Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
File: kcvU3ulACZF4SiL7T0Kypy5eMPI.mft (raw, json)
Hash identifier: PtyApQtOYAIGcWQU61r6a6c8W3tRqcbZlKSJzSfPm1E=
Subject key identifier: 40:00:26:01:D2:A3:C8:70:69:2E:E3:63:EE:2F:F2:6C:B4:FE:21:DB
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 019F916CD102E8F17DF8EAC1614D2CC8BD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:55 +0000
Manifest this update: Fri 24 Jul 2026 00:00:55 +0000
Manifest next update: Sat 25 Jul 2026 00:00:55 +0000
Files and hashes: 1: dfMJsRYPaWYegojrV6JhI297OJk.roa (hash: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=)
2: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (hash: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=)
3: kcvU3ulACZF4SiL7T0Kypy5eMPI.crl (hash: Vd6HACLSYC6Booh/6Wd6WZYNayEx6qFdxd5pp4Z79Sg=)
4: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (hash: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d1:02:e8:f1:7d:f8:ea:c1:61:4d:2c:c8:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Jul 24 00:00:55 2026 GMT
Not After : Jul 25 00:00:55 2026 GMT
Subject: CN=40002601d2a3c870692ee363ee2ff26cb4fe21db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:a9:9a:db:d1:ef:6b:5e:8c:fa:64:1c:75:
12:9d:2d:ce:5e:f6:e8:10:69:83:7f:99:a3:f0:2d:
84:5c:97:3b:df:52:38:e0:b3:6e:4e:84:69:6c:39:
5f:61:64:64:4d:70:51:5a:5e:02:50:0e:ce:e9:5f:
d5:89:d1:8e:10:ce:50:be:76:0d:1a:08:32:ba:23:
15:e1:fc:3f:a4:1c:bf:f4:bb:57:98:1c:89:03:94:
f6:6a:d6:b4:32:8d:b2:da:24:3f:5e:03:f2:94:99:
21:30:97:68:4a:1f:9f:ba:0e:0f:c4:cf:2a:7c:10:
bf:ce:ba:e4:6c:9a:a3:de:ea:84:86:f7:19:05:16:
48:49:f9:d6:74:af:84:23:45:c3:7a:30:1c:d7:ba:
0e:e3:98:28:95:b3:fb:ac:98:26:7c:b1:da:1b:67:
27:01:32:a0:d1:d0:de:ff:4a:90:29:f0:10:53:11:
64:f9:1b:76:fb:2c:66:54:27:9c:63:07:a2:b8:19:
2d:bb:b2:8f:8b:cf:22:76:ce:6f:d2:2a:37:22:26:
c4:7a:5c:21:14:12:6b:46:7e:84:2f:e4:0d:c3:6f:
15:01:12:e2:c1:86:f3:95:1e:c9:90:33:8f:90:4c:
4e:79:b7:31:93:b0:2c:2e:f6:3c:fd:b6:0a:67:72:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:00:26:01:D2:A3:C8:70:69:2E:E3:63:EE:2F:F2:6C:B4:FE:21:DB
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:c5:4f:d6:59:ac:7b:97:da:a0:db:93:69:b1:ac:12:84:
17:85:6e:34:3f:25:c3:2e:84:b1:a9:7b:43:56:5b:fd:53:58:
e8:a8:7e:ec:54:c8:9b:b7:7d:9e:ca:c2:ce:09:8e:84:4c:43:
99:af:d2:ce:ee:03:78:c3:20:61:f2:dc:9f:d3:47:61:26:44:
d0:83:d2:f5:40:5c:6d:36:fe:59:a5:fa:cb:7d:f2:22:71:6e:
60:2c:21:81:e8:09:2d:e7:c7:52:47:58:07:bd:37:9b:aa:64:
db:f9:c4:88:2d:2a:fb:53:01:47:0f:a2:7a:08:34:1c:cb:4d:
e0:83:74:87:c2:93:0c:35:d0:f0:33:7b:27:23:9e:39:09:7a:
28:d3:ba:50:47:ed:eb:b0:5e:b7:9b:47:7d:09:70:29:0a:64:
af:95:26:ee:75:b5:21:77:76:57:f2:f2:90:79:95:4b:fb:bd:
cd:d2:6d:34:2c:e0:0e:c5:bd:3b:8d:e9:c7:ba:89:ff:c4:25:
c7:e5:08:7e:24:88:b3:33:8c:8c:92:99:e9:59:20:3d:0b:2d:
2a:43:8d:da:d2:b5:e0:ad:5e:cf:72:b2:35:de:85:5d:b8:ef:
b8:69:dc:c3:c6:d9:81:ee:20:93:6b:6c:22:9b:67:43:a6:bc:
f9:dc:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:06 2026 by rpki-client