Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: 5xRalt/y9+7OCFMMuZsh/dxb3pqDKt+MkcYawvoLvD8=
Subject key identifier: 20:5C:17:80:69:E4:DA:51:21:F2:20:51:CD:C8:8F:A8:5D:5C:40:81
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019F935C28E46550202589A1C92CC3917C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 174C
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: O6OO57RQTaz5epdGDf8bgK5GX2q1oe7lQMO+YupXRIg=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:28:e4:65:50:20:25:89:a1:c9:2c:c3:91:7c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=205c178069e4da5121f22051cdc88fa85d5c4081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:a6:af:e6:66:21:5f:9a:c3:64:1c:57:70:
70:22:a4:56:ed:fa:ee:d3:a9:4b:bf:ea:93:3c:7d:
ee:ac:2f:f0:6c:12:e0:c2:3d:77:bd:d7:ad:4c:e8:
33:26:ac:c2:81:d8:0e:96:38:d8:3b:15:dd:d5:17:
ef:1d:d9:65:b0:1f:91:26:30:5b:0e:71:32:6d:ec:
37:dc:9c:5e:f6:79:47:ae:db:09:eb:78:6d:ec:98:
90:63:5e:ca:70:92:46:67:2a:56:4a:6a:f7:90:6c:
9e:53:d2:51:41:35:ee:88:c3:2b:f3:70:dc:b5:6d:
e6:08:f1:6f:fb:bd:0f:b1:ee:18:b2:3e:10:95:f6:
84:96:a9:69:df:69:21:37:35:ce:37:70:a1:f6:4e:
ef:95:9a:16:04:76:ea:81:3e:9c:7f:90:e0:08:f1:
be:fa:78:9a:76:11:bf:0b:e0:5d:dc:03:4a:f0:2a:
a5:90:35:47:12:ad:0b:52:df:01:30:55:f7:ff:bb:
e0:e0:a2:db:99:35:09:27:70:10:3e:9a:ce:9b:80:
49:34:5e:30:7b:c7:aa:44:1c:f6:66:71:69:16:e9:
59:4d:8f:dc:75:e1:5a:b3:ad:1e:3a:c3:46:4f:75:
e4:ab:3c:31:4e:5f:65:d9:5a:03:c7:db:d7:89:aa:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:17:80:69:E4:DA:51:21:F2:20:51:CD:C8:8F:A8:5D:5C:40:81
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ff:8a:28:f1:05:d5:d4:b3:20:88:44:c6:34:86:1f:e9:11:
74:be:5c:bc:4b:07:a2:12:32:70:ea:f3:fb:3d:fa:b3:01:26:
c1:ee:61:d3:a5:b1:63:68:c8:72:11:92:2a:b8:99:c6:a7:df:
38:4c:cd:e6:d1:5c:03:45:99:f8:2b:1e:a7:f1:37:c0:ea:a4:
85:61:4b:aa:c7:e0:1a:20:fa:da:35:9a:23:e7:87:68:9a:44:
c5:af:d6:d8:d2:c7:0b:ca:20:af:b8:b2:f1:99:71:cf:5e:0c:
91:20:3f:77:28:8f:38:44:4e:19:ae:c2:dc:9b:0a:9c:41:3c:
42:0d:c4:d5:f4:b9:ca:d8:16:2e:a5:6e:b2:58:88:2c:65:e0:
89:05:43:83:c5:d2:25:70:2f:9a:c8:55:58:64:1e:97:3f:69:
71:97:22:83:ad:91:d9:3a:aa:77:dc:e7:73:0b:2b:24:ee:ef:
fe:1d:44:e0:a3:e2:fe:21:18:f1:a1:8a:eb:1c:7f:7d:f7:66:
d2:1b:40:2c:cc:9b:1b:72:bc:47:48:fa:58:b4:1a:aa:9f:f0:
4d:a2:3d:94:3b:97:43:a2:ac:37:cb:9a:3a:5d:61:cd:c0:ba:
e9:7d:37:df:17:49:19:53:36:e3:89:c0:22:71:ec:1e:92:00:
9b:27:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:25:22 2026 by rpki-client