Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: a7fxtQ20NjT3cJPPJpyymIZ2lrtsaa8Ms14ieFaSs2c=
Subject key identifier: 35:39:15:EE:C4:91:42:0E:26:3D:3C:5A:C7:74:0E:E3:09:49:67:4C
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 019F91A3D275AB2826EBBAF144B8FD485AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 01:01:00 +0000
Manifest this update: Fri 24 Jul 2026 01:01:00 +0000
Manifest next update: Sat 25 Jul 2026 01:01:00 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: Tu88HX+VsQ2GiZeOQANYwmyvY1iBOvEAMLnYZLNXacQ=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d2:75:ab:28:26:eb:ba:f1:44:b8:fd:48:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Jul 24 01:01:00 2026 GMT
Not After : Jul 25 01:01:00 2026 GMT
Subject: CN=353915eec491420e263d3c5ac7740ee30949674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:65:1e:88:de:b1:d7:19:4f:e3:a9:bf:7c:
ea:ef:fb:8b:7f:79:73:6e:7e:f3:d3:9f:c2:88:4e:
a6:d4:db:93:24:d9:e5:e5:ec:a9:26:40:fc:ec:11:
a0:fb:36:cc:d8:ed:fb:6a:9d:55:fa:1b:3f:43:e8:
86:75:33:61:17:1e:a9:12:d7:47:ee:8d:73:b6:83:
8d:d3:16:c0:bf:be:f1:71:7b:9f:41:c4:9d:86:aa:
d4:36:a7:31:83:82:b2:46:e9:f7:5c:b7:be:d3:13:
1b:63:c5:07:1f:c2:e8:2d:c4:14:05:99:11:e0:6b:
3e:bc:c9:6e:90:82:f3:fa:86:47:4c:89:1c:53:83:
da:53:7a:88:94:5c:c4:36:35:ce:9a:3e:ba:23:18:
42:9f:ed:bb:42:f5:7b:24:e0:88:12:67:96:1f:bb:
50:a1:df:d3:b2:94:7a:cc:57:cc:e4:78:56:1d:6d:
cb:91:db:17:d5:36:cd:c1:a6:65:60:13:03:fb:bc:
26:e1:cc:84:cf:bd:0c:92:ba:f0:53:8e:56:c4:b9:
4a:e8:c7:9a:8f:73:11:07:d9:09:1f:f1:bf:96:64:
11:0f:b7:7a:fe:fb:7d:85:5c:95:bb:13:29:59:02:
26:3f:8d:ff:43:7a:78:af:0b:4f:e9:0a:9d:18:77:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:15:EE:C4:91:42:0E:26:3D:3C:5A:C7:74:0E:E3:09:49:67:4C
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:c7:91:a8:ef:b7:ac:0c:75:5d:ba:8e:e2:41:f9:71:c7:
a7:66:6a:69:de:7e:e6:83:1a:ee:ad:f0:b3:b0:5b:82:89:1d:
99:57:f1:d3:19:92:b7:96:5a:cc:02:12:12:47:a3:e3:58:6b:
df:bf:f9:c0:22:1c:f1:7e:27:c0:53:2f:12:c5:f4:4e:78:8d:
c7:60:48:09:ce:48:67:32:5f:8c:31:f6:40:03:67:2e:eb:f7:
e7:72:b1:97:08:89:b9:e1:43:78:1a:0a:00:de:8a:74:1b:5b:
e6:18:d2:c1:75:a8:36:63:28:81:2c:14:45:4c:80:35:b3:23:
a2:a1:d2:cd:79:93:e1:fd:26:55:bd:62:dd:f4:e5:4e:c9:50:
ca:95:51:60:d3:76:54:9a:17:75:78:c3:41:c5:e3:8e:91:28:
8c:eb:43:3a:1b:b1:83:ac:ae:a7:84:02:5e:88:46:a1:0c:2e:
36:77:0a:66:ca:44:2d:f6:6a:4f:49:36:80:c9:e0:3b:52:58:
05:f0:90:ac:75:6b:3a:bd:0e:34:06:7d:6c:a1:ce:87:60:09:
01:6d:fe:b3:99:17:ab:17:4d:4a:a2:7c:0b:6f:c7:f7:19:07:
a5:2d:a8:8d:d2:3b:25:a7:02:2f:6e:20:78:ea:2e:9a:1e:e6:
a8:fe:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:01 2026 by rpki-client