Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: tjqHahhzFVGfNA8o2IcxDANLJGT2MiKY2XHp6PMFUeE=
Subject key identifier: 34:B8:7F:A8:38:F9:1E:2A:04:23:F5:19:C1:B2:B8:5D:1D:99:08:54
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 019F935AB19ECAFB7B788EFCC78371DFD308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 09:00:22 +0000
Manifest this update: Fri 24 Jul 2026 09:00:22 +0000
Manifest next update: Sat 25 Jul 2026 09:00:22 +0000
Files and hashes: 1: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: WXYJt6jjq1nu8NsCRFB2GPDMSFTwV8Ct5wZ6qWuV4Mw=)
2: TSModa-LABny3OYpVDVxvacd8aI.roa (hash: hIqc5amM31Tv3k4RRh8nzbd5nZLZypZmgW9WNaeRtgs=)
3: u8wfrBPP_bxqtWNVJcNz551H_3o.roa (hash: KJpAbjudf9h7GbmiPhF4TzDU9L0KhquOeIK1wF+fmEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:b1:9e:ca:fb:7b:78:8e:fc:c7:83:71:df:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Jul 24 09:00:22 2026 GMT
Not After : Jul 25 09:00:22 2026 GMT
Subject: CN=34b87fa838f91e2a0423f519c1b2b85d1d990854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:61:18:c5:ea:28:c5:8a:9e:01:f3:06:7a:
99:a4:f3:1a:6a:ec:d3:d8:5a:b6:94:5d:64:1e:f0:
35:37:13:1e:87:85:ad:df:e5:40:a4:67:5f:4e:8c:
ff:09:4f:50:28:d3:2f:bc:46:c5:0a:3f:65:d4:4a:
f3:06:b3:6d:26:49:c0:c9:9c:28:78:13:c7:86:82:
2d:24:76:ba:d1:fc:67:65:b8:66:57:cd:91:79:17:
61:3b:a8:63:6a:7b:01:ff:cc:08:5a:3b:27:dc:c5:
d5:cb:1f:af:cc:d4:df:a1:4a:07:63:6a:b0:6c:5f:
4b:6b:c8:e9:e0:0d:37:31:b1:88:b4:4e:61:d5:54:
d9:de:6a:8c:b3:4d:71:43:75:b1:65:dd:47:c8:af:
9e:a2:e7:fe:b4:a0:fa:59:a4:18:b8:7c:07:3f:03:
f4:2f:24:8b:41:7d:90:f6:e9:f1:c5:9c:b0:80:1f:
88:ce:14:2e:53:12:a7:3b:3e:16:7f:c8:f7:3c:d0:
12:ec:7d:ad:38:e5:26:b0:0a:b0:7d:f6:29:23:9c:
25:1e:3c:f6:bc:ab:48:f6:9e:1c:80:02:c8:cf:33:
b6:38:a7:3d:36:fd:8f:6c:78:0b:95:7a:f1:de:1d:
3f:e5:e1:e1:5c:99:f8:a2:25:0b:e4:91:17:22:2d:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B8:7F:A8:38:F9:1E:2A:04:23:F5:19:C1:B2:B8:5D:1D:99:08:54
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:03:15:7d:20:b6:ab:9c:78:97:4a:01:82:73:8e:7f:e6:
c6:b9:33:51:7e:02:e4:e5:49:6f:35:91:99:69:60:3f:52:7f:
56:e7:8e:01:b1:f5:5f:d6:37:19:e8:3f:f1:9f:04:31:2c:7a:
6d:9d:2c:2e:1b:c5:56:6f:3a:98:69:79:27:ba:d1:67:7f:c4:
d8:89:52:c7:dc:31:e4:c6:3b:ed:ec:a7:58:f8:49:6e:69:05:
1c:72:bc:d8:fa:bf:74:70:c0:aa:44:f4:63:e1:19:d4:f4:62:
92:34:ab:32:cd:21:d3:b0:e5:9f:23:fb:09:20:1c:b5:f4:27:
39:47:7f:85:f9:41:00:99:ef:df:9b:3d:a3:2d:d9:53:ff:d6:
92:5e:48:a2:ef:66:4f:a1:77:ac:c2:2b:f7:a4:e9:2c:f9:5e:
92:66:b6:d4:a8:81:87:b6:23:67:e3:70:ff:0d:46:bd:90:ba:
6c:c3:63:b0:2c:f4:e1:cc:3f:4f:04:12:17:ae:5f:ed:a2:0b:
90:d3:dc:15:88:44:5b:c8:96:84:f5:ae:6f:ce:30:c3:12:ef:
7b:e8:bc:db:ff:c3:4c:3b:64:c1:c2:8d:87:da:8b:74:de:61:
c6:90:b7:7d:5b:d3:09:ba:b3:f3:20:45:e2:63:63:93:ef:80:
32:39:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:02 2026 by rpki-client