Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: 1+THUPv9pPq8ICWCkE/EANMAtZzK1FnAzbfEys1cFpo=
Subject key identifier: F2:41:4B:0D:38:AB:5F:BF:27:A4:6E:59:31:56:B3:60:3A:C2:C1:12
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 019F93246A52D98113D6F2C133F77434A80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 139F
Signing time: Fri 24 Jul 2026 08:01:04 +0000
Manifest this update: Fri 24 Jul 2026 08:01:04 +0000
Manifest next update: Sat 25 Jul 2026 08:01:04 +0000
Files and hashes: 1: apPx3gWWIpPWwELtpKMOfedJ4k8.roa (hash: L2yyhrzd5mRGd2rzEg04lr+rJwZPevmKVoJK5XcNojM=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: tqJOnDQ1YTfexwCd9v3Zt3L6+b05HHGmpfh0alW/2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:6a:52:d9:81:13:d6:f2:c1:33:f7:74:34:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jul 24 08:01:04 2026 GMT
Not After : Jul 25 08:01:04 2026 GMT
Subject: CN=f2414b0d38ab5fbf27a46e593156b3603ac2c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:06:cc:38:db:b0:d4:e3:a4:d6:81:4d:f5:
14:44:e4:15:92:60:e0:6f:e5:d4:71:0e:9b:ff:86:
6f:de:2c:9d:23:5a:09:54:a6:ab:af:ba:ac:6b:e6:
79:ed:52:6b:2c:e3:7d:6e:26:66:f3:97:93:fb:a3:
b0:1d:d7:3b:c8:e3:73:58:b5:2a:e8:da:1f:0d:08:
ae:12:68:67:c8:5e:7b:c9:2a:f6:6a:37:c1:7a:19:
a5:d5:c9:5b:3e:59:2a:50:83:f2:d2:7c:6d:3b:39:
4f:54:6c:e6:41:4a:6f:6b:44:78:fe:0d:5f:50:77:
40:09:02:ef:70:88:c5:44:a7:d3:b0:39:44:e2:9d:
60:d6:dc:a2:74:c3:a3:da:dd:7c:b1:01:9c:2d:2e:
39:63:ec:2b:ce:f0:f1:50:21:72:25:0d:cd:83:f2:
18:96:c4:38:5d:58:f1:de:75:55:1a:88:2f:98:82:
fd:f4:57:68:3f:2c:04:2e:f5:c5:2f:53:fa:76:f7:
46:0a:0f:98:23:54:39:58:90:24:1a:70:bd:51:c3:
c9:e8:87:a5:87:07:2c:8c:c6:32:21:40:c3:c6:bc:
44:5a:38:03:55:19:37:86:7e:ab:39:e6:f6:c9:23:
b7:3d:18:65:80:0e:af:c1:8d:c6:bc:e2:ce:67:20:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:4B:0D:38:AB:5F:BF:27:A4:6E:59:31:56:B3:60:3A:C2:C1:12
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:24:6e:b5:a2:6a:a3:48:39:7a:70:a0:27:d8:07:3d:39:bb:
50:84:98:c4:ee:ce:77:62:a1:31:0e:90:72:ef:4d:8b:6f:cf:
e0:a1:06:65:cf:3f:c2:b7:be:08:b6:6e:8c:e3:14:64:e9:ff:
71:1e:6a:42:4e:4e:ac:81:7c:03:e9:a0:40:e8:6c:2f:33:ec:
73:ef:42:c6:6d:1d:f9:72:8b:b7:14:ec:4e:7e:cf:df:96:ef:
b4:30:37:2d:6b:4a:0e:1c:6f:f5:33:89:4b:ad:d9:ce:47:a4:
e3:0e:81:e9:59:0e:df:18:ad:42:37:9f:d2:ec:c0:6e:00:7c:
c5:2c:ae:6b:14:17:98:30:3c:0a:f6:f1:47:cd:81:79:b4:b6:
24:f8:ec:f1:32:5e:83:f0:6d:5f:a6:32:3e:6b:44:15:27:d1:
1b:5e:67:3a:90:4a:4c:89:41:e7:9e:32:8f:ff:72:28:d6:26:
ff:9d:a2:80:e4:db:95:fb:59:d7:52:aa:29:4f:60:06:47:86:
af:26:a1:4a:cb:aa:38:df:a3:25:9a:2e:e6:a0:53:7b:95:2a:
13:7f:41:a2:4f:fc:45:40:b9:74:04:d2:95:7f:90:04:43:ab:
9d:18:31:6a:b7:53:2e:09:1e:44:6a:10:a6:a5:ce:48:43:5e:
a3:4e:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:33 2026 by rpki-client