Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: SS8O3zXYImGqa3NM064Z9riOJZp5ee9DgbaDrKkY96I=
Subject key identifier: 71:4A:7E:7B:1C:C2:8D:C0:47:CD:C4:DF:9A:09:A2:75:57:5A:26:11
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 019F91A37AE14036DDC7488FA7DBDE6349D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 01:00:37 +0000
Manifest this update: Fri 24 Jul 2026 01:00:37 +0000
Manifest next update: Sat 25 Jul 2026 01:00:37 +0000
Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=)
2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=)
3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: 8pcLammxHzutrDCjKj9yVgBLhV/IouycLS2KyhCPs+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:7a:e1:40:36:dd:c7:48:8f:a7:db:de:63:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Jul 24 01:00:37 2026 GMT
Not After : Jul 25 01:00:37 2026 GMT
Subject: CN=714a7e7b1cc28dc047cdc4df9a09a275575a2611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:58:64:01:91:6d:58:9c:af:63:90:0c:45:
e9:2e:90:34:a0:80:9d:3a:c9:5c:4a:3b:43:28:ab:
8d:31:f8:5e:74:b1:e2:a6:37:15:37:3a:62:2a:26:
e7:27:23:45:3a:ab:3c:47:a9:9e:95:cf:91:8e:0c:
e8:04:ad:f4:99:e5:6a:31:4f:d7:07:03:3b:c3:27:
51:6e:5d:94:aa:55:a6:5f:e3:8e:11:f7:95:8b:87:
86:20:2b:63:d8:1f:83:1e:39:39:ba:52:42:90:c3:
c5:45:84:29:ae:a7:5d:8b:24:b1:e3:4e:fb:87:42:
f4:e8:1b:31:7d:f2:d2:6e:6a:48:cd:0b:3b:78:f6:
64:5e:27:fe:d6:f7:99:7e:c2:05:43:e8:89:d2:5a:
b4:07:08:a0:8e:0d:d5:12:18:eb:19:63:c7:1a:72:
06:ca:4b:f7:97:66:c6:22:77:95:a1:60:ad:75:5b:
8d:12:72:64:cd:7d:84:44:2c:cf:f6:63:2a:ec:45:
ca:e4:a0:e1:d1:e1:47:47:28:fe:14:41:ac:33:47:
67:a5:d4:da:89:20:a1:b2:a8:e7:c5:e8:e8:b8:d8:
e7:1c:c2:f7:9d:f1:70:bf:5c:7e:ff:78:1d:89:08:
d9:f2:87:84:09:0c:e4:bb:e7:70:9c:db:06:30:7a:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:7E:7B:1C:C2:8D:C0:47:CD:C4:DF:9A:09:A2:75:57:5A:26:11
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b8:fa:24:b7:f9:1f:21:a1:fe:f4:22:9a:07:64:9a:9d:92:
c3:10:ac:ec:18:36:51:92:85:04:52:08:9f:68:06:f2:e6:dc:
35:40:e4:da:93:4e:0d:d2:f0:e8:f5:f9:17:44:3e:e3:22:3a:
c3:2d:6b:e8:25:4d:69:44:12:7e:fc:a8:d2:b6:35:1d:28:78:
40:6b:8c:91:2a:7b:29:26:46:cb:d0:70:08:85:87:9e:c5:b6:
59:22:af:25:11:9a:5b:6a:dd:30:4d:7a:19:e2:23:ed:e4:44:
83:92:7f:c6:78:78:17:1b:45:e4:eb:1f:d3:e8:17:2f:6e:1b:
98:7d:18:8e:71:12:d3:f9:2d:96:57:0d:d0:77:2f:ab:c9:9e:
8c:8c:e8:eb:cd:18:82:c2:9f:ae:ce:34:8c:d3:f0:98:08:37:
d1:da:55:23:e0:58:14:9f:7f:12:c8:a3:1c:4f:23:1b:ae:26:
3d:29:43:22:05:2f:8b:36:7a:d2:80:45:77:35:55:da:4a:17:
0c:2b:32:eb:b9:5e:de:ad:67:e8:38:b3:0b:bd:72:40:2c:1d:
84:92:63:83:bc:35:c4:60:4e:d4:94:88:7f:a3:bc:73:8f:38:
b9:39:ad:51:68:9a:47:57:81:1e:dd:44:29:d5:ce:41:d7:70:
f1:6f:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:56 2026 by rpki-client