Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: vE/h8E0GtMRCRie4hA3JO7VwRVUf+k/wytvIX6gqtj0=
Subject key identifier: 98:79:F2:CB:7B:EC:2C:66:C0:03:44:28:52:A1:CC:AB:DE:18:6E:75
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 019F916C9BF0D03F1D75ACAF9FDD82FCAEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:41 +0000
Manifest this update: Fri 24 Jul 2026 00:00:41 +0000
Manifest next update: Sat 25 Jul 2026 00:00:41 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: s/YKf/SPaYsBwoAvDHSFTEff/O81ysGiKxuh2rbACT8=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:9b:f0:d0:3f:1d:75:ac:af:9f:dd:82:fc:ae:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Jul 24 00:00:41 2026 GMT
Not After : Jul 25 00:00:41 2026 GMT
Subject: CN=9879f2cb7bec2c66c003442852a1ccabde186e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:b5:ee:7e:34:ef:80:8e:c5:5d:00:99:7f:
da:33:c1:f4:f6:fb:98:58:7b:58:65:e3:a0:a9:5e:
7d:10:0b:79:de:f8:23:33:6f:dc:7f:44:d5:d7:ff:
6a:73:4d:3a:06:65:f7:e1:6d:40:d6:5b:16:59:f5:
de:ac:de:32:7a:21:87:6d:f1:14:37:a4:b5:5d:1b:
f5:f7:67:f1:76:f7:d7:fc:93:b8:3e:84:f3:69:fd:
c6:0b:db:8e:4a:f1:73:a8:28:e2:ab:50:cc:60:28:
c0:a2:8f:9e:a2:02:40:ab:08:4c:03:a9:12:b5:3d:
31:a7:35:3b:d6:b9:0c:56:3a:67:31:33:8d:12:bd:
d2:b0:d1:05:b6:e4:db:14:04:d1:17:95:b6:9f:73:
49:c3:b9:93:cc:cb:d2:5d:84:03:c3:b5:cd:9b:a7:
ea:aa:7b:3f:10:53:fc:02:30:ff:2c:ad:21:57:76:
c0:bf:1e:2c:bf:fe:56:3b:ea:c1:d3:43:96:bf:17:
8f:75:65:87:0a:89:89:26:0d:cc:4e:95:b5:84:17:
e3:23:7d:de:ba:62:54:6f:1e:ce:2a:7d:d9:3b:87:
e6:bb:e1:32:09:d5:80:5c:75:1d:d1:92:4f:16:e3:
b5:40:2b:b0:82:82:56:7c:df:9c:55:56:5e:8d:a7:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:F2:CB:7B:EC:2C:66:C0:03:44:28:52:A1:CC:AB:DE:18:6E:75
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:82:16:ab:e0:08:f2:a0:61:f6:c5:ac:f7:7a:bd:5d:59:20:
14:09:67:bc:00:c5:df:b5:3f:c0:db:06:68:65:ca:6a:6b:f5:
30:fb:40:c9:42:5b:7c:c0:db:6b:cd:78:41:2b:1b:eb:32:de:
f8:15:9c:05:08:63:25:94:da:56:e3:5c:cf:14:15:29:c3:53:
8c:c5:49:72:ca:25:70:2b:d2:70:c1:b2:7e:f6:0b:10:70:2f:
b2:c3:e7:92:02:66:b1:e5:b7:77:a5:92:07:a3:41:68:58:5e:
3e:e4:29:06:d4:c6:a0:5f:35:5d:4c:33:99:04:e4:d4:86:ee:
72:4a:fb:bd:ce:34:6a:a6:f1:6b:9c:f0:7b:eb:a1:25:74:a9:
5b:67:5d:8c:5a:b4:54:b9:bf:04:5e:01:c6:9c:3a:f1:50:86:
30:1d:82:a8:d4:47:09:20:ca:e5:58:8f:f2:36:8e:8b:bb:48:
9a:04:c4:a8:e4:1b:68:1a:af:4f:99:6a:2e:74:24:a2:9c:a1:
60:a1:c5:04:36:e0:f2:1f:6b:f7:29:0c:1e:0b:9a:4a:bc:b5:
32:7a:72:94:f4:7d:95:df:b2:e3:c6:2a:21:92:1e:4b:a3:c3:
0b:12:c4:3c:8e:f6:1c:a2:6f:47:5a:8d:77:ad:04:42:38:e4:
03:6d:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:20 2026 by rpki-client