Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: MGVOsUOPxBB65eTEQoYQ85qBrv2YKh6A+0q2UDSDbkk=
Subject key identifier: 8F:8B:3A:51:8C:11:B3:87:73:F4:F4:33:86:AA:89:2D:33:3E:E0:7A
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 019F90C80EBFB4376A725EFB84E93F8B702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 0E3B
Signing time: Thu 23 Jul 2026 21:00:57 +0000
Manifest this update: Thu 23 Jul 2026 21:00:57 +0000
Manifest next update: Fri 24 Jul 2026 21:00:57 +0000
Files and hashes: 1: SwQK8a0RuGojFMRd-1GGkonnT-U.roa (hash: 7GJC22Eus5d8mAhvDyq0PoK19aG3z12w1E45uuUpyP4=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: E36ngvF5rmMhxbPiMc6H2/D9iQTjcJcNpCt/PBAj4tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:0e:bf:b4:37:6a:72:5e:fb:84:e9:3f:8b:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Jul 23 21:00:57 2026 GMT
Not After : Jul 24 21:00:57 2026 GMT
Subject: CN=8f8b3a518c11b38773f4f43386aa892d333ee07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:60:21:bf:12:54:c6:e5:10:51:e3:41:f5:
20:c2:ca:c0:8a:72:7d:08:52:f2:a1:f8:9f:4d:42:
f0:6f:3b:71:d9:71:1d:13:62:1d:c2:56:c8:dc:d1:
a5:07:40:d9:13:5a:df:20:a1:c2:dd:aa:d1:f1:85:
cb:cb:bb:0d:7c:8c:28:03:51:7b:c8:cb:bf:e8:3e:
a1:41:18:09:72:a1:a0:0d:fd:5b:d7:c4:58:20:16:
04:ee:77:ee:8f:7c:9c:6e:28:c2:ab:f4:94:8c:81:
99:94:f8:0e:d4:1f:8e:39:bb:a6:86:f2:95:5b:ec:
99:22:db:f5:ed:bd:fa:1f:07:52:2c:97:b1:c6:ae:
1d:90:ea:6c:27:be:a9:53:f5:80:a3:4c:17:af:06:
05:0b:f0:2b:18:5b:61:0f:c2:03:a2:c6:f1:c6:d8:
4b:0a:ec:1d:71:01:dd:bc:c9:fb:50:51:58:27:43:
67:ce:4c:5a:c5:07:76:07:db:f6:e5:47:12:1b:08:
ed:29:74:0a:96:17:06:ca:73:ec:3f:61:92:0a:23:
0f:aa:ef:b9:be:04:7a:e9:ae:12:71:e6:54:b0:b9:
eb:91:8b:7d:6c:11:a8:e1:c3:4e:2a:ed:ae:de:b7:
55:7a:ca:0b:cc:a0:04:ed:5d:d5:3e:79:ac:ac:54:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:3A:51:8C:11:B3:87:73:F4:F4:33:86:AA:89:2D:33:3E:E0:7A
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6d:83:4e:88:bb:6b:7a:a1:05:db:d4:d3:89:59:eb:ec:32:
d8:f7:f8:23:93:8d:24:a3:37:10:1e:0a:cf:87:57:de:9c:a1:
b7:23:8a:96:a7:8d:01:3e:0c:12:61:2d:52:a1:a0:ee:f1:c3:
9d:db:e1:a0:35:97:33:18:45:49:89:b2:b2:5c:ff:1f:d5:98:
7d:a3:f6:72:70:73:ed:2b:70:f7:cf:58:f4:3a:39:7d:3a:5d:
04:70:2f:22:4f:5c:a2:11:ef:ba:06:0f:44:f2:2c:b1:fc:16:
1b:4c:51:db:56:06:33:34:72:85:72:6c:60:4a:6f:01:d4:3a:
b1:57:29:9d:46:e2:b1:f3:e9:b5:e9:92:5a:b6:ed:a7:0f:0b:
7b:84:1c:25:8d:d4:6b:e1:4c:c6:94:19:d0:14:a3:67:b9:b6:
e3:33:a6:6e:71:47:95:c1:13:38:9b:b2:3b:69:98:de:07:91:
53:13:ac:16:e9:13:4b:40:26:ee:ef:71:46:9e:7d:e3:96:f8:
2e:ff:f9:27:25:b4:12:81:1a:d4:02:b1:97:e8:e1:1d:84:18:
a0:55:52:de:13:8b:d6:91:21:a2:58:56:5d:b7:d2:4d:18:a9:
ac:4d:81:eb:b6:ab:b4:59:41:5c:80:6b:07:50:6b:69:4d:15:
39:bf:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:16 2026 by rpki-client