Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: BcmGdjAroa9/kNv915FCfXJ2TnQQfX+SRMcWKxv5ZzY=
Subject key identifier: 2F:F2:15:BA:5B:B5:60:FF:50:CA:D2:48:FB:91:E3:A9:5A:6B:B2:2C
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019F916C777FAAC5BC6D1DA8BCE077A67CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 174B
Signing time: Fri 24 Jul 2026 00:00:32 +0000
Manifest this update: Fri 24 Jul 2026 00:00:32 +0000
Manifest next update: Sat 25 Jul 2026 00:00:32 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: t9o5N4cDWyN1DNlTliAGSUw1BGDgq65ZwEVdT27A/Wg=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:77:7f:aa:c5:bc:6d:1d:a8:bc:e0:77:a6:7c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jul 24 00:00:32 2026 GMT
Not After : Jul 25 00:00:32 2026 GMT
Subject: CN=2ff215ba5bb560ff50cad248fb91e3a95a6bb22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:2b:8b:28:1b:8f:43:e4:59:82:e6:01:f2:
5c:2e:52:eb:2c:fa:51:51:d2:20:32:05:7b:9e:52:
c9:46:50:3c:b6:fa:04:60:21:26:ec:23:2b:f8:79:
de:1f:46:31:43:67:d2:eb:c1:0f:c8:e7:02:3a:0e:
58:c5:4b:12:e4:d8:3a:24:04:d6:07:64:18:ed:75:
28:84:e0:8e:70:08:39:eb:e1:07:8a:ca:16:0e:91:
e3:bc:14:5f:6e:e8:24:a9:f2:e4:36:d5:21:13:9e:
f6:4e:90:70:36:70:9e:b0:06:1c:94:8c:6e:b7:e8:
c0:e5:7d:11:6b:e5:9c:db:b7:7d:85:b6:a4:e3:9e:
b6:23:24:54:1f:07:e1:71:e2:07:cf:5c:84:e4:de:
41:45:66:cd:f9:72:a0:93:13:03:21:cd:2f:76:87:
9d:14:15:52:00:38:b0:94:fd:06:04:40:52:43:4e:
49:e9:5c:46:c5:3f:34:9c:2e:17:75:b6:cb:cd:0b:
9a:07:14:3d:63:2c:f1:4e:63:d9:55:38:9c:29:4a:
ea:ca:38:94:29:e8:6f:55:0b:0f:d7:67:3d:db:03:
c7:a5:6b:a5:d6:7e:2e:57:f4:77:d2:cf:ee:54:59:
a4:fc:30:0d:13:29:a6:03:83:32:b7:fa:6b:6d:24:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:15:BA:5B:B5:60:FF:50:CA:D2:48:FB:91:E3:A9:5A:6B:B2:2C
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:f0:39:d8:49:e5:8b:df:1c:43:68:2f:d1:1a:86:08:f2:
5d:96:b3:78:c4:49:52:ee:2b:c0:e0:80:dc:0c:6a:7b:d3:61:
66:99:2b:c8:9e:36:90:43:2e:72:54:be:9d:ea:5f:98:98:65:
46:f6:29:e0:0b:95:b2:19:c2:31:4e:5b:28:f0:d1:c8:86:be:
58:fa:9e:9c:b3:15:9a:b2:c1:79:88:9e:53:7d:16:5b:1c:7c:
f6:f9:4a:02:b2:4d:88:3c:75:cd:8c:ba:6b:36:8b:d3:71:55:
ea:29:e7:ca:c0:51:e9:eb:ba:14:6b:11:cf:ba:75:67:fe:56:
29:5f:cc:37:12:e4:89:9e:f5:7f:7b:12:bc:79:41:c0:c7:3e:
d1:6b:61:d4:30:6c:1e:4b:c1:37:ea:27:08:20:2b:a7:72:62:
30:c8:0b:ac:5e:05:54:d8:b4:50:84:0c:34:58:60:3a:2f:2c:
6f:6f:2b:4a:0a:2f:75:78:1a:5c:a1:af:51:41:b8:ac:1a:fc:
8b:e7:8e:3e:ba:7a:62:6b:30:01:a5:22:fa:ad:8b:d8:0f:29:
5b:ba:1f:0e:ee:c9:f2:e1:a3:83:1b:c4:47:c0:18:cf:47:ce:
bb:cb:4b:68:b7:0e:a7:23:2d:96:9d:3c:c1:4f:08:5a:ea:aa:
34:7d:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:57:34 2026 by rpki-client