Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
File: kpbYTmTVXsgSR2-4BvD-daCL-ys.mft (raw, json)
Hash identifier: JgnhaFJWziqMarL/Z5gt6MMJercWfieBv1A0wcoBMow=
Subject key identifier: 1F:33:85:78:8D:C1:92:01:EF:80:E2:65:0C:86:6C:84:35:2B:22:8F
Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
Certificate issuer: /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Certificate serial: 019F93C9852073A901F8C34867A8FF809380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:01:25 +0000
Manifest this update: Fri 24 Jul 2026 11:01:25 +0000
Manifest next update: Sat 25 Jul 2026 11:01:25 +0000
Files and hashes: 1: WMTxNqy5dxe24um7JtSXmDnNRnM.roa (hash: TxZKxHcS8Fj+JFe1cwBosTBaRiZeeZ2HacumzoOW+L8=)
2: kpbYTmTVXsgSR2-4BvD-daCL-ys.crl (hash: rSNR8AeYoL//7D1TQ9NHgRw7Ec2PseIOpjKftIbRbso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:85:20:73:a9:01:f8:c3:48:67:a8:ff:80:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Validity
Not Before: Jul 24 11:01:25 2026 GMT
Not After : Jul 25 11:01:25 2026 GMT
Subject: CN=1f3385788dc19201ef80e2650c866c84352b228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:aa:4c:9e:bd:92:1b:8b:a9:2b:dd:32:19:
34:1f:34:34:2e:c9:b6:73:7e:07:a8:f1:d4:93:0c:
88:9a:c1:d8:27:26:3f:ee:f3:13:a0:21:45:fa:0c:
f6:5b:a8:36:cf:e7:58:f9:98:ee:f5:f4:40:c1:cc:
de:f4:87:7c:7e:44:ce:cd:76:1b:60:b2:cb:ef:14:
9e:2d:8b:be:db:57:2a:e4:49:4c:69:d3:71:f0:25:
17:a5:6f:1f:3c:76:fa:b2:6a:87:b6:01:8a:75:69:
d0:06:42:09:fd:83:83:a9:da:d0:c7:c9:1b:68:3a:
7c:96:9a:74:99:13:d2:42:74:b1:b1:56:ef:86:48:
6e:35:36:1b:9e:15:20:1a:d8:04:21:d6:10:bc:1f:
78:0c:7a:28:92:56:29:57:ec:e0:33:74:01:bc:69:
03:c0:11:29:32:3b:1c:67:c5:95:66:79:96:cc:7e:
2d:d5:05:56:08:c3:d2:a8:6c:10:fb:c7:70:ec:77:
f2:77:90:eb:4c:e4:42:ba:e7:5f:f4:e7:49:e1:5e:
63:3c:a3:53:79:f4:fa:b3:62:24:9e:1d:4c:14:c2:
78:9c:24:98:72:d4:b7:48:ec:8b:82:cd:cb:39:a8:
94:35:67:91:57:77:38:b7:34:ad:58:db:2d:19:f4:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:85:78:8D:C1:92:01:EF:80:E2:65:0C:86:6C:84:35:2B:22:8F
X509v3 Authority Key Identifier:
keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:0b:1f:5a:e0:2a:47:ad:25:6b:be:f0:c0:0f:87:ac:eb:
4f:ed:eb:00:bf:7e:74:61:da:01:2a:20:4a:33:06:8c:89:92:
ea:4c:44:de:bd:fc:a7:d0:ac:47:e7:9e:bf:09:1c:f8:b1:fe:
fa:7c:35:46:05:b3:3d:83:a4:be:7e:47:92:56:6a:a2:0e:90:
9d:52:4e:52:19:9c:21:10:37:3a:af:16:a5:4a:b0:b6:53:0b:
bc:15:1a:1c:e1:84:bb:6d:ab:a5:a4:98:41:25:61:88:d8:67:
5d:c4:ae:f1:e9:0e:48:dc:dc:19:13:16:cc:fb:03:ab:90:7d:
78:9f:ec:74:bf:9d:c7:f4:72:6e:77:fb:0e:a5:5d:40:bf:16:
d1:c7:0b:8e:69:9f:36:c2:b8:27:a6:60:e2:8e:99:90:c4:9a:
30:d8:34:c2:4f:f7:ac:3d:c2:43:4c:91:6f:2b:03:43:12:61:
d3:92:9a:f2:73:b7:6e:ac:e8:57:82:03:19:57:1c:6f:16:d1:
4a:05:d5:b3:de:d1:92:b6:9f:ef:9e:1e:8c:01:6a:74:0a:c1:
a0:a2:1e:e6:6e:b3:77:e5:cc:79:ca:9f:01:d7:7a:1e:33:c0:
31:dd:92:a5:1a:71:1a:3b:b1:57:4b:f0:ba:4b:9b:a8:82:f6:
15:84:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:46 2026 by rpki-client