Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: VhXAdqX0jkMkPCTbv+31QBimUJf/A8LZcmZYpmeGYVE=
Subject key identifier: EC:E7:E4:C8:BF:06:97:3A:C8:6E:5B:AE:E4:E4:B8:70:8F:5D:0B:0A
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 019F94DC01B4A08474CD71498B6D00CE8667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 12C4
Signing time: Fri 24 Jul 2026 16:01:13 +0000
Manifest this update: Fri 24 Jul 2026 16:01:13 +0000
Manifest next update: Sat 25 Jul 2026 16:01:13 +0000
Files and hashes: 1: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: b3I69LJmHTXOGOVp5b2AMDUiNfW3OFrCmrkenbKGnZQ=)
2: T3EGh-bdCIIZhG5HJojpnlqKL2c.roa (hash: bufDKb7bJ5Yg3D29mO4Y90yES19oPGAgCv9pA/tjktA=)
3: iUyBvay1HB04jjUCqmLzofikeiI.roa (hash: YQOqKVVvW96raR8LDZq/96IB++aevKxnzXinzAloqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:01:b4:a0:84:74:cd:71:49:8b:6d:00:ce:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jul 24 16:01:13 2026 GMT
Not After : Jul 25 16:01:13 2026 GMT
Subject: CN=ece7e4c8bf06973ac86e5baee4e4b8708f5d0b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:e7:77:be:42:48:fe:97:ae:f8:fb:fd:23:
a4:18:d9:36:af:7b:e8:0a:0b:df:fe:c9:ea:6a:00:
4f:2e:42:98:ab:95:d7:60:87:c9:2b:87:3f:e1:99:
34:1e:3b:3f:53:a0:10:e7:ee:c8:a6:59:82:98:bd:
17:22:85:34:5d:6f:7c:95:82:96:55:93:38:40:69:
c2:02:80:45:31:74:21:32:11:2d:ac:6e:b5:4d:f3:
f9:e4:76:0c:15:c3:15:f7:12:84:90:de:87:09:99:
22:f4:55:f8:c3:30:49:b6:6e:fe:e3:e8:df:47:55:
47:f4:9a:d3:48:95:e0:58:05:50:0b:e4:b3:f8:7e:
e5:f5:7c:56:d1:42:62:3e:3e:b4:8b:6f:1a:50:17:
2d:05:28:e9:45:4a:36:85:3e:a7:a4:f1:9e:79:5c:
a7:05:47:89:71:ef:11:c7:38:bf:6d:33:2c:aa:ae:
50:ca:15:3d:c5:5c:32:30:fc:17:e7:3e:cd:84:75:
34:9b:f4:44:5a:b1:b9:0f:ca:09:e4:f1:e8:85:d7:
d9:32:dd:15:8d:c1:90:8e:42:c7:79:5c:b1:75:da:
e8:d6:ee:11:f8:7c:b7:44:38:6d:f9:b3:83:3d:2c:
b4:90:b8:f3:07:24:7c:6d:17:9b:9a:b7:7a:7b:c1:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:E4:C8:BF:06:97:3A:C8:6E:5B:AE:E4:E4:B8:70:8F:5D:0B:0A
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9d:20:fe:3d:48:2e:66:66:f8:f2:e3:bc:94:9b:82:1f:ad:
30:05:fe:23:ad:1b:59:1f:42:0b:42:a5:a6:7b:21:b8:d4:f4:
8b:1e:20:af:8d:e2:5b:9e:57:a7:b8:7e:04:c7:64:f9:d5:51:
85:a1:50:93:d9:c5:58:dd:1b:bc:2a:b4:c5:41:85:18:7d:8f:
9b:44:00:32:0a:c8:1a:d8:40:97:71:1e:12:b3:94:a7:99:46:
91:29:8a:43:32:af:5e:79:6f:63:10:03:cb:7d:f7:2f:20:52:
34:11:85:b5:8e:6a:3f:3d:18:1d:6c:27:e5:11:b2:e0:a9:7e:
a5:75:00:c4:54:77:93:8e:93:37:b6:c2:1f:1e:2d:5e:1a:55:
f2:26:08:71:f3:1b:95:c2:1a:b5:40:18:36:a3:2f:7e:fa:c9:
8c:74:17:e9:36:50:17:04:bf:d5:92:aa:18:ff:1a:30:6f:7e:
aa:42:29:29:47:48:12:03:42:11:41:a8:8b:54:3d:2a:90:02:
d0:aa:5a:89:72:fe:e3:ad:ab:b9:3d:45:fd:b6:e7:98:16:05:
30:29:ac:94:30:d7:22:7e:1c:a3:d7:e5:c8:35:00:94:93:71:
13:d3:c4:e4:63:54:bf:f4:fb:eb:ef:ec:8a:88:7c:26:d4:47:
ad:90:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:47:00 2026 by rpki-client