
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: PuaakIU2ysNI1mGB4oIkV5vJMJqJv0FLPDb1gzRRRXo=
Subject key identifier: 74:DD:23:C5:53:3D:BE:2F:B1:4C:04:BD:46:D6:0F:D0:70:AC:D2:5A
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 019F9323EDECCA6E137898F24497F51AB94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 08:00:33 +0000
Manifest this update: Fri 24 Jul 2026 08:00:33 +0000
Manifest next update: Sat 25 Jul 2026 08:00:33 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: KFx+Ws8BRH9mLdDYRvhfc3/6nplvnO2PIJKrWBgwnJs=)
2: UEd4i0yJoTMMf_ouShVkmXg-2aA.roa (hash: 4zGbYGb6JFtW5tegW+z/MuiLQzGa6F+tvz4cx0GU1lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:ed:ec:ca:6e:13:78:98:f2:44:97:f5:1a:b9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Jul 24 08:00:33 2026 GMT
Not After : Jul 25 08:00:33 2026 GMT
Subject: CN=74dd23c5533dbe2fb14c04bd46d60fd070acd25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:de:48:dc:9f:1b:d4:8e:e2:b0:20:93:fc:
0e:72:f3:c3:e9:ae:db:aa:3c:80:c7:df:a1:bb:17:
69:cc:63:97:5c:3d:9e:1a:08:c6:47:2d:ec:9d:ac:
3a:b5:11:fc:54:10:83:90:ba:fb:3e:d6:42:8f:68:
7d:18:7a:cf:59:c8:97:df:ca:7a:a4:47:19:d9:23:
a5:59:59:85:08:06:a0:18:2c:64:6b:c1:48:95:99:
93:86:db:48:f9:f2:ac:e0:25:23:f0:9a:40:30:50:
d6:09:55:84:83:6a:09:cc:4f:98:55:55:6c:66:c0:
e7:0e:e5:ed:cc:0e:d4:b7:7c:bf:e7:de:bf:29:7a:
4e:b4:94:63:e4:64:8e:c7:83:64:3a:42:98:5d:22:
ae:f2:e3:ef:9f:a8:09:41:76:36:ba:25:67:ee:d5:
71:8c:b9:87:63:e4:1b:90:ad:14:f8:f1:13:ac:dd:
d6:ed:ba:0a:47:9e:2e:da:13:fa:02:89:28:2d:4a:
9c:35:12:95:c4:c8:e2:f4:c1:3c:33:5c:d7:90:d9:
d5:03:d6:af:df:3a:57:30:1e:86:71:9c:5b:bc:7d:
dc:8d:14:f8:8d:2e:ca:ae:a3:50:aa:86:fe:90:92:
2b:f8:2e:7f:aa:e8:6c:bb:5d:72:a3:73:c4:c7:fb:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:23:C5:53:3D:BE:2F:B1:4C:04:BD:46:D6:0F:D0:70:AC:D2:5A
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:75:45:5e:cb:07:25:31:82:f3:c0:64:1e:24:23:ee:26:9b:
5f:72:0b:70:57:a0:76:a3:26:4b:73:bf:3c:0f:7a:08:00:e7:
0d:40:fc:1b:81:5b:5c:43:4d:70:31:a4:3b:77:15:83:bc:95:
8d:24:59:17:ef:3e:f3:b7:9b:be:77:86:73:2a:a3:41:79:d2:
50:7c:10:eb:87:c0:2d:3e:ac:5b:eb:3e:3f:a1:9d:b8:ca:50:
de:b6:2e:45:da:23:61:26:f3:d8:83:ce:59:b5:13:2e:11:f6:
fe:09:fe:ad:1f:ec:10:77:58:bd:e5:ef:35:76:54:1e:c7:e9:
83:76:64:6e:73:fb:1a:67:bc:8b:c5:55:24:fe:91:8e:95:a6:
48:e8:4d:91:8e:24:61:c4:a6:c5:05:86:8f:55:c3:29:a2:ea:
b3:87:2e:d7:79:3d:20:d3:be:39:56:c7:1d:fc:dd:f1:e1:6a:
5c:c3:f5:1c:a2:41:01:38:ca:fe:dc:30:48:48:9d:2e:48:2b:
d6:3f:0d:02:ee:36:6e:aa:b3:7a:7a:ca:de:4f:dc:1f:d1:7c:
0c:59:cd:53:8b:bc:f3:a9:2b:d4:5a:a5:80:62:8a:a1:0c:af:
7d:f0:1f:3a:66:4a:be:7d:9e:45:15:f5:4d:7f:11:ac:56:96:
ec:e3:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:37 2026 by rpki-client