Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
File: K59zaHqFPjIkksNpEsGGUUHB7NA.mft (raw, json)
Hash identifier: g/fVyr+/0OmLTHrlNJfAi7J/223WYz8EXd4KfjzPPfU=
Subject key identifier: 0B:21:EF:8D:8B:BF:9C:12:1D:B4:F4:2D:34:25:7C:77:19:45:8C:FC
Authority key identifier: 2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
Certificate issuer: /CN=2b9f73687a853e322492c36912c1865141c1ecd0
Certificate serial: 019F91DA2714A9C66240E2629549996B8F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
Manifest number: 17
Signing time: Fri 24 Jul 2026 02:00:20 +0000
Manifest this update: Fri 24 Jul 2026 02:00:20 +0000
Manifest next update: Sat 25 Jul 2026 02:00:20 +0000
Files and hashes: 1: K59zaHqFPjIkksNpEsGGUUHB7NA.crl (hash: NsnB0Pxl4KWG6BBhn84f74MuVaCKhHdbimkaoX8rbHY=)
2: XEKXrUtUSEHKeRecg-HKhQKGsRA.roa (hash: 9+YjXqvRCQzbgAOAmscmNkEvHBqrZxLodjNclOm5rLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:27:14:a9:c6:62:40:e2:62:95:49:99:6b:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9f73687a853e322492c36912c1865141c1ecd0
Validity
Not Before: Jul 24 02:00:20 2026 GMT
Not After : Jul 25 02:00:20 2026 GMT
Subject: CN=0b21ef8d8bbf9c121db4f42d34257c7719458cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:85:66:55:0e:5e:1a:98:a2:73:94:71:b5:
c5:20:c5:d7:e1:6b:07:0b:b0:b4:e2:32:b0:d6:bc:
bb:4a:bb:88:10:ae:e4:3a:e4:1f:9f:ab:fa:ee:0d:
e0:7a:bc:ab:a3:ed:bd:46:87:82:ad:73:9d:8a:1a:
bd:9c:f7:37:29:12:eb:12:7c:bc:66:e5:07:24:c2:
a0:b9:ac:af:25:54:97:03:6f:c3:b6:91:c3:08:7c:
3a:ed:da:bd:42:ef:d6:61:e6:38:a4:63:29:ec:c6:
58:0a:a2:53:80:f6:eb:e3:75:15:22:bb:2c:0a:e3:
81:8c:59:ed:9f:2f:b0:08:f1:04:cb:0b:fd:85:72:
ca:fe:19:eb:05:9b:6e:bf:ad:16:74:75:d2:94:55:
6c:98:20:e5:ce:6c:23:a0:be:7f:56:7f:c1:74:14:
6e:7e:d8:ba:c1:8c:4b:e2:03:f7:60:e3:f8:e3:4a:
9a:36:fb:62:b7:86:9b:45:e4:70:90:7f:4b:18:6a:
20:52:19:55:4c:77:87:29:83:b2:51:24:bd:3a:89:
a3:64:30:82:a1:4b:e2:af:56:8e:17:cc:8e:03:27:
d0:31:d5:f5:ce:7a:e5:23:fc:91:ae:88:05:30:70:
ad:ab:5e:e3:f7:0e:b8:76:87:8d:4d:2e:ad:19:e5:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:EF:8D:8B:BF:9C:12:1D:B4:F4:2D:34:25:7C:77:19:45:8C:FC
X509v3 Authority Key Identifier:
keyid:2B:9F:73:68:7A:85:3E:32:24:92:C3:69:12:C1:86:51:41:C1:EC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K59zaHqFPjIkksNpEsGGUUHB7NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/991ad0-d479-428d-928a-9abfe04a19a0/1/K59zaHqFPjIkksNpEsGGUUHB7NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:c2:ec:60:01:b9:88:0b:00:03:35:f7:c5:21:ac:ef:26:
10:77:95:43:ee:d7:53:7e:a1:7c:5f:f7:f7:e3:42:4a:24:34:
cc:7c:6e:8b:00:81:f3:c2:00:b9:41:99:af:02:32:07:4b:44:
2b:24:2d:0f:84:8d:e6:8c:20:49:a0:27:28:1b:1c:61:9a:e1:
22:34:57:c3:62:55:b6:49:15:bb:da:52:8e:4a:b0:09:50:2d:
7b:66:ba:5d:10:04:7f:55:fb:2d:c5:01:19:1b:86:eb:b9:57:
8c:8d:43:6d:1c:b1:3b:73:ae:f8:de:f9:79:af:a2:0b:e4:2f:
5b:bc:a1:05:0b:07:e9:2a:b2:01:22:07:e7:5b:bc:94:ad:8b:
49:57:6e:b1:30:45:d9:f2:c3:45:86:1b:43:a4:83:b5:01:57:
e5:ce:a7:76:b7:eb:56:6d:87:db:3f:59:1c:56:a3:7c:08:ca:
b8:59:51:87:80:d2:fc:61:b7:d9:06:9e:74:e9:55:d6:a8:5d:
c6:07:4f:b7:77:8f:83:f2:73:29:b4:44:7e:1b:c1:1b:33:87:
5a:da:b9:fd:2a:a5:8f:ec:58:53:de:2b:3b:fd:3d:d1:22:1e:
ee:d8:e2:a6:14:ca:ae:9c:0e:42:65:78:b7:eb:d1:3b:00:e1:
ec:f6:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:00 2026 by rpki-client