Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: 1Q60UTOywyxHd/Vd+PV8noS1YNGEnuDh6nyEveDF2RA=
Subject key identifier: 34:5C:A6:71:56:68:9B:6D:8E:B9:AE:53:70:40:BF:5B:82:08:FC:11
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019F913576BDA5218DA6942EE6117153CEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 23:00:27 +0000
Manifest this update: Thu 23 Jul 2026 23:00:27 +0000
Manifest next update: Fri 24 Jul 2026 23:00:27 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: UL9o4Xf/LQ0ZCZA53ol+uM+tVBW5vG7sWsBJC61oE9o=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:76:bd:a5:21:8d:a6:94:2e:e6:11:71:53:ce:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jul 23 23:00:27 2026 GMT
Not After : Jul 24 23:00:27 2026 GMT
Subject: CN=345ca67156689b6d8eb9ae537040bf5b8208fc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:65:c3:ed:47:f2:c2:60:1a:ed:ba:93:fd:
ce:a4:85:ab:99:d2:7a:bc:85:fe:69:3e:ba:7e:2a:
53:be:9a:4f:2e:96:7c:70:f5:0a:36:4e:14:bd:6a:
6c:21:77:5b:2c:56:77:a2:7e:ef:e9:fd:69:21:8e:
07:18:60:51:ab:8d:e1:df:3d:17:ed:41:9c:f1:ba:
f3:00:2f:32:a9:5e:80:54:12:34:55:c7:2f:fb:af:
eb:5a:1f:e8:9a:bb:0b:50:8c:f8:7a:90:d1:92:cd:
6b:89:92:3b:ac:da:af:24:71:69:0b:cc:ea:0d:eb:
df:a6:23:af:ff:53:f4:59:5f:fb:f8:40:0b:3d:a9:
e6:c2:41:d5:d5:21:0b:1c:62:99:3f:b4:a2:3f:87:
2d:4a:0f:6e:21:da:42:e6:65:34:7d:2c:4f:3a:b3:
4d:7b:5e:08:2a:10:14:5a:02:81:2d:f5:93:b2:8f:
e7:bd:20:c7:ad:b5:50:af:fd:b8:b8:b4:e8:1e:5a:
a7:95:5a:d0:32:f3:75:e1:6f:03:3b:9a:93:a1:eb:
40:23:a1:c1:6c:a2:3a:48:92:fe:0e:b8:64:0c:7e:
87:98:4c:06:b7:30:9e:bc:4d:73:18:25:f5:b3:7c:
bf:b8:0e:dc:82:1a:66:a5:0f:83:84:85:0a:58:ff:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:A6:71:56:68:9B:6D:8E:B9:AE:53:70:40:BF:5B:82:08:FC:11
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:48:ab:3d:c1:e0:f3:79:81:37:af:4e:3c:06:f6:fa:6f:d1:
02:06:60:ea:0d:88:2a:7f:8b:bf:59:92:1a:f0:fc:26:3f:31:
43:7c:58:de:8f:93:8a:3f:9d:d0:9b:b9:d1:6a:17:29:de:a3:
f1:d8:f1:c5:64:2a:d8:1c:38:72:4d:e6:52:f9:ae:9b:e7:3f:
51:4e:ef:83:05:ca:eb:23:48:26:5b:d9:2c:4d:ea:9b:70:d0:
08:79:0f:94:62:8e:3a:ab:fa:85:11:c6:43:32:f7:1e:c7:e8:
18:23:68:5f:5b:a6:5a:58:1f:85:17:ca:03:ca:8d:9c:6a:dc:
f9:7c:aa:63:21:a3:88:35:1e:ff:e9:31:cb:97:b4:c9:a6:e2:
e4:f8:cd:d8:15:92:c1:5c:22:21:6f:d0:2b:76:30:3f:8c:1b:
fb:62:64:f7:11:5d:ab:24:84:a0:04:42:0e:d9:c5:ee:81:38:
fc:7b:01:ac:f9:8e:24:f0:1d:2a:e1:6f:b3:7e:d2:29:45:0a:
f1:65:ff:ee:81:cc:23:0a:67:d2:90:44:a8:20:e5:b7:05:69:
f2:42:d1:b1:85:5e:7d:79:ba:2c:48:47:60:c5:db:ea:80:a2:
0c:02:15:84:1e:be:5d:34:d9:c4:a4:49:03:a9:b4:5d:26:ea:
34:ff:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:56 2026 by rpki-client