23 2026 GMT
Not After : Jul 24 10:01:23 2026 GMT
Subject: CN=fff69d2fc3cf72a17e65cbc07f6d6b91171c3abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:6f:f0:21:a4:64:cb:2b:b7:35:67:ed:06:
4f:4c:20:9f:0f:56:7f:47:c1:a6:27:73:98:e1:e7:
1d:e9:1c:2a:1e:23:bd:30:61:d3:b3:52:c3:2b:cb:
74:b2:42:4c:a8:69:ee:9e:78:5e:0e:a3:80:e4:f5:
c9:f4:a5:1b:f9:f6:8e:c0:18:f1:e9:9b:f8:27:d2:
5d:fa:e0:d7:57:1e:ca:97:3a:ac:38:9f:1d:b6:c8:
6b:53:16:ce:de:9d:ae:7e:a6:9b:6f:4b:6d:9d:3e:
23:79:6f:67:3f:a8:e8:b8:ea:c2:2e:e7:fc:4b:9b:
76:fc:7d:f6:24:cc:61:08:30:d8:6e:f6:f7:e8:8b:
65:1b:13:df:bc:ce:13:3e:f6:e1:77:79:c0:a8:90:
00:1e:64:85:6e:5a:77:78:9c:2f:9c:3a:bc:c1:89:
99:1b:eb:7d:10:19:46:95:4d:ef:b3:d6:db:ab:e0:
dd:e3:6e:13:b7:80:47:c7:40:9f:f1:98:a7:12:fe:
74:7f:a1:cb:14:20:64:fc:f1:ce:2f:85:08:17:52:
96:8a:77:d3:f5:88:75:66:aa:6c:75:10:a2:cd:f2:
0e:35:48:7d:a9:7c:7a:3d:a2:75:06:cb:23:fb:c0:
0d:85:23:db:8f:cd:29:f6:65:8f:f9:75:21:5b:7e:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:9D:2F:C3:CF:72:A1:7E:65:CB:C0:7F:6D:6B:91:17:1C:3A:BB
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:30:2d:d2:55:af:13:82:ad:54:63:8e:c4:88:bf:2a:31:
ca:ff:dc:fe:89:54:86:c2:34:6f:54:54:b0:e7:95:4d:11:b9:
04:c3:d0:70:82:24:27:12:9d:2d:d9:ea:1e:65:a1:18:41:f9:
49:39:ac:ad:be:19:99:06:9a:86:e9:f7:0b:71:c9:34:66:fe:
8a:5c:98:48:11:8e:cc:3e:88:d9:bd:be:52:39:29:b8:8c:3f:
8e:e0:a1:94:24:6f:ed:5b:7f:c6:2d:a9:d6:ce:fd:f9:0c:d7:
fa:92:3d:d3:10:2d:72:70:8b:45:1e:23:f8:71:34:69:36:aa:
a2:05:c3:b3:eb:81:4d:1d:63:5a:51:02:45:c3:c8:4a:6d:8c:
b0:56:b9:01:28:60:29:82:85:e5:3a:74:b9:8c:5a:3b:76:59:
48:ee:0c:9a:57:f1:0c:29:3a:3e:9d:04:bf:bc:c2:8b:42:12:
f4:d9:29:24:3e:1c:9d:7a:2d:e3:c9:b8:3d:af:f1:1a:66:8e:
91:2c:b3:d2:47:8b:bc:03:db:03:da:24:d6:24:a0:3d:72:dd:
87:f4:93:d2:42:63:bb:18:73:b6:1d:09:8c:b3:9e:94:c6:83:
12:12:22:39:24:f2:f8:ef:b5:e0:c0:7f:61:42:39:7b:30:43:
cc:42:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:06 2026 by rpki-client