Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: aQWeDxKQX++x46NiWtWq+gv8/5jOeFRomKAUE+TQ2do=
Subject key identifier: 8B:97:E5:88:81:07:35:4A:C1:57:C1:CF:73:9C:F6:A6:2B:20:D7:D6
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019F927EDBBC0F27D2E9A5CCB7BC14B229F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0EE4
Signing time: Fri 24 Jul 2026 05:00:15 +0000
Manifest this update: Fri 24 Jul 2026 05:00:15 +0000
Manifest next update: Sat 25 Jul 2026 05:00:15 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: KVl+uz/OmqTF6iBikroX5kwQEQuG7vZ04rH45FMiMTM=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:db:bc:0f:27:d2:e9:a5:cc:b7:bc:14:b2:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jul 24 05:00:15 2026 GMT
Not After : Jul 25 05:00:15 2026 GMT
Subject: CN=8b97e5888107354ac157c1cf739cf6a62b20d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:3b:ca:fd:e8:a5:17:03:0a:ec:17:2b:55:
ce:41:f5:48:01:dc:7b:b9:8f:d8:69:a5:04:6f:fa:
ce:42:68:9d:bd:c3:8a:c4:50:c1:3c:25:b7:48:3c:
ed:c9:35:6a:49:b6:8c:79:03:0c:0a:14:50:12:16:
f7:76:db:4e:24:0c:e6:da:4e:85:50:fd:57:e7:9f:
52:f2:bb:95:4b:69:68:4f:f3:da:36:b0:18:1e:0c:
0f:5e:9a:48:c3:e5:d2:52:92:7c:4b:fc:8c:1b:d6:
ba:ac:20:53:48:62:25:51:f3:0a:fc:30:d1:16:a3:
b3:9a:79:53:75:b5:0e:fd:95:ce:27:93:5c:d6:58:
5d:4a:dc:48:cb:f1:ec:84:fe:6a:57:78:2f:aa:9f:
0f:f7:65:69:4f:06:89:95:a1:b4:29:8f:74:dc:62:
b8:0a:81:30:25:fa:42:52:df:f6:06:70:30:c1:3b:
73:d8:45:9b:0a:43:82:2e:1a:d3:00:80:e0:d9:20:
00:1b:54:13:56:39:76:48:8c:8a:4f:0c:cb:e6:5c:
2f:76:4f:6f:5f:66:56:fd:0f:ba:e3:da:41:49:f1:
33:91:5d:f5:7f:4a:fa:a9:6e:14:59:8b:d5:d8:4b:
34:75:4b:39:2a:d9:d0:8c:ae:ca:3f:bd:cd:1d:00:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:E5:88:81:07:35:4A:C1:57:C1:CF:73:9C:F6:A6:2B:20:D7:D6
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c0:e2:24:e5:02:24:9a:c7:2c:65:80:f2:f9:03:06:6e:a7:
37:be:80:1e:0a:c7:cb:c5:fd:d0:86:50:b2:fd:a1:5a:c3:19:
ec:ba:ce:60:e4:97:b0:25:61:1b:db:c4:8b:56:d8:b1:93:8e:
45:35:99:36:16:c9:dc:48:6f:17:20:10:f0:90:9e:05:3e:c2:
45:c3:fd:d6:46:12:ae:04:d2:83:d4:99:64:da:ca:64:9e:e5:
fe:5e:70:4e:26:f3:ae:ce:00:17:1e:13:37:aa:30:77:ee:ff:
9c:11:ca:7c:d4:78:d1:4a:06:9c:6a:9a:be:85:6a:a4:fc:5e:
63:f5:80:80:fd:94:e8:33:18:5b:d5:ab:4c:0e:62:27:51:6e:
f7:51:e4:3c:7b:e3:a7:b3:33:f9:38:c0:c0:69:f1:ad:e7:08:
98:db:77:d8:c4:eb:b9:2b:5e:2e:af:3d:ce:0f:01:74:35:32:
b4:cd:5c:5f:50:e6:2d:a3:6b:29:fe:a1:7d:98:01:dd:83:ec:
57:5a:e2:7c:0f:78:85:d3:fd:bd:94:9e:b2:01:b0:6c:96:cd:
80:33:21:b9:4b:f2:1a:c8:a8:92:1e:e8:80:23:7c:9f:23:81:
29:a2:5c:79:d0:ec:6b:ea:1c:54:06:53:aa:0e:2b:7c:d2:3d:
f4:0c:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:15 2026 by rpki-client