Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: SAHu7LC8s8ijqltFRM5pm/lBudTbeQnX4m76XRmANDk=
Subject key identifier: 65:9C:75:AC:FF:CF:A3:F9:CC:1C:6C:CF:2C:56:49:1E:AC:9B:FF:82
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019F95127E564413C1BCBAE26BFD8FF1ED8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0D76
Signing time: Fri 24 Jul 2026 17:00:44 +0000
Manifest this update: Fri 24 Jul 2026 17:00:44 +0000
Manifest next update: Sat 25 Jul 2026 17:00:44 +0000
Files and hashes: 1: 61jEoPY3BUG6j9cu_lF8RKNi7JI.roa (hash: 4WzEHJ+ROSfn7ovwc2eGPGUGeBlvLhI0622lMwFDYa0=)
2: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: UUWaU3f0lX21U2se5sgeVCAJXZxwY9FOMwLQmmNQRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:7e:56:44:13:c1:bc:ba:e2:6b:fd:8f:f1:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jul 24 17:00:44 2026 GMT
Not After : Jul 25 17:00:44 2026 GMT
Subject: CN=659c75acffcfa3f9cc1c6ccf2c56491eac9bff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:56:3b:ad:09:37:5f:f0:21:82:e5:0f:b3:
01:1a:3d:ae:ee:2b:ee:df:77:3d:8d:0d:71:35:93:
aa:3c:2c:58:5c:74:6e:e4:cf:70:72:51:66:ad:4e:
bd:62:44:e5:85:3c:3d:2f:ab:7f:40:0f:35:37:f7:
8d:cc:03:e8:a4:99:b1:b3:86:06:c3:cb:6f:dd:d1:
aa:e6:04:c7:73:61:08:2a:5b:96:b6:90:46:ce:7c:
e4:6d:4f:b6:30:80:80:fd:9e:d6:57:54:b6:6d:65:
38:50:a6:15:c5:0e:eb:40:b9:13:31:ab:8f:e3:bd:
ad:87:6d:de:23:15:ce:5f:61:ef:48:13:60:75:df:
65:c7:da:8f:72:97:4c:cd:e4:77:44:d3:64:d4:7d:
38:71:54:e1:79:52:bb:36:30:55:7c:98:b2:40:d9:
34:71:fc:08:9b:39:b0:c2:62:ed:4e:5e:01:4b:0c:
7f:9c:b3:74:80:d8:e3:44:b3:9d:d5:c8:f8:55:ae:
bc:3a:c1:39:8b:40:49:aa:96:46:2c:ed:c6:47:12:
f3:e9:a0:57:10:2f:5f:01:9b:66:7f:f3:24:7c:14:
15:a5:b4:d4:68:9e:29:0c:84:a7:81:61:81:53:8f:
04:3d:e3:bb:a8:34:b4:8f:e0:a3:c6:a7:8e:ad:8f:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:75:AC:FF:CF:A3:F9:CC:1C:6C:CF:2C:56:49:1E:AC:9B:FF:82
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8a:32:c6:00:7c:31:a4:28:48:6f:fd:db:ef:ca:00:ea:7a:
96:6a:f2:ea:ff:2a:47:72:f1:ea:7f:38:10:06:f1:b5:34:83:
7f:6c:79:4f:68:ef:4c:d1:52:0c:cc:33:c6:48:23:fb:b6:2f:
85:50:bd:8d:57:9a:88:74:ce:c6:c2:4a:5e:0d:f0:02:e2:eb:
74:65:06:31:cb:09:9f:12:c9:86:59:a9:ab:cb:8d:64:92:e2:
3f:37:c1:b0:d4:29:e2:9f:1d:30:69:43:e2:2e:22:24:64:67:
42:44:2b:43:d9:2c:82:4e:22:47:64:25:f2:b5:15:76:d0:9a:
e7:4b:ce:0c:a5:69:be:de:32:1e:17:93:47:0c:ba:89:30:64:
6d:bc:be:95:ec:f2:23:7d:9f:45:41:00:c4:0d:05:ea:97:9b:
e7:c1:ae:c9:f5:25:67:72:8b:29:f4:45:ac:35:fd:7f:55:61:
5d:f5:a1:9c:53:9c:aa:2f:1a:3e:a3:5c:b4:e8:fa:c7:d9:53:
fb:a3:86:ef:5f:66:77:72:fe:1f:c5:65:69:11:83:af:0d:03:
4d:f4:c6:bc:48:c5:81:b1:1e:f4:42:16:34:28:a0:2f:1e:36:
99:7f:5c:0e:88:35:25:30:69:41:3b:8d:03:4f:dc:e0:59:fd:
43:0f:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:37 2026 by rpki-client