Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: /H4k3eHa6vR3OAdepfP5ma94/5GWwOdbI+xxTn+VP+c=
Subject key identifier: F9:9D:3E:19:ED:2F:80:63:9C:2F:47:77:03:22:6D:A8:AF:AD:98:7F
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 019F905A27BD7B69039E0EC07C90066FF2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:00:55 +0000
Manifest this update: Thu 23 Jul 2026 19:00:55 +0000
Manifest next update: Fri 24 Jul 2026 19:00:55 +0000
Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: HLIP3atboMSXs5YR+dDqTsZFnOJQ164/rZ72Quk8TrU=)
2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:27:bd:7b:69:03:9e:0e:c0:7c:90:06:6f:f2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jul 23 19:00:55 2026 GMT
Not After : Jul 24 19:00:55 2026 GMT
Subject: CN=f99d3e19ed2f80639c2f477703226da8afad987f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:7a:f3:1b:ee:b7:80:36:0b:fa:1d:39:32:
e7:09:44:68:32:c2:8d:ab:7b:5e:58:99:05:38:e0:
53:26:c4:61:1f:b8:b5:2d:01:66:cf:09:62:e7:03:
f3:45:1b:32:09:12:4f:a9:c5:c9:8c:04:51:0e:30:
c5:06:e4:f6:64:1b:1b:3d:7f:87:0f:27:30:0f:52:
a0:4c:6a:aa:87:44:e6:92:b5:ca:e7:ae:70:4d:14:
94:f0:c9:49:45:82:ed:ed:e0:e0:fa:ae:6e:ac:7f:
27:d6:5e:26:ab:cc:fb:cf:31:f9:e8:51:a9:c1:1f:
4a:b0:65:94:53:96:b9:71:e7:36:98:2c:43:f1:d6:
a6:20:16:99:e3:06:9f:a2:88:c6:77:5f:e2:70:9b:
6e:c8:45:4e:33:ac:5e:1f:45:66:84:f5:b1:29:0b:
d3:df:26:89:2d:72:60:dd:48:f3:74:fd:a5:45:57:
cc:59:64:4f:72:19:9c:a0:f6:9a:cf:77:84:f9:f4:
49:d8:4a:16:64:32:6d:a3:7a:6a:ff:80:0a:72:95:
3f:33:4c:91:a0:a0:48:6e:5f:ee:03:8c:49:de:5b:
0b:58:d4:16:fa:c9:f2:98:72:56:c0:01:90:bb:eb:
56:3c:52:5c:c6:21:f1:be:57:1d:87:22:31:c4:c8:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:3E:19:ED:2F:80:63:9C:2F:47:77:03:22:6D:A8:AF:AD:98:7F
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:f3:e0:96:8f:01:d2:ef:e8:ec:c6:10:3c:60:61:50:81:
8b:ba:bd:a2:d5:a7:e4:75:46:31:4e:73:f4:49:c4:91:ba:44:
c1:b4:15:1c:c9:4c:49:e0:87:74:89:56:28:63:2b:50:fe:1e:
eb:12:ca:e3:4c:54:98:c8:2a:fa:a8:7f:2e:c7:34:ce:a2:4e:
ab:11:54:2c:94:25:e2:c5:5c:50:2a:b4:4a:09:5b:c0:90:af:
b9:3d:b0:2b:c7:cc:11:a0:08:a7:58:96:85:e3:84:c7:7b:3d:
62:0f:23:ff:ef:fe:52:19:24:41:b4:a9:b6:95:61:6f:bb:0d:
ff:d0:6e:86:e5:f3:f3:70:9f:c8:84:95:fb:e6:7e:42:fa:99:
d1:67:31:60:2e:ff:79:bc:8f:c5:96:b8:6f:6b:78:d0:ba:5d:
75:07:63:1d:38:07:50:32:8d:b7:af:f0:c4:b7:6e:4a:bd:86:
77:82:ae:96:10:91:f4:26:b8:6f:44:7c:e2:3d:37:a4:74:a3:
a9:e7:1e:52:b8:39:fb:11:71:3e:c3:e7:01:62:4b:50:b3:77:
61:a6:a9:51:8c:cf:87:f9:0a:75:60:d5:7e:6f:a6:e6:8b:77:
5c:f8:19:3a:72:ac:4f:92:80:bf:06:7c:65:ae:a2:a7:60:c7:
f2:c4:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:09 2026 by rpki-client