Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
File: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft (raw, json)
Hash identifier: phnOZWaLamRWK13nGzZ29Ip4s/fQs/UuTpkvz1dD2tY=
Subject key identifier: 0B:F9:5E:49:4B:8D:28:BD:FE:38:80:CF:55:28:1B:91:BC:93:10:07
Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
Certificate issuer: /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Certificate serial: 019F9391AC6C4268F1AA48A2D84E00CC3067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
Manifest number: 01CA
Signing time: Fri 24 Jul 2026 10:00:25 +0000
Manifest this update: Fri 24 Jul 2026 10:00:25 +0000
Manifest next update: Sat 25 Jul 2026 10:00:25 +0000
Files and hashes: 1: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl (hash: txGp2wPn8sVLlJYE53DNfqAtJINxYr/IrPZRDmqNNX4=)
2: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (hash: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:ac:6c:42:68:f1:aa:48:a2:d8:4e:00:cc:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Validity
Not Before: Jul 24 10:00:25 2026 GMT
Not After : Jul 25 10:00:25 2026 GMT
Subject: CN=0bf95e494b8d28bdfe3880cf55281b91bc931007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:97:ee:16:0b:27:35:8f:2b:d0:90:fd:63:
ba:2f:b4:e8:81:5d:91:a2:f5:38:a3:a1:c5:ef:b8:
b9:87:9c:9e:c1:7c:46:a5:0b:d7:68:bc:48:26:9f:
ab:dd:07:cb:61:4b:6e:bd:f5:79:1e:87:d9:6b:59:
c8:1a:19:ec:d0:15:d9:8b:81:1a:e4:36:d5:b1:eb:
77:39:d3:14:02:b5:e9:86:91:58:2d:67:59:7f:71:
f9:36:2a:47:28:5b:80:2c:0d:b6:95:30:58:61:36:
93:76:39:fb:b6:58:ef:04:df:56:da:7f:70:89:ac:
1b:bf:92:9b:73:b5:ec:45:58:7d:d5:07:c5:76:42:
a1:51:63:a6:a4:e1:04:86:1e:29:71:50:8d:a7:f2:
3e:2f:6c:3b:2a:aa:b0:d5:0e:39:2e:7e:1b:8e:48:
e8:49:f3:f2:c7:c3:43:93:a8:c2:6a:85:9d:eb:44:
86:30:b2:b1:23:02:ab:e3:42:5e:ed:85:70:66:0b:
f0:ab:95:d4:bf:52:24:38:99:83:32:df:7f:16:ba:
52:8b:ba:39:60:88:43:c7:56:2d:ab:0f:f3:55:e0:
06:71:2f:6f:62:4b:de:5c:3a:57:2e:c2:aa:e5:b3:
18:36:99:ce:c9:a2:4c:d2:2e:55:9b:27:75:ce:0a:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F9:5E:49:4B:8D:28:BD:FE:38:80:CF:55:28:1B:91:BC:93:10:07
X509v3 Authority Key Identifier:
keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:50:fb:05:fe:23:f1:8d:16:cb:ab:6b:83:b6:3c:3f:a7:0d:
bb:4d:1c:21:87:56:2e:cd:8c:f9:8b:f5:ff:13:ff:00:10:d9:
75:5d:37:84:6e:f7:9e:53:88:88:10:9e:00:73:72:06:b3:46:
cc:cb:3c:5d:55:db:b1:50:dd:81:7f:ed:74:f1:e8:b7:83:c9:
18:9c:39:aa:7c:0b:ab:0f:8e:c0:58:37:4b:1e:e3:c7:81:60:
ce:05:97:70:f0:c6:3f:1c:e8:3d:06:fb:f2:b1:4f:f2:78:56:
52:43:92:f5:3a:b2:ae:d0:ca:fa:a6:28:c0:d9:4f:49:b4:fb:
05:61:97:f0:e9:41:9c:bb:3c:e9:d7:ab:48:e2:a6:4d:56:a4:
46:8b:88:cd:45:07:fc:08:74:54:fe:89:d6:de:be:51:1a:a9:
be:a0:05:31:0c:1b:9b:94:3d:3a:86:49:b1:fd:cc:39:40:f2:
bb:22:53:1e:7d:05:18:2c:0a:dc:02:32:a0:7c:b9:65:38:40:
ec:29:e1:f8:fc:fe:d2:53:f5:38:0d:90:16:15:ff:b5:85:62:
1c:0b:33:d9:34:dc:33:fa:10:11:45:12:ce:76:19:d5:ba:e5:
cd:08:66:e3:bb:d2:d6:8f:98:c9:52:c6:d6:de:d2:f0:ac:b7:
ca:c0:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:46 2026 by rpki-client