Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: tCm2uOxegrh1GwNX13S68eXWt/f5qGtNhaU85K3XXvU=
Subject key identifier: 22:E7:FA:A9:6F:CF:A0:59:E8:3F:8A:55:83:5B:ED:16:63:25:DD:3C
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019F935AEB89F2833CEB6AE20A2B36CD1988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1636
Signing time: Fri 24 Jul 2026 09:00:36 +0000
Manifest this update: Fri 24 Jul 2026 09:00:36 +0000
Manifest next update: Sat 25 Jul 2026 09:00:36 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: ofPdx4SJIrGdEiOKPMWYdlHMnPuhZP6goBBaWjngjEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:eb:89:f2:83:3c:eb:6a:e2:0a:2b:36:cd:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jul 24 09:00:36 2026 GMT
Not After : Jul 25 09:00:36 2026 GMT
Subject: CN=22e7faa96fcfa059e83f8a55835bed166325dd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:c9:0b:47:a2:d8:82:8f:4d:f3:6d:90:23:
55:66:40:fd:6d:fe:44:03:b1:8d:0a:6f:12:7a:fc:
dc:b0:c4:f2:6e:b5:e9:e7:cc:fc:0c:d9:65:4c:cd:
94:3e:94:ff:49:9a:61:c8:11:ee:54:7b:9b:33:2c:
04:9f:f6:2c:11:aa:e0:c5:a2:6b:55:45:75:37:82:
ee:49:db:c8:a7:36:89:0a:5b:87:5c:3a:b6:25:40:
88:7d:e9:9a:d0:1f:99:a0:90:4b:58:cb:65:89:c7:
60:98:6c:1b:c5:09:29:e4:53:e0:1d:d0:38:29:50:
49:70:3c:45:2e:4c:f0:90:7b:20:06:f7:d8:4d:8b:
c9:66:32:3a:6b:41:a8:71:25:c9:42:cd:d8:e0:05:
ef:2d:d4:60:6c:6a:fe:a9:67:b6:73:40:27:31:b1:
c3:e5:df:b6:03:b6:16:8c:10:41:50:1d:33:21:38:
84:c8:4c:13:3e:4d:3a:55:2f:4b:b7:56:c6:9d:95:
85:16:32:96:b4:26:73:12:17:23:f5:e4:6f:f5:23:
9d:ce:29:f2:ee:88:f9:33:21:1c:d4:a4:b6:90:35:
19:3f:a5:8a:8b:66:92:2d:99:d5:1c:22:23:40:14:
34:01:61:c5:78:21:4b:c1:ad:4d:38:8e:bb:6a:dd:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:FA:A9:6F:CF:A0:59:E8:3F:8A:55:83:5B:ED:16:63:25:DD:3C
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b6:61:81:fb:bc:a5:7f:f9:72:58:91:d5:a8:66:80:de:24:
3f:58:ce:9e:83:f8:f1:f2:bf:ea:40:64:77:f1:2e:1e:91:f6:
d9:a5:79:ff:c3:85:09:c8:61:c7:a8:90:85:47:83:da:c3:c7:
44:6c:36:bc:7f:69:35:bd:1e:23:eb:c1:ed:83:ba:2c:43:4d:
b3:53:be:72:ca:70:11:0b:06:7f:9a:0e:d0:9b:67:2e:d8:9c:
25:ee:7a:77:10:48:74:15:2e:f4:02:bf:20:f5:a9:9a:96:ae:
95:5d:5a:1d:d5:2d:3f:e7:95:78:03:e7:29:24:aa:12:aa:ac:
cc:32:93:1f:ac:22:95:db:fc:22:5b:ae:4a:be:88:5f:6f:6c:
cf:6e:f8:98:1b:76:37:99:86:84:3b:51:34:4d:bf:73:0d:8f:
09:66:60:97:c2:36:bf:83:65:ac:48:b9:6a:45:a8:98:cd:93:
c3:fb:9f:9a:26:bc:79:39:2a:54:1d:6f:2d:d5:be:23:71:fa:
7a:fb:b3:ec:6a:10:97:32:b1:63:f1:67:97:ae:0b:44:3e:f9:
22:29:18:8c:40:0f:cf:a3:48:67:d4:95:33:0b:97:aa:5d:75:
d4:d7:0f:1e:8a:bc:17:2f:90:6f:4b:ac:41:27:42:e8:2d:75:
3f:e0:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:21 2026 by rpki-client