Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: l5jB5a6/SdWYMcPPDEcN2XZOTI554m+0fk4yw+NMLpo=
Subject key identifier: 81:CE:6B:80:C4:17:4B:98:EA:20:FA:C2:B4:AA:34:28:B6:50:C3:CE
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 019F9436667DB35B6415D211D9CF4C4A5547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 0205
Signing time: Fri 24 Jul 2026 13:00:20 +0000
Manifest this update: Fri 24 Jul 2026 13:00:20 +0000
Manifest next update: Sat 25 Jul 2026 13:00:20 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: 8AFpUhzie2D8HMvmAtPqKZZQhCQ/GmumlXawKmxtPtw=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:66:7d:b3:5b:64:15:d2:11:d9:cf:4c:4a:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Jul 24 13:00:20 2026 GMT
Not After : Jul 25 13:00:20 2026 GMT
Subject: CN=81ce6b80c4174b98ea20fac2b4aa3428b650c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:90:33:0c:05:fb:5e:e6:d9:7b:f8:c7:c7:
17:8d:28:05:b4:fa:76:47:ff:ec:35:28:3e:72:03:
3d:22:a0:ca:cd:e0:8d:3b:cf:3a:2f:c4:e3:b5:9f:
d4:ee:f4:4a:8a:69:fa:b8:f1:95:24:57:69:89:aa:
14:84:44:9b:da:07:99:2a:5c:0f:3e:cf:e3:df:57:
01:ff:80:12:2d:6e:8f:26:1f:c7:5d:ac:a7:8b:ad:
eb:56:ae:ae:3d:ae:65:9e:ac:7c:d1:2e:b8:e2:ca:
a4:83:d0:f5:af:e4:d0:87:63:d5:df:5c:c4:a5:7e:
bc:99:f7:5c:b4:8f:95:10:57:f3:1f:49:fe:8f:b9:
f0:20:8d:cc:c9:5f:f5:0c:da:7f:ea:55:49:69:d3:
a2:2b:c0:0c:a5:56:ce:48:e4:58:52:58:76:57:4b:
b5:f9:19:a8:48:06:3a:9e:57:c5:9a:af:3b:fd:4d:
41:e2:fb:6c:26:dc:0d:fa:db:c0:b9:c9:f0:1c:ae:
9e:cc:89:e0:e6:6c:fb:7a:03:4c:1c:d3:47:ef:31:
a6:a1:40:14:0a:a8:83:56:9e:52:f1:63:0c:ed:73:
5f:59:8d:28:66:54:28:8a:27:6f:ca:59:24:6b:a5:
f5:75:43:08:d9:cb:f4:2b:04:68:76:5d:d2:2c:b6:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:6B:80:C4:17:4B:98:EA:20:FA:C2:B4:AA:34:28:B6:50:C3:CE
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ec:01:f3:13:46:94:1c:3a:c5:b4:0b:59:b3:65:e3:fe:37:
ef:ed:6b:67:30:77:2c:9c:6d:dc:e7:fe:73:58:8f:55:bf:33:
4c:54:79:f0:e7:0a:5b:61:74:dc:8b:fd:18:bf:00:da:47:6e:
eb:7e:73:87:a0:42:8f:d8:62:1d:27:51:cf:94:73:33:a2:bc:
98:25:c0:da:01:bb:7a:98:55:6e:fb:df:23:97:b8:5f:fb:60:
60:24:05:93:f1:3f:dc:7c:69:7d:bc:68:10:b3:6e:e5:2a:de:
63:8b:44:e1:00:4c:13:c7:96:c2:7e:bd:8d:01:54:ad:5a:4c:
fe:41:3c:00:b4:d0:4f:a1:f6:5f:48:e5:ed:a6:47:95:04:7f:
48:ad:d2:29:2a:29:89:e7:fe:5e:6a:f2:c2:d5:96:79:dc:25:
bd:24:2b:e7:e0:ce:cd:31:8e:4d:07:d7:ff:30:c3:6c:69:fa:
83:c1:bd:5c:67:b4:57:0c:c5:b5:25:31:32:18:b1:31:90:97:
81:12:ab:4a:5a:72:8c:30:ce:af:13:87:55:03:b5:8e:79:a5:
83:09:3d:f7:de:5c:c6:5e:09:2c:18:9f:d7:48:dd:5c:fc:73:
40:a8:90:f0:19:88:51:b1:1c:88:16:fb:31:e3:c3:87:c3:ec:
f7:dc:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:58 2026 by rpki-client