Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: fuxSK/z+aGrKPST7IDNc5qthJqJ6zGOXYq4/cYB2qeE=
Subject key identifier: 9D:7C:D3:84:F3:8F:11:C1:4F:D2:CE:1E:14:CA:40:50:7F:E9:0D:3B
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 019F93C932F9DD03AA73FDAD977D52643A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:01:04 +0000
Manifest this update: Fri 24 Jul 2026 11:01:04 +0000
Manifest next update: Sat 25 Jul 2026 11:01:04 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: cxmDjZkY8jhZJJCQK5EZ52dV0Fr70esh9txb6lqkW30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:32:f9:dd:03:aa:73:fd:ad:97:7d:52:64:3a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Jul 24 11:01:04 2026 GMT
Not After : Jul 25 11:01:04 2026 GMT
Subject: CN=9d7cd384f38f11c14fd2ce1e14ca40507fe90d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:51:11:b0:0e:27:b2:df:37:bf:07:92:81:
0d:64:19:fe:cf:1e:40:96:80:81:6d:51:1d:b4:c3:
60:95:39:7d:0a:d4:f7:bf:37:cf:30:71:e5:a7:de:
5c:3d:b5:6a:c2:cc:aa:00:9f:81:6f:d3:9d:18:c4:
18:0a:41:96:f2:ae:00:3c:01:1f:80:40:7e:99:8a:
1e:09:c1:9c:63:2b:0c:11:1b:bb:c5:9f:00:c9:10:
06:cc:be:fa:7e:2f:7c:3e:8e:9a:85:db:ce:c0:1b:
9e:88:67:77:34:81:d8:f2:92:a2:d1:5e:8b:85:57:
ff:16:fd:88:91:3d:99:a8:78:0f:04:70:7c:7a:be:
50:66:8f:e0:c8:ad:05:69:50:1c:87:26:d1:55:32:
ef:94:46:47:06:75:40:ef:00:9c:b4:7b:ab:30:bf:
af:6c:64:58:73:fa:a5:11:74:b9:78:63:c9:f0:89:
67:7d:8a:fd:5d:4e:c3:86:af:62:32:87:8e:b8:23:
2c:72:2e:90:16:ba:1a:9a:80:fd:7f:44:3b:76:80:
c0:99:28:a5:ca:50:a9:b8:59:b5:3b:d2:4e:b6:ee:
d9:fb:50:6a:f5:d6:fe:8b:f3:f1:9c:85:e9:b5:24:
2c:35:dc:22:06:8f:32:9f:73:e7:85:71:42:91:6c:
aa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:D3:84:F3:8F:11:C1:4F:D2:CE:1E:14:CA:40:50:7F:E9:0D:3B
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:e2:52:5b:a4:be:80:cf:03:c3:c7:ce:91:0d:f4:f3:98:
95:69:d5:c5:12:b5:da:29:56:18:97:56:74:48:9e:e1:66:21:
ca:b0:4c:84:6b:1d:0c:28:8d:6e:21:c6:5a:a0:21:5d:e3:f7:
97:22:0e:d7:2b:11:54:95:c6:4e:4f:8a:85:a7:84:ad:5d:2f:
cf:a1:a9:7f:d7:42:e0:a2:8a:d5:1e:94:c4:14:74:d5:3d:2a:
17:0f:3f:59:d4:3c:0e:2b:7b:56:78:51:5d:0f:d7:7d:4a:b2:
9a:40:df:7d:35:2e:5a:04:1b:0b:65:ef:b1:6f:8d:d0:e0:c6:
ca:f4:99:0b:c3:2b:b3:19:c8:13:d2:8d:b4:a2:4e:2c:7d:ba:
bd:60:e7:60:ee:09:ef:be:73:28:f1:fb:61:85:2b:56:f9:46:
23:4f:44:37:d0:3f:74:32:99:08:1c:3c:af:21:72:b3:8a:41:
6e:41:d9:51:f7:1e:5b:46:56:64:a7:19:c5:39:dd:19:0b:f7:
b1:72:57:e7:cb:85:28:d5:54:96:c4:b2:17:61:07:2f:90:ac:
b0:d2:25:6d:80:86:49:3f:c5:fe:37:df:0f:f9:4a:09:fc:ae:
46:55:03:34:ea:e7:1b:dd:1e:89:fd:91:26:f8:43:db:91:0b:
00:24:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:34 2026 by rpki-client