Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: JWS2uArUejVIF+jSiU7z44E5lnx6ztpT2fdObNnVdrU=
Subject key identifier: F4:99:B1:B2:C0:8F:0C:90:AE:D7:B3:F0:2C:91:19:E8:77:C5:17:7D
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019F916D5DC5D79A4C7B5D840A08174E0D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1635
Signing time: Fri 24 Jul 2026 00:01:31 +0000
Manifest this update: Fri 24 Jul 2026 00:01:31 +0000
Manifest next update: Sat 25 Jul 2026 00:01:31 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: q7tA1WQlZEfG1tCJ6DRZjGH2ySCtBOoatJj+1aJ9yGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:5d:c5:d7:9a:4c:7b:5d:84:0a:08:17:4e:0d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jul 24 00:01:31 2026 GMT
Not After : Jul 25 00:01:31 2026 GMT
Subject: CN=f499b1b2c08f0c90aed7b3f02c9119e877c5177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:5a:95:eb:fe:bd:70:4a:77:12:eb:93:79:
fa:82:56:29:0e:55:79:9d:f4:f8:4d:e8:ee:fe:d0:
ee:5c:2e:e1:8b:e9:96:b1:ee:b6:f7:3e:0b:d7:32:
18:94:9a:bc:6d:25:35:a7:c6:b6:88:98:da:a2:bf:
f6:bf:a6:8e:d9:24:1d:93:93:27:d7:33:45:8c:8d:
f7:d2:89:7b:d7:11:5c:d9:af:c5:80:f8:47:22:94:
00:2d:7c:98:a5:05:6c:a8:6a:c7:7f:89:5c:a4:b7:
9f:15:8b:92:c3:25:b1:fc:c2:f7:f8:a8:39:44:5a:
ae:f2:3f:ce:c9:c6:71:58:c8:d0:81:9a:ed:1a:2f:
46:00:17:30:8f:a9:cc:fc:ad:2d:67:8c:c9:4d:dd:
68:5b:24:56:ec:1f:2d:d4:2f:bf:0b:fe:07:f1:5f:
dc:3c:a9:0f:92:0f:4d:d5:3c:d7:5c:b2:64:92:29:
da:79:4b:97:4a:10:97:0c:cf:dd:e3:c6:0b:2c:63:
c0:f7:0b:4f:be:d8:58:9d:c9:89:84:f0:3c:39:52:
2f:a5:d3:b7:f5:9f:98:f5:64:d7:68:ec:fb:b6:e2:
75:e5:70:8f:bd:85:32:d3:26:7c:7d:49:d6:fb:80:
39:c6:95:bb:67:21:f2:b6:6d:ee:9a:1c:1c:53:b8:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:B1:B2:C0:8F:0C:90:AE:D7:B3:F0:2C:91:19:E8:77:C5:17:7D
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a8:31:c9:73:db:1c:f1:00:de:06:51:e2:d3:30:08:21:61:
f5:26:b6:ed:4b:2a:ca:26:1f:5c:44:8a:4b:0e:69:48:16:f4:
81:68:0e:a3:0a:9b:97:51:5e:e0:73:af:7c:ba:d2:94:01:59:
28:70:ee:85:64:2b:1b:2b:b3:3e:c7:7a:d3:58:96:0b:48:4f:
10:c4:7a:cc:4e:8d:64:ec:1b:fa:b8:c7:20:de:3b:98:45:b2:
87:c8:22:88:55:ca:c6:2d:c5:57:2c:69:8b:fd:8d:6e:ef:53:
13:62:e9:3b:e2:08:8a:9e:cc:09:46:ef:80:6e:14:b4:00:a6:
39:ee:f0:84:e1:3e:73:f9:70:dd:cc:ab:9f:c6:26:33:04:10:
2e:6e:85:01:3e:88:75:ab:23:6e:8f:1c:ad:9d:ff:62:0f:38:
f8:fc:17:7d:2f:a0:20:f0:13:c5:bc:bc:9d:7e:2e:c2:d1:d0:
bb:bc:31:42:6b:21:75:3a:b7:0d:b3:32:be:71:0f:7d:21:97:
f2:86:c0:d8:78:d4:bc:c9:20:b4:28:63:f5:19:12:69:89:46:
c1:96:f9:01:4a:48:8d:b3:54:05:57:fa:88:b8:a0:07:13:d8:
0a:d4:6d:b8:fb:bb:91:6e:7a:a3:cf:4b:0a:5b:5a:8f:68:72:
95:b6:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:52:48 2026 by rpki-client