Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: 1KC5GV18WCn6EU7NMX32qjhTW3pAA5/tcYTTXLY6PJo=
Subject key identifier: 27:A0:42:CA:B1:C8:61:4A:45:B5:4E:C6:48:6A:61:BC:20:4A:BA:8E
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019F8F7F8F9942E84FB55578B43D7090C36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 19D9
Signing time: Thu 23 Jul 2026 15:02:09 +0000
Manifest this update: Thu 23 Jul 2026 15:02:09 +0000
Manifest next update: Fri 24 Jul 2026 15:02:09 +0000
Files and hashes: 1: 68S_aFNNmgzjbtipHf2_7W5_Bco.roa (hash: RwG1LoqBic8TBPegFSl5zghD2QUKZjWI0f3m/Wa2XvI=)
2: 6Tt_JhvDeS8RrZNagAC_Y34YgGM.roa (hash: CW1QJb8vGPMOzkDlQfxVkZeJUZKHQrNhrEN+PPxL4mY=)
3: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (hash: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=)
4: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (hash: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho=)
5: TTfvsK5hd0_GUSO7MSasMs4WeiI.roa (hash: 5fCeSzSrIrlr7y2QP80sfMVoFocJvfEJtnCJtXTc+vY=)
6: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (hash: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY=)
7: eF_Iql01f6Mj_BVm584xV8IssYA.roa (hash: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=)
8: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: HBDOZHLLOJj+luUS/oV8Ts+lIyXMfKpaXoVC/bQQ+SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:8f:99:42:e8:4f:b5:55:78:b4:3d:70:90:c3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jul 23 15:02:09 2026 GMT
Not After : Jul 24 15:02:09 2026 GMT
Subject: CN=27a042cab1c8614a45b54ec6486a61bc204aba8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:77:b2:9c:e9:00:ce:4a:dd:1e:ee:00:41:
7b:9a:ec:34:28:ea:24:1b:5d:87:d2:e7:b9:93:92:
c5:00:b7:23:7a:c8:92:98:dd:c6:ba:06:d5:a0:f9:
94:2b:89:78:14:1a:00:ac:52:54:b9:69:7d:7a:04:
b3:01:74:43:78:df:75:b8:ce:2f:18:d3:bd:80:a3:
8b:66:e2:7c:11:8d:ca:28:b2:ca:0c:c5:19:71:91:
51:f8:12:02:a8:0e:87:25:c0:5c:ab:b6:66:b0:b5:
9e:a4:95:d9:53:9e:35:77:f8:b9:00:58:ec:79:c2:
89:f9:23:ea:e3:4f:0b:96:77:3e:c9:52:b2:83:fe:
81:f5:0d:74:77:7e:94:6a:9e:55:21:fb:30:22:4d:
10:99:68:d2:34:a2:5a:e7:14:f5:ee:76:f6:d6:ec:
20:58:97:1e:54:17:a3:c8:71:59:ff:27:95:4f:54:
1b:dc:e4:98:ed:78:24:91:a4:0b:c0:5a:ed:b5:1b:
68:8e:c9:35:e9:d9:f4:3f:e8:c9:8d:c9:24:3c:42:
9a:68:86:7d:23:f4:23:e2:df:68:82:b2:0c:63:5d:
f7:b6:92:d1:e5:22:8d:e5:94:9f:91:f5:b8:6a:70:
9a:e7:9f:b1:70:1c:c7:c8:6b:7e:aa:86:d8:dc:ac:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:42:CA:B1:C8:61:4A:45:B5:4E:C6:48:6A:61:BC:20:4A:BA:8E
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5d:97:a1:fb:8b:6a:49:50:8e:d7:17:38:6b:9c:ed:da:8e:
34:5c:1c:33:e6:42:79:bf:e7:49:fe:29:b8:71:a4:a1:ed:9f:
9e:ef:aa:36:8b:7c:ed:5b:82:3e:7f:be:61:d7:a0:d9:91:9d:
d9:a9:b4:27:83:7f:a8:1c:54:10:97:38:03:aa:61:f8:ed:05:
0b:2d:43:2c:8f:da:f7:05:e6:29:32:06:3c:99:d2:74:d5:51:
e6:52:05:16:1e:19:fb:52:2e:01:6a:56:fe:a1:89:47:b7:1f:
93:7d:81:3e:43:61:77:23:6e:fa:e9:21:1b:ce:b3:63:2b:e8:
e7:28:3b:56:2f:e3:8a:4a:4c:e3:6a:e9:db:5d:f7:4b:ba:26:
b5:91:17:95:ba:6c:42:a4:e9:f7:0b:6b:f2:81:4f:0f:67:3a:
cc:22:a1:c4:1b:cc:8a:c2:69:03:26:1b:1d:8f:43:c8:5b:1e:
e3:f6:f5:25:c0:80:f2:ee:a8:76:1e:1e:36:c7:6f:18:e2:e5:
45:e5:dc:ff:00:d5:f9:4e:4d:31:c1:0d:26:eb:f5:08:be:a4:
e6:b5:30:83:9d:66:cb:83:15:c0:ba:fc:e2:77:d1:9c:7f:f3:
c6:1f:3f:1d:00:63:98:4f:34:a6:58:31:26:43:26:5a:3b:01:
d6:58:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:35 2026 by rpki-client