Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
File: _KHkSHz41KLZYd1iLz51Ab3CSCk.mft (raw, json)
Hash identifier: 8LMVtkaLVq0rGIKvmDhGewvowMR2KVfh0Rclai0cF38=
Subject key identifier: 30:1F:68:44:BF:86:06:A5:36:D9:D3:C6:91:04:76:24:A8:50:87:D4
Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Certificate serial: 019F95809B82B7707A0211CA62D62F4AB565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
Manifest number: 030D
Signing time: Fri 24 Jul 2026 19:01:01 +0000
Manifest this update: Fri 24 Jul 2026 19:01:01 +0000
Manifest next update: Sat 25 Jul 2026 19:01:01 +0000
Files and hashes: 1: 5IGkS-SPPNrJqQTvuCzGZItfdmI.roa (hash: bztepUTAX03w7M+nSyLqDj9U6yAnTCS2QiNsYuhc6yM=)
2: _KHkSHz41KLZYd1iLz51Ab3CSCk.crl (hash: BZsuxMnVsCrBqz32ThRQiZDsv26ypM1rcu4xiOisoic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:9b:82:b7:70:7a:02:11:ca:62:d6:2f:4a:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829
Validity
Not Before: Jul 24 19:01:01 2026 GMT
Not After : Jul 25 19:01:01 2026 GMT
Subject: CN=301f6844bf8606a536d9d3c691047624a85087d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:c6:1e:4b:f9:cc:fc:dc:4d:47:f5:bb:e9:
f3:6e:56:39:a7:c4:c9:6b:94:3e:13:f0:5c:0d:62:
80:fa:8a:d5:13:57:ca:34:bb:71:44:61:72:2c:b4:
ef:31:74:b9:25:26:63:28:4e:f0:f7:01:d7:74:47:
45:d0:14:a6:2b:53:12:c5:54:d9:a3:7a:b7:8e:ed:
4d:74:47:bf:c9:17:0f:d5:f1:09:2d:b4:3d:61:bf:
77:51:17:06:90:ff:d9:10:be:ef:b8:15:69:e3:e2:
19:70:47:16:0e:98:12:43:f5:91:a7:4b:24:28:3a:
6e:c4:98:24:b3:2a:44:cc:bb:40:96:76:13:58:82:
09:cd:dd:53:8e:e8:a3:8e:f2:92:7b:d6:e0:ee:3e:
08:06:ed:3c:61:a7:27:9d:22:4b:67:8c:40:8b:16:
48:14:77:f7:d4:55:0b:bf:1e:91:91:94:c2:a7:2b:
3e:cc:c5:06:64:44:61:4b:66:2b:ef:75:81:38:cf:
8e:e9:59:31:e3:91:81:a2:2f:b3:4d:7a:99:71:53:
71:fb:45:08:48:5e:e6:0c:95:80:97:1b:d3:b3:73:
ce:e0:bd:36:a5:76:b5:bc:95:99:f0:f6:cd:0d:ba:
eb:21:8f:d8:cc:37:8e:7c:b9:fb:0f:fa:a0:75:e1:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:68:44:BF:86:06:A5:36:D9:D3:C6:91:04:76:24:A8:50:87:D4
X509v3 Authority Key Identifier:
keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:02:71:57:41:99:73:d9:3b:c1:d1:4b:3b:55:7b:ee:af:db:
c3:97:6f:27:fb:68:4b:0f:04:4e:ad:8d:a0:9c:68:65:b4:bb:
70:98:30:3c:93:6d:86:63:88:02:d5:b1:69:73:0c:61:97:7f:
3c:6e:1c:57:a8:af:46:a3:78:f1:59:1e:bf:31:2f:a5:d3:78:
d5:a0:1c:d7:60:06:e7:a1:2c:76:b5:c9:b5:69:5f:38:26:74:
ca:38:b6:b4:92:0a:30:04:c7:8b:d4:99:10:c6:75:93:76:65:
b6:e6:9a:55:a2:d0:b1:eb:88:13:bc:f9:71:1b:b2:70:9b:13:
bd:3a:5c:ec:19:55:f3:ba:a6:c4:cc:6c:70:bf:fa:7b:27:f5:
59:a3:6a:b5:1b:9d:a1:b7:81:2a:8b:2f:04:b2:66:97:13:8a:
43:33:7c:7f:58:8d:e3:af:c1:81:7e:af:fc:e4:b0:99:2d:0e:
c3:59:be:2b:be:32:9f:24:64:df:8d:ca:d1:67:ec:30:fd:d1:
33:5c:f7:da:b9:02:ff:57:c5:f6:57:c2:5b:b9:55:17:5d:32:
f1:e8:e4:61:25:7b:3b:7f:96:86:9d:e2:23:37:6e:2b:58:e6:
9e:f6:66:f7:95:b6:cd:85:e1:a3:88:f4:b9:c9:b0:02:f2:52:
b5:62:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:04 2026 by rpki-client