Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: mCNSki2de5I29PTuPza2Uk0Kpur45AATCeyX1RUwjMY=
Subject key identifier: 2E:B1:38:7F:64:35:43:15:F7:5A:98:1A:C5:FF:FB:3A:4F:5A:91:E6
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019F95802DFC225EED5207C44849A4639931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 19:00:33 +0000
Manifest this update: Fri 24 Jul 2026 19:00:33 +0000
Manifest next update: Sat 25 Jul 2026 19:00:33 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: HYMV/MURZzMbTZ0OlRFNiuEBqVDt7udtyH3D58PJwus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:2d:fc:22:5e:ed:52:07:c4:48:49:a4:63:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jul 24 19:00:33 2026 GMT
Not After : Jul 25 19:00:33 2026 GMT
Subject: CN=2eb1387f64354315f75a981ac5fffb3a4f5a91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:14:3d:90:f3:c5:4a:2b:50:2a:2c:28:fe:
a7:dd:e8:11:9d:13:c1:af:d2:3a:00:ff:5c:9c:e8:
ec:07:78:34:91:6a:09:05:9c:41:85:4c:12:41:ee:
1c:09:65:39:16:32:7c:4f:d2:cf:a9:b6:05:36:4d:
9f:0e:b6:d2:b4:ca:2d:7d:0c:b4:46:4d:82:c8:2a:
fc:ec:19:0a:98:f6:70:25:3a:a7:3b:11:c7:92:3a:
cc:6f:ef:86:30:65:3c:d1:7c:40:ae:87:aa:e4:fc:
af:e6:8c:38:0e:69:0b:25:9e:4d:75:01:f7:8d:7a:
79:a9:d8:34:74:26:58:b2:cd:56:78:95:4c:ff:ff:
73:a3:28:a8:89:17:af:cc:6f:2f:33:32:1f:c5:d3:
d8:c8:3d:5b:d5:2b:68:41:00:b2:33:8f:ff:87:62:
69:dc:09:df:93:cb:13:92:99:b8:9b:93:6f:01:83:
e5:eb:5b:78:d3:83:63:2b:91:77:e1:bb:77:43:0a:
ce:5b:08:f0:4b:94:f8:1e:e3:1b:b5:33:da:46:3a:
28:bd:2d:fc:7c:de:57:89:7d:d2:a9:cb:6b:2e:78:
76:4a:ee:46:b5:0a:f3:cf:fe:0d:61:07:0c:a3:2f:
12:a3:a6:8e:b4:5f:8f:4b:a3:eb:e7:e9:7a:c3:b5:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:38:7F:64:35:43:15:F7:5A:98:1A:C5:FF:FB:3A:4F:5A:91:E6
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:c7:d2:55:06:e2:a3:4f:de:f7:78:5f:f9:6c:8f:be:1e:
c7:3f:1d:bc:e0:82:75:70:f6:b4:c5:15:a1:ad:56:73:b2:4c:
30:8e:62:ff:19:71:16:a4:0d:41:cc:c7:73:65:b1:31:7e:4c:
2b:e0:b2:1a:1f:fd:a8:c3:23:27:08:e8:fc:a2:df:a5:52:c3:
28:a6:8e:2d:32:89:bc:d1:61:1b:64:87:01:43:97:5e:c2:f0:
03:f4:52:a6:22:b6:eb:bf:52:89:7c:47:a8:02:78:e2:eb:bf:
cb:97:46:86:97:5a:0b:bd:04:2e:59:27:3a:a4:15:e9:c8:9d:
50:a1:fb:96:21:cc:aa:10:ca:97:a7:3a:b0:67:46:e9:02:3e:
60:44:e0:8b:c3:8a:eb:82:94:0f:cb:b5:b8:8c:d5:ab:1e:67:
e7:e8:6d:d0:f8:3a:52:2e:63:e8:36:17:0c:c6:7b:d4:84:7d:
2f:c8:9e:96:d5:9a:2a:bf:58:9c:a8:67:8f:d1:3b:e3:9a:6a:
81:19:11:f7:92:92:46:6a:d0:ee:57:34:87:5d:a4:36:95:bb:
12:4c:58:91:ca:3b:ad:f6:0a:29:c4:34:cc:f5:ef:03:ea:28:
66:10:74:2d:aa:5a:e0:33:2c:01:bb:ab:04:91:8c:92:ec:eb:
df:c2:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:34:16 2026 by rpki-client