Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: QBFkm5BUWb4HZttrDgKpjI3Br+swA6yuCTn9hBWsC5U=
Subject key identifier: CB:F0:B3:A5:8C:1A:FC:09:79:D4:DB:36:53:34:C2:11:A3:8A:F9:96
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 019F96252F785BABCFF68FD6EFDE18891710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 22:00:47 +0000
Manifest this update: Fri 24 Jul 2026 22:00:47 +0000
Manifest next update: Sat 25 Jul 2026 22:00:47 +0000
Files and hashes: 1: GsOQ3vHLALBSt2vVQO29hA2BDVs.roa (hash: aWsUfnYc/JWm4k92bPXDyfEmKfbouMQNVW8ooA99juw=)
2: gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa (hash: 8UqEhKXsnSJXNjsmPY0ghzVvMiK8gZZNf/NDxzYBX1Y=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: 7TgobQSAR968gOiIfcAa2IGbrjwi50FSvMEelR5LWrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:2f:78:5b:ab:cf:f6:8f:d6:ef:de:18:89:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jul 24 22:00:47 2026 GMT
Not After : Jul 25 22:00:47 2026 GMT
Subject: CN=cbf0b3a58c1afc0979d4db365334c211a38af996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:5c:63:3a:e3:8e:42:38:9a:ba:f2:e3:88:
75:7e:65:ad:fc:6b:73:98:19:fb:e4:bb:15:89:ce:
83:cf:1e:0e:69:54:03:65:71:41:dc:1a:f4:f0:21:
98:2c:71:9e:56:43:45:d3:18:0d:3a:74:6c:e2:a9:
ad:95:95:2c:6d:4a:ba:f0:bf:f8:30:5c:00:23:b2:
3e:e3:d4:f8:6a:dc:64:aa:98:fa:d1:5f:6f:0c:aa:
59:7c:8c:7b:8d:1f:cd:4d:66:ee:3e:b7:bd:2a:10:
b4:15:fe:91:0b:2f:8b:6c:83:f5:6d:b1:1a:db:e2:
1c:40:3e:d1:71:c2:1c:e3:e9:57:ae:9a:4e:49:40:
f1:b0:e2:1c:1f:ef:9c:83:bf:19:71:66:ac:53:c9:
fe:0b:ce:c1:52:2b:04:ab:5d:b1:8a:db:25:bc:79:
19:13:75:78:3a:53:5c:cc:56:8e:50:fc:7f:1a:7b:
3d:cb:72:95:ef:af:45:ae:9a:b4:f9:b5:47:b1:82:
30:14:ec:6a:89:41:21:4f:81:ba:7e:d5:2c:b9:10:
7c:27:fc:19:e9:8f:15:ff:00:80:2e:30:d5:c2:15:
d8:60:16:c6:50:d4:be:c2:10:15:4e:48:b7:38:3d:
49:83:45:2e:b4:35:b4:3b:c9:18:ca:c9:50:f2:6e:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:B3:A5:8C:1A:FC:09:79:D4:DB:36:53:34:C2:11:A3:8A:F9:96
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:06:fe:f0:de:39:01:81:12:28:ff:9a:ae:ab:b2:ac:c5:
cf:d5:b8:7b:b0:d2:e0:64:0e:37:52:b1:b7:15:74:f0:af:d7:
29:40:e8:8e:a8:4f:a5:e9:a2:8c:d0:44:a2:97:8c:cc:9c:f8:
9b:93:48:c7:c7:7b:4b:59:fa:20:b3:ef:c2:a5:8f:b6:b1:3e:
b5:1b:cc:9d:7d:5c:b4:c4:02:b6:4b:8c:23:4e:24:f8:7f:ca:
19:8d:13:5f:0c:80:e9:ce:d2:34:7a:e9:70:02:f5:d3:74:70:
f7:5e:85:93:43:c7:1d:a5:d7:f3:a5:be:1d:00:3e:c1:b8:41:
fd:6e:b1:8a:3b:b4:91:16:11:b6:b1:fc:5f:c0:5e:36:59:86:
ef:da:5d:22:00:8b:8f:42:76:f2:43:3b:e2:2e:e9:7d:8e:b6:
d0:bb:2b:10:08:b9:7d:ef:d0:e2:96:8d:80:bc:c2:7c:4c:b1:
fd:d2:f4:2e:1c:8f:43:05:7e:d7:66:74:0a:8c:7b:ff:9d:9a:
60:6c:80:12:83:82:a1:0e:40:f4:0a:ae:16:3e:a9:ef:b6:2f:
2f:de:9d:d2:c4:dd:98:e5:43:a1:6a:8e:23:9a:bd:dc:6b:0e:
f3:da:f0:24:bd:1c:71:35:fe:59:2a:7a:a4:a2:f5:81:ae:53:
f8:b3:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:26 2026 by rpki-client