Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: Nnkj9tJLVyq1sxekA+VlZ8zDJOByfTVc7EZ2c92fCAU=
Subject key identifier: EF:F6:EC:46:0D:81:EC:6F:F7:97:A4:22:90:E5:59:37:C4:40:E0:C2
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 019F9392087A2529787957435383A7A968AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 09E4
Signing time: Fri 24 Jul 2026 10:00:48 +0000
Manifest this update: Fri 24 Jul 2026 10:00:48 +0000
Manifest next update: Sat 25 Jul 2026 10:00:48 +0000
Files and hashes: 1: _E48T5Kk_YeYZLQhVAgd8hC7YsU.roa (hash: k0dJ8PeVcNyuxj67fWBRQ1gHRoWtlCyhQvB826alDbQ=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: XmkytdKsE60dSE0msR8ddXQQpLpLG/kCrncZWV6Tgok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:08:7a:25:29:78:79:57:43:53:83:a7:a9:68:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Jul 24 10:00:48 2026 GMT
Not After : Jul 25 10:00:48 2026 GMT
Subject: CN=eff6ec460d81ec6ff797a42290e55937c440e0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:b2:dc:e4:40:07:7a:fd:09:97:44:9c:6b:
13:89:93:29:22:d1:2e:46:da:5b:94:1c:69:77:72:
98:44:9f:b1:2b:ae:15:5b:0d:08:65:d1:c3:34:3f:
c1:b1:88:b5:d6:90:82:13:24:58:23:df:c9:b7:13:
1b:08:39:21:ba:c5:75:84:60:fa:f2:35:4f:ad:4b:
04:6b:08:50:dd:5d:3c:dc:48:44:40:76:00:1a:3e:
96:f9:ad:38:c9:28:88:18:c9:a9:f8:fc:71:da:47:
2c:05:c5:e4:65:cc:7c:74:97:c8:39:1d:89:63:7e:
b7:04:36:67:c7:25:22:f7:7c:c0:a1:53:97:c0:64:
99:96:91:be:b2:86:08:a4:15:e3:1e:28:da:74:33:
41:7e:ec:31:a7:46:9b:11:ea:6d:5b:72:68:5c:32:
07:e7:42:7c:ac:db:03:2a:8c:f6:16:08:f3:60:a5:
28:35:02:18:0f:d9:9e:a0:3f:cc:a9:a8:7a:bc:da:
87:cc:3f:d2:60:c7:8f:ae:1d:0e:ab:29:5c:08:df:
63:7d:48:27:c3:c1:5e:f7:98:b8:a4:9b:61:87:4f:
77:ab:41:bf:f2:34:23:1e:f6:b2:52:5b:c4:17:0b:
52:e8:56:7e:9f:49:03:f4:1b:ff:10:30:7a:8d:2b:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:EC:46:0D:81:EC:6F:F7:97:A4:22:90:E5:59:37:C4:40:E0:C2
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:6b:31:22:63:80:21:b1:d6:52:57:29:f6:de:a1:da:41:
56:75:4b:34:0d:17:ae:ff:9b:8e:bd:7f:7f:c6:4a:48:a8:5f:
64:0c:76:7b:92:25:a5:54:66:b1:ab:0e:74:73:50:71:c7:5f:
62:75:66:37:f6:46:33:52:e0:de:12:66:75:5a:75:76:ad:3e:
51:57:d8:0b:36:30:90:df:f8:42:e6:dd:9f:56:ac:f1:9c:c8:
83:13:21:6f:df:d7:4c:c0:cc:af:19:80:99:a0:b6:ae:bd:fa:
f8:0b:c8:ab:e4:bd:d8:c9:a8:4d:a4:f6:ac:8f:82:cf:0d:38:
6e:2a:b7:36:bc:df:2d:31:98:c6:f0:af:a4:2f:a8:81:9b:60:
f6:7e:31:81:a8:8b:38:74:ec:e4:56:ba:70:a3:c7:b3:b6:3c:
d6:08:0f:38:e1:3a:56:db:47:c8:d4:a1:0b:22:2b:df:05:91:
30:6e:66:e9:7f:49:fb:a0:65:aa:e5:f8:52:39:f0:c6:ba:1f:
ba:8b:20:2f:09:2e:66:cb:4f:9a:26:ad:85:f8:d9:f2:c4:e2:
a9:43:bd:26:67:5b:32:35:e7:f4:f5:9a:df:e0:65:4e:ec:a5:
c0:4c:d4:ca:88:77:4b:df:6b:11:4f:5a:f9:3b:41:b3:ce:95:
66:42:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:32 2026 by rpki-client