Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: 7GwcPHnBskFHiQ/jxUGYKWx4k8aU6oePV1nTpzphM14=
Subject key identifier: C8:DD:AC:AC:20:4A:08:B7:16:B6:FB:FB:59:43:C7:19:A8:96:04:21
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 019F8EA240C4D40B4A822CD47618D3333B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 01D0
Signing time: Thu 23 Jul 2026 11:00:25 +0000
Manifest this update: Thu 23 Jul 2026 11:00:25 +0000
Manifest next update: Fri 24 Jul 2026 11:00:25 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: JJ0DGV7SzI3eDbzsByzwQUy74OkR2lyKlpbIVQUbg7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:40:c4:d4:0b:4a:82:2c:d4:76:18:d3:33:3b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Jul 23 11:00:25 2026 GMT
Not After : Jul 24 11:00:25 2026 GMT
Subject: CN=c8ddacac204a08b716b6fbfb5943c719a8960421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:9a:26:73:46:ef:68:a9:46:5e:fb:4f:a1:
b6:63:13:66:85:6d:12:49:79:bb:ba:bf:52:97:2e:
9a:de:26:ea:c4:08:2d:25:39:93:ef:06:28:03:b3:
50:76:77:15:09:d5:33:c6:8e:9c:15:f1:16:32:82:
d5:25:e7:71:0a:dd:73:b5:8f:8f:c7:49:99:9b:ca:
b3:bd:c7:78:f0:43:f1:e9:4b:4a:42:b3:f9:b9:3f:
ce:1c:ae:b0:13:16:be:c9:2a:0d:ce:b3:9c:03:44:
21:f1:f4:1f:ec:36:99:42:66:27:7c:eb:5a:77:35:
9a:4b:48:f8:f2:6a:03:df:e9:c1:6f:4b:01:46:6d:
46:32:39:22:2f:e5:e1:cb:0e:cb:1a:50:16:b7:56:
f3:64:1a:2b:31:c6:21:61:d3:1c:4c:4a:36:25:fd:
7e:9e:32:76:bd:63:63:dd:2b:ac:c9:75:43:1f:05:
24:8f:60:6c:15:75:d3:cf:b9:df:38:6c:e9:dd:41:
2d:2a:a4:2e:a7:32:0f:93:10:09:af:eb:01:e6:6e:
f0:9a:96:e2:4b:d6:db:f4:7e:74:ec:3a:f3:88:50:
ff:3a:4f:5b:3b:f4:c4:cf:4b:f8:ec:f3:73:f5:59:
a0:78:2b:98:a8:3a:c5:7c:5e:5a:fc:33:7a:06:2a:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:AC:AC:20:4A:08:B7:16:B6:FB:FB:59:43:C7:19:A8:96:04:21
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ca:96:8d:5e:46:08:d4:a2:35:97:69:8e:de:fa:ca:b3:f5:
c0:b9:6c:36:45:26:95:62:25:6f:b8:8e:7f:9b:2c:02:98:98:
b4:3f:5f:8b:15:6e:5c:6b:1c:b0:78:4d:50:29:5b:62:ce:f0:
23:ab:9d:5a:ce:8f:f2:22:51:fc:4b:f2:db:10:ab:d9:86:79:
a9:b2:0f:91:83:b6:8c:0e:11:8e:a0:0d:13:ac:8f:75:0d:d5:
98:25:ba:37:1b:47:df:2b:6d:58:6b:d2:b1:c2:de:e5:a8:ab:
4e:66:a8:7c:69:ee:6c:4d:a4:ad:6e:1d:6f:c5:51:a6:23:3a:
aa:4d:2d:07:a4:88:09:07:ab:2a:c2:55:1e:5e:43:fd:44:45:
e1:46:85:20:16:c2:1b:f7:3f:6a:0c:cf:ff:b7:a4:d3:9c:e6:
d4:d0:f7:9a:cb:9d:0b:fa:f8:05:1c:ca:26:05:a5:1f:6f:c5:
36:bc:25:b0:07:56:65:0e:10:ef:15:89:17:a1:2b:d9:f4:ff:
7e:79:b4:20:ef:b6:b4:f6:81:de:96:0c:4e:d3:73:a7:7e:47:
c6:48:82:0f:56:14:a7:04:4c:d1:e7:2a:de:49:8f:ab:95:39:
23:92:fc:fe:dc:61:3c:10:5d:a7:42:93:47:20:1b:50:de:ce:
0d:e3:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:05 2026 by rpki-client