Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: AJBHs9ISHsj38pUXhWXAC0rkP1avZoV/bz5gdZvVuFI=
Subject key identifier: D8:3E:2B:39:CC:D8:56:A4:72:3E:BB:10:2A:06:01:B5:85:E9:0B:81
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 019F8F7EAA77628297BF829BFA2EDCEE46C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 02ED
Signing time: Thu 23 Jul 2026 15:01:10 +0000
Manifest this update: Thu 23 Jul 2026 15:01:10 +0000
Manifest next update: Fri 24 Jul 2026 15:01:10 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: vcY4WvFmdG3QaBStSQnXJ0Q3rRib5etByuYtg8UM7bY=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:aa:77:62:82:97:bf:82:9b:fa:2e:dc:ee:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Jul 23 15:01:10 2026 GMT
Not After : Jul 24 15:01:10 2026 GMT
Subject: CN=d83e2b39ccd856a4723ebb102a0601b585e90b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:fb:25:6d:5d:ec:83:f8:00:e5:1d:9e:71:
91:2b:60:c7:3f:97:fe:d5:5f:ed:f0:76:ef:7d:6e:
a0:d7:bb:38:fc:87:bd:3c:ee:f0:fc:06:3f:20:c7:
0c:77:e4:ae:ce:fa:87:95:08:ba:d7:96:bf:1b:85:
0a:96:ba:a1:d1:e4:2b:6d:58:54:39:a6:4e:4c:c7:
04:4b:4b:59:dd:a7:bb:d5:fd:1a:00:65:86:7c:2d:
e6:c0:13:75:cb:88:fd:62:c6:9b:60:a3:aa:6c:70:
c1:da:d4:03:7f:03:e1:f8:c0:7d:52:5c:ed:3d:68:
7f:b5:db:7a:3d:ba:c8:be:5f:97:0e:69:c0:b9:b2:
2a:93:10:fd:8e:35:51:b8:84:8b:df:e3:db:76:68:
a2:ea:50:9e:97:4a:51:1e:66:4d:67:6f:e3:82:3b:
7e:55:5d:5f:b6:f8:e9:0a:8d:eb:07:b1:4f:55:81:
9a:d1:ad:b4:ac:5a:dc:02:25:91:96:95:67:9e:88:
42:25:5b:5f:17:60:75:32:06:d6:7f:d5:da:a1:2d:
74:73:d5:a3:b0:22:32:e1:32:03:45:d5:b5:03:93:
f8:12:15:11:62:de:c1:a3:58:8b:9a:6c:ce:c2:ce:
53:21:96:52:fb:28:8e:0c:07:96:2c:12:2a:0a:f5:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:2B:39:CC:D8:56:A4:72:3E:BB:10:2A:06:01:B5:85:E9:0B:81
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:f3:d3:95:b9:ab:5a:fa:5f:cb:ea:97:a5:c9:4e:b4:74:
07:9b:51:a8:6c:5b:13:27:78:d7:4b:b7:ac:27:b4:ce:d6:3d:
7f:82:42:28:6e:36:90:a1:90:5a:6a:00:04:7b:6b:59:8d:42:
b9:8a:3a:6e:72:29:c5:cb:28:bf:ba:23:14:d8:8e:f5:4c:5b:
98:b2:1a:aa:6d:99:b4:27:19:ae:34:1c:51:4a:86:14:b8:9e:
eb:d6:45:5f:b1:bf:ed:eb:d5:26:44:ac:4b:f8:a6:77:11:42:
5c:48:be:7e:fc:c9:f1:4f:3e:12:e6:b1:80:34:a8:f0:fb:24:
85:35:18:6f:cf:63:42:96:87:40:83:b6:44:60:23:26:72:ee:
82:da:d3:30:53:86:fd:d9:6c:d2:ff:3c:29:c5:3f:63:64:3b:
c9:d4:26:e7:c0:40:3f:5f:f1:b0:01:8e:b8:19:28:9e:79:c2:
09:47:5f:6d:49:cc:d7:cc:06:70:fa:02:25:3b:de:57:de:01:
b3:32:d5:e9:44:0d:a8:fb:a4:c7:11:5a:bf:95:ed:81:34:d1:
45:57:88:f0:b4:c9:0a:a7:50:d6:d2:bd:85:87:1e:3a:ac:ca:
24:d1:7f:e6:89:18:a8:c0:6f:e2:2b:6c:b7:a4:d2:af:bd:47:
8c:87:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:13 2026 by rpki-client