Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: p9hM7dV6TnCxUQFB54tRIGLsIS4BNiSxZTdouFBroi4=
Subject key identifier: 98:E9:27:20:42:1E:A1:CA:9E:40:12:67:0D:DA:0E:94:2A:5F:B6:A7
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019F94A4C28ED027A9EA25A2A961C3A74EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 15:00:53 +0000
Manifest this update: Fri 24 Jul 2026 15:00:53 +0000
Manifest next update: Sat 25 Jul 2026 15:00:53 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: MbrAubLlC/QJjCyIen3S0pgpMpBgvUyi/Q947PJFeZk=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:c2:8e:d0:27:a9:ea:25:a2:a9:61:c3:a7:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jul 24 15:00:53 2026 GMT
Not After : Jul 25 15:00:53 2026 GMT
Subject: CN=98e92720421ea1ca9e4012670dda0e942a5fb6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:70:9e:58:63:ae:9d:ab:1f:0f:42:d4:b7:
4f:a2:fe:b9:38:1f:02:65:67:0e:ea:e6:17:ee:43:
ea:fa:2f:84:12:35:31:8a:e7:36:01:f1:33:cd:f9:
ea:81:32:42:87:cb:80:cd:ca:5b:79:2a:62:29:10:
02:d0:5e:36:14:5f:ba:83:79:60:91:d8:17:59:41:
de:48:dd:ad:af:e1:d4:19:75:78:2c:2d:0a:7a:46:
43:cc:37:9d:c0:53:c7:bf:9a:de:c9:9e:98:cb:fd:
97:6a:3a:d7:51:98:cd:1a:ac:7e:ad:02:a0:d1:38:
6e:cf:94:3f:e2:2f:8c:f6:83:7c:57:fd:52:0f:ea:
56:e4:1c:ec:fd:8c:0c:90:5b:35:60:18:61:46:24:
8f:7c:46:31:4a:bc:bd:b9:8c:d6:7d:8c:0c:73:26:
12:27:ad:88:84:f5:61:c3:37:d0:c8:97:5f:ab:7d:
f1:c6:65:4a:9d:3c:1f:5d:03:24:44:36:ab:c6:5a:
a3:dc:d2:4d:fd:29:68:ce:4d:3c:13:6d:8d:9b:3d:
6a:23:eb:79:4a:17:1a:82:86:96:8e:e2:2b:2f:4a:
23:06:1c:7f:cc:50:37:a5:98:f5:06:83:c1:d6:6c:
33:30:7f:74:18:3f:ad:52:7b:f7:db:39:ce:61:cb:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E9:27:20:42:1E:A1:CA:9E:40:12:67:0D:DA:0E:94:2A:5F:B6:A7
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ac:04:e7:18:a3:e0:e4:ae:e1:5f:60:e1:f6:8e:c7:29:51:
34:30:f0:5a:07:b8:5a:39:ab:23:29:b1:bc:56:67:eb:fc:84:
08:8a:e5:5c:9f:dd:41:f1:4e:78:84:6f:cf:6b:39:98:72:00:
4c:98:de:f4:d4:0f:1f:f6:ad:8b:4a:50:e5:1e:93:87:02:0e:
30:91:9c:cc:a7:92:bb:41:24:15:f3:ca:73:2c:29:37:d9:be:
c1:4f:f5:0a:f1:29:9d:29:b2:4a:89:de:a3:d9:1f:d9:d4:13:
14:f3:50:ba:c5:45:5e:d3:1a:22:4c:40:44:6a:72:58:4a:88:
cb:fb:83:f2:3a:3b:dc:73:70:73:c4:c0:58:f9:2c:6e:c1:5d:
3f:37:ac:0b:59:3c:4e:f1:08:25:77:84:38:3b:98:7a:ca:69:
b2:2d:94:30:78:2d:06:a2:3d:ed:ef:48:a4:48:dc:9b:b1:87:
fd:50:02:28:b0:45:6c:a5:fd:f1:cd:c6:f4:b1:93:96:10:ee:
39:8d:09:6c:cb:7c:23:dd:e5:e1:c3:25:b4:84:03:6d:b6:36:
84:f1:bd:88:9a:d1:3f:df:ac:9f:78:61:4b:5c:5e:68:2d:4c:
21:21:a6:9e:91:f0:e6:ec:45:e8:27:40:70:71:09:2c:6c:f0:
e5:ef:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:17 2026 by rpki-client