Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: +3y3UvNynk1BZFb1M5QYf/QXZcDjr6bz+JuX9LA8tEs=
Subject key identifier: C3:61:B0:C5:86:B5:85:F9:FF:DA:5F:25:AE:2A:AA:07:16:30:C2:9E
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019F93C9265E7C9FB87A39FB84448E5AB69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0E6C
Signing time: Fri 24 Jul 2026 11:01:01 +0000
Manifest this update: Fri 24 Jul 2026 11:01:01 +0000
Manifest next update: Sat 25 Jul 2026 11:01:01 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: hnsGfsxkUnGPnx+vr+U6bz63G3kKnFGe5NSntshuf0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:26:5e:7c:9f:b8:7a:39:fb:84:44:8e:5a:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Jul 24 11:01:01 2026 GMT
Not After : Jul 25 11:01:01 2026 GMT
Subject: CN=c361b0c586b585f9ffda5f25ae2aaa071630c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:c6:9a:8b:b6:f4:90:8c:cb:8b:39:40:cd:
56:21:ae:0f:f2:1b:cc:31:dd:d8:eb:99:13:ca:be:
09:08:6c:53:be:cc:ac:c8:40:0b:4e:e4:06:96:23:
6f:14:62:70:62:9b:51:3b:bd:50:6b:d7:0b:da:d6:
94:43:f5:fb:68:0d:93:78:9c:00:a1:e4:e8:5a:6d:
30:4f:33:ff:e7:55:68:d1:c8:58:9d:2f:f8:06:f6:
9c:7e:01:94:0b:e1:e3:1f:5e:29:cd:c6:28:a5:10:
34:5f:23:ff:87:11:9b:78:aa:b7:84:f1:c3:00:5c:
d4:1d:3a:2f:e4:3a:af:d2:cf:dd:fc:05:ce:7e:e2:
09:4c:0b:47:32:03:92:02:39:92:7e:f5:7e:03:03:
37:ef:2d:c8:99:a4:52:8f:e0:6b:65:58:cf:74:e8:
2c:de:40:b0:36:ca:18:c0:ee:11:2a:52:ce:63:6b:
60:b3:1a:03:b2:07:be:ee:f0:85:2c:84:fa:ba:0a:
24:1f:f7:fa:34:31:1e:dd:3e:09:32:82:24:dd:27:
01:fc:64:1e:86:aa:56:86:be:b9:27:2c:8e:0d:3f:
eb:db:db:40:1e:17:c6:6f:41:d7:e8:6d:aa:97:ed:
48:e8:a4:c9:32:1c:7a:c1:aa:f0:bb:c7:42:ba:3e:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:B0:C5:86:B5:85:F9:FF:DA:5F:25:AE:2A:AA:07:16:30:C2:9E
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:dd:f1:1b:07:08:62:0e:7d:9b:01:a8:70:64:e4:f4:5b:
37:a8:54:e6:47:ca:49:97:4e:24:87:c3:6b:4e:ab:09:2a:9b:
51:56:3d:d1:b9:6c:ac:73:e0:b3:fc:cd:7f:a7:7e:4f:75:7a:
0c:58:85:fd:81:1f:24:5b:32:2e:dc:b5:0c:0f:9b:de:65:b8:
20:73:17:5f:5f:3e:d6:15:14:31:8c:eb:81:bc:9c:8f:c1:73:
99:cb:fe:54:a8:e0:4e:7b:59:8c:e9:37:43:3e:25:9b:d8:0e:
05:96:d3:92:bf:3a:aa:64:67:5b:08:e4:3d:cc:43:aa:42:e6:
12:1d:4e:e5:6a:ad:8f:bc:40:73:9d:66:42:09:0b:53:dd:3c:
1d:d6:ca:30:8f:80:9c:87:44:8f:b7:92:e5:06:9f:2c:64:a6:
67:68:9e:7e:3e:0e:37:c0:c6:ab:7a:32:f0:f5:10:18:e8:32:
47:aa:af:b5:8f:6a:89:04:ad:36:d8:28:c9:17:6a:34:6a:8f:
46:74:d9:55:89:e8:9c:14:6b:f8:66:69:91:61:3f:d4:a8:b0:
eb:a5:c5:9c:d5:01:73:8f:d7:c9:fa:cb:bb:0a:56:27:de:ca:
13:ce:49:bc:e1:c0:d8:ed:ac:8b:af:51:66:0c:08:54:b0:5c:
15:0c:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:47:00 2026 by rpki-client