Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
File: KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft (raw, json)
Hash identifier: qhPUgYYboyV5iA4EnNejAd84d7O8+YQVxmtygUkfAFQ=
Subject key identifier: 3B:0F:DE:53:90:49:6B:E0:26:B4:1A:53:BA:91:C6:37:57:36:FC:63
Authority key identifier: 28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
Certificate issuer: /CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Certificate serial: 019F932473BE7F126B2E76A3E973BCA354C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
Manifest number: 1944
Signing time: Fri 24 Jul 2026 08:01:07 +0000
Manifest this update: Fri 24 Jul 2026 08:01:07 +0000
Manifest next update: Sat 25 Jul 2026 08:01:07 +0000
Files and hashes: 1: KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl (hash: B4ZyloCLJWMCmCBDLmC9+nj+FVi7esO+UsrE5Wze3LI=)
2: ubLK8V8AN7yzYWZ8GjbAC2BzmVk.roa (hash: soBVeg6Yikd3nUzcvoeLHOcCe6rQjh4SHsU1xYr91hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:73:be:7f:12:6b:2e:76:a3:e9:73:bc:a3:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Validity
Not Before: Jul 24 08:01:07 2026 GMT
Not After : Jul 25 08:01:07 2026 GMT
Subject: CN=3b0fde5390496be026b41a53ba91c6375736fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:75:cd:cf:7f:cd:b4:2d:87:a1:74:1d:4d:
a0:a4:a9:ca:95:97:6d:6a:b6:1c:43:1d:3b:67:4c:
c6:16:91:2d:95:17:90:a6:fb:35:e8:bf:15:16:c7:
9b:37:00:2a:50:09:6a:08:b1:6f:1e:65:18:36:ca:
fa:6c:7f:3c:5e:9a:83:36:c1:df:95:70:c3:c7:51:
71:8a:16:60:98:c1:48:d4:ba:66:0b:d8:95:1d:f7:
93:b0:17:70:99:c8:34:1f:7a:19:b8:ee:e1:af:08:
73:54:d1:8e:2d:09:17:4a:7b:3b:f6:37:b0:bb:26:
14:eb:49:69:0c:1e:5a:33:ca:fa:2c:8f:03:6a:f2:
42:23:cb:35:1c:fe:86:6c:13:bd:70:27:46:05:e6:
a9:84:1a:09:07:19:6f:ff:49:28:03:99:17:af:ab:
06:8a:b0:57:c8:97:44:ca:ad:7f:26:4f:95:c4:c7:
6e:32:74:a5:e5:11:51:dd:4c:b1:7d:c7:04:f6:c7:
e2:60:c2:3e:90:6b:20:c5:aa:77:9e:37:e9:a6:ff:
18:23:97:e2:28:71:13:33:07:5a:40:f3:d3:c1:b9:
e0:d8:4a:3e:dc:23:6d:3d:92:95:09:30:a0:6e:e0:
8b:68:cf:e7:36:c2:d2:e0:b6:8e:d6:2f:a6:ec:12:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:DE:53:90:49:6B:E0:26:B4:1A:53:BA:91:C6:37:57:36:FC:63
X509v3 Authority Key Identifier:
keyid:28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:49:db:e7:3e:02:d8:ca:0c:ec:37:8f:9c:44:1f:87:d8:8a:
14:9f:16:40:4b:f2:b0:16:30:bc:11:bf:0b:a1:3a:3f:2d:97:
0c:e3:ef:ee:f4:1b:3e:0a:18:18:a7:56:8b:50:1c:aa:b2:5b:
9b:8e:c4:a5:08:e4:f0:1e:6d:25:5e:5f:99:2b:3e:76:82:c8:
51:0f:c5:f4:fa:d0:63:d1:8c:b6:31:7d:c0:cd:ea:74:ed:2e:
7b:c4:01:7c:92:4b:19:10:ce:b0:ce:13:b2:9c:06:aa:6a:e8:
95:26:26:d8:ff:f2:d9:d1:07:97:12:d0:4d:71:c9:68:c5:27:
46:35:36:27:fb:6d:89:8c:0c:4d:59:de:a7:cf:70:c2:0b:fc:
ab:43:b7:5f:28:b1:80:63:a0:ef:8f:ca:0b:d8:d7:3d:11:46:
0f:58:4d:b5:d5:94:33:10:da:25:96:79:10:b7:0e:1c:dc:5b:
e7:84:b4:58:02:d6:86:96:1e:9b:16:ab:e0:55:da:9f:48:fc:
5b:47:f9:48:7a:6c:1d:fc:15:d7:d0:80:05:ef:5e:bb:42:33:
f4:38:90:76:84:4d:dc:68:89:57:b0:b8:ed:ab:92:bf:46:e0:
75:32:46:65:50:e9:f6:16:a2:3f:88:18:43:2d:49:30:85:52:
83:7f:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:59:00 2026 by rpki-client