Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier: v7mRtmJFgaaMNN2uqiCyJUQRhL12Ilp/rVcv9WL+/GI=
Subject key identifier: CA:85:1A:08:25:EB:1A:6E:FB:51:2E:50:B6:E5:06:BA:DF:44:58:28
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019F916DB36685A7E2B89DFCE8CC41966747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number: 19DA
Signing time: Fri 24 Jul 2026 00:01:53 +0000
Manifest this update: Fri 24 Jul 2026 00:01:53 +0000
Manifest next update: Sat 25 Jul 2026 00:01:53 +0000
Files and hashes: 1: 68S_aFNNmgzjbtipHf2_7W5_Bco.roa (hash: RwG1LoqBic8TBPegFSl5zghD2QUKZjWI0f3m/Wa2XvI=)
2: 6Tt_JhvDeS8RrZNagAC_Y34YgGM.roa (hash: CW1QJb8vGPMOzkDlQfxVkZeJUZKHQrNhrEN+PPxL4mY=)
3: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (hash: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=)
4: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (hash: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho=)
5: TTfvsK5hd0_GUSO7MSasMs4WeiI.roa (hash: 5fCeSzSrIrlr7y2QP80sfMVoFocJvfEJtnCJtXTc+vY=)
6: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (hash: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY=)
7: eF_Iql01f6Mj_BVm584xV8IssYA.roa (hash: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=)
8: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: fZYzWDxn/Ue0giMN71CLpZ2wkb70/Jyn9dxySM+SmmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:b3:66:85:a7:e2:b8:9d:fc:e8:cc:41:96:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jul 24 00:01:53 2026 GMT
Not After : Jul 25 00:01:53 2026 GMT
Subject: CN=ca851a0825eb1a6efb512e50b6e506badf445828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:7a:05:9b:c0:43:b9:17:2c:40:74:2b:ed:
85:12:37:2e:1f:d2:f4:ed:15:cc:8b:26:a3:c4:ff:
32:a5:c3:57:4f:cd:ec:7b:1a:a6:d4:7b:17:8e:1b:
25:06:f3:46:5a:9c:c5:89:4f:6a:df:58:a2:5a:17:
76:3d:4b:21:5b:f8:d7:62:0c:30:c4:a8:49:09:59:
c3:8a:ff:b5:3f:ad:69:3e:d7:9b:1a:40:fb:55:f2:
50:c6:f4:54:bc:23:5e:92:af:b5:ee:50:14:2d:a0:
29:1d:ba:1d:08:e9:7e:c8:16:c2:fb:da:2f:5a:65:
2f:9d:6c:80:6c:78:de:06:66:d4:5b:e6:58:77:d4:
71:73:56:1b:05:2b:8a:02:3c:7b:f9:d5:c2:c9:d8:
92:b5:ac:10:eb:cc:ea:1d:ac:30:c9:60:32:47:9f:
7d:c5:82:c1:13:c5:e5:a2:47:53:87:b5:51:87:dd:
88:08:a2:12:ae:2e:0f:6d:7f:1b:28:ac:2a:e3:85:
45:30:28:60:00:68:47:2b:3d:90:91:62:82:e2:ff:
3f:4e:72:2f:07:5b:f3:bf:38:7e:f7:65:52:0c:eb:
b6:89:26:cf:af:49:89:64:38:c5:68:bc:79:29:8f:
ac:fa:13:b2:b1:ab:5c:3f:ee:3c:55:4f:06:88:16:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:1A:08:25:EB:1A:6E:FB:51:2E:50:B6:E5:06:BA:DF:44:58:28
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0a:24:c4:16:1f:21:03:d2:7c:41:ce:24:f5:8a:37:7a:cb:
2d:95:31:a2:3e:df:c7:64:a4:e5:f9:ea:24:66:57:80:07:de:
73:92:8b:94:fa:d5:5a:4f:90:9a:24:83:92:f6:f3:9c:01:bc:
aa:d1:4d:5f:8a:46:1e:3c:e3:5d:28:92:ca:d9:58:34:88:00:
af:21:80:69:6a:aa:99:c2:7a:31:bd:92:84:33:eb:02:4a:23:
cb:53:d6:b9:27:4e:07:e4:7b:cf:a0:f3:8f:97:ab:bb:e0:72:
15:ec:6a:c8:c4:5a:a0:95:25:a9:d4:8e:f1:a4:be:fe:95:4d:
08:be:50:1f:43:42:a4:be:55:4d:b0:3b:21:33:09:be:23:54:
36:a8:27:b6:cc:cf:d9:45:32:62:e0:57:00:ac:73:32:c9:38:
e7:02:08:62:15:8f:1f:06:eb:3b:31:31:3c:50:0e:c3:86:42:
02:3c:27:c4:00:3b:04:22:36:88:fb:f8:90:1c:70:dd:22:45:
2d:98:49:55:b1:fb:5e:b8:a7:df:2b:7d:6a:a4:22:84:c1:03:
9e:b7:50:8d:2c:0c:80:5c:ba:58:dc:72:98:eb:80:56:13:e2:
57:e4:1d:58:34:f4:b8:f9:50:6d:10:56:45:80:9f:28:c6:87:
f2:e7:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:29 2026 by rpki-client