Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: IuoaNbcJ2ovY5auMtT32fBrpIuSFE3OiUXRQdZu31nY=
Subject key identifier: 87:1D:B1:69:DB:EA:DD:54:2E:6E:DB:CB:03:BA:B6:19:6D:CB:35:BA
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 019F92B6B3C0FEA8184A7C7E19E87E99495B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 0E3C
Signing time: Fri 24 Jul 2026 06:01:14 +0000
Manifest this update: Fri 24 Jul 2026 06:01:14 +0000
Manifest next update: Sat 25 Jul 2026 06:01:14 +0000
Files and hashes: 1: SwQK8a0RuGojFMRd-1GGkonnT-U.roa (hash: 7GJC22Eus5d8mAhvDyq0PoK19aG3z12w1E45uuUpyP4=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: mztEpgPheOODdkgAJZKxjOoyKdneYBDKCJPfvqiZdJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:b3:c0:fe:a8:18:4a:7c:7e:19:e8:7e:99:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Jul 24 06:01:14 2026 GMT
Not After : Jul 25 06:01:14 2026 GMT
Subject: CN=871db169dbeadd542e6edbcb03bab6196dcb35ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:a1:ed:c6:aa:8d:4f:91:70:a3:9d:8c:d8:
60:f6:2b:46:85:bd:88:5c:0f:76:9d:2e:5c:70:db:
56:fa:5c:f3:f1:ab:17:09:83:37:d1:5e:2a:93:57:
e4:5f:dd:67:8c:af:11:34:75:f8:46:82:d0:61:a0:
47:3d:f6:30:cf:83:ce:fd:70:8a:ae:d4:a5:f9:a7:
c1:f0:2d:1c:b7:9d:cd:4e:68:2c:51:bf:ef:59:e2:
f9:78:a1:32:a7:59:bc:7b:09:06:ee:bb:ac:22:ec:
c5:3f:3c:a4:c3:7e:f6:03:ac:14:a3:58:ea:a7:92:
65:f4:83:0a:1b:c0:b9:3e:85:a2:c9:87:3c:93:74:
3a:ae:ac:c4:0f:ea:43:e2:33:a3:c2:96:f2:35:48:
f4:be:86:ac:06:73:46:12:f7:0e:72:aa:e2:c1:41:
9e:ed:bb:86:38:3b:1e:bc:51:88:9f:8d:be:3d:d1:
c1:54:70:c9:41:0f:bb:60:fa:b2:2a:09:b4:a9:98:
93:d1:b7:9d:8f:1b:63:0e:7b:6f:fc:04:29:b3:1f:
3e:08:45:0d:19:21:72:ae:f1:29:5d:f9:39:a7:76:
79:96:b2:d7:61:6f:4d:58:1d:86:f6:ed:6a:38:5b:
4e:fb:d8:84:42:c5:65:97:e8:5e:f2:94:66:2b:d8:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:B1:69:DB:EA:DD:54:2E:6E:DB:CB:03:BA:B6:19:6D:CB:35:BA
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6c:85:da:3e:39:45:89:9c:4d:25:c6:6b:43:29:13:2f:c5:
1f:62:f4:65:89:ff:14:0d:da:e8:74:6c:56:26:8a:39:d4:08:
3b:42:21:04:c1:0e:7e:74:8b:f1:e3:b6:ad:d8:52:8d:9b:7a:
e9:92:e1:45:95:f6:23:44:d1:75:2d:63:45:f8:e5:75:7d:e1:
b1:0f:99:d2:03:3e:26:46:79:94:84:b1:5e:6f:ac:48:33:ab:
74:8c:e8:cc:5e:b3:fc:99:ec:e0:bf:ec:90:c6:49:34:27:d6:
29:02:ea:10:d1:6d:7a:e9:de:76:6c:97:6a:d3:07:51:7e:16:
2d:22:09:69:ee:70:d4:44:bb:07:a6:06:44:14:b9:34:13:3e:
ed:95:20:ec:ce:4b:e2:68:c4:b9:37:66:e8:72:86:93:dd:28:
32:45:cf:fc:c8:58:47:5a:98:20:c8:9d:b2:ce:33:03:af:63:
6f:6c:55:b0:15:9b:eb:83:fe:22:7b:ad:5d:7a:23:11:cf:b6:
46:93:19:8b:2f:3f:f0:e7:11:64:e0:2a:fb:73:9a:ea:38:d7:
1f:ac:aa:a0:01:a9:0d:2c:7a:06:81:06:47:ef:6e:40:da:b7:
3c:16:13:b7:43:a3:fd:7d:08:66:2b:45:28:25:54:1b:94:30:
c2:c2:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:52 2026 by rpki-client