Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: +P8UbgAfVDi8jUm7DWheSOX3BCK8IxNVLbvEqpM8HRE=
Subject key identifier: DE:6C:E6:66:FA:2D:3F:2B:C3:4F:2C:D2:D9:7D:D0:FF:55:08:1D:B9
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019F9580964BBE8482A19C765326E1C10E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 19:00:59 +0000
Manifest this update: Fri 24 Jul 2026 19:00:59 +0000
Manifest next update: Sat 25 Jul 2026 19:00:59 +0000
Files and hashes: 1: ea-vywNHOW21DX1J0UWlRSQDW38.roa (hash: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: ch7G1dxSdWAVnBbBbgW+wRaaBVFdGorAHIRcxpF8s94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:96:4b:be:84:82:a1:9c:76:53:26:e1:c1:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jul 24 19:00:59 2026 GMT
Not After : Jul 25 19:00:59 2026 GMT
Subject: CN=de6ce666fa2d3f2bc34f2cd2d97dd0ff55081db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:46:4a:ec:02:5a:9e:30:46:db:6a:02:8b:
bc:5b:c0:7b:24:28:24:04:f0:8c:2f:56:f2:94:15:
53:35:ef:3f:c2:8a:a2:b4:53:03:26:bc:fd:c3:f4:
ad:a0:55:5b:6d:32:8e:6c:0d:37:94:f6:c3:56:6f:
5d:7a:d9:d2:0a:cc:03:30:e4:81:cb:f0:60:66:16:
4f:bf:67:06:f5:82:68:77:70:74:a6:d5:b7:47:c8:
67:1c:46:38:b1:29:b8:04:68:35:4b:92:a8:bc:ee:
09:8f:20:4c:24:23:69:2a:cb:45:44:01:22:c6:d9:
09:8c:64:e2:ed:cb:64:09:a4:56:5b:c1:1a:64:22:
f4:33:00:af:ef:97:9d:b4:de:8e:33:61:59:c2:8f:
8b:cb:e6:d2:4d:62:9e:f3:51:5d:e8:c4:fb:bd:f0:
76:d6:68:3d:aa:91:53:75:6e:40:af:56:23:d4:41:
43:84:b6:fd:06:b1:f8:fd:e3:4e:ae:ae:60:03:be:
e3:6b:12:b3:cb:89:50:c8:02:e6:5f:2c:bc:3f:41:
27:ea:11:20:e0:d7:7b:58:a5:1e:46:25:bb:65:15:
b5:c8:b1:70:97:c7:d0:8b:9e:36:94:3b:1e:7d:31:
1c:78:66:ba:4a:eb:4d:8a:99:26:af:36:0d:91:03:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6C:E6:66:FA:2D:3F:2B:C3:4F:2C:D2:D9:7D:D0:FF:55:08:1D:B9
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:94:56:ad:b1:1e:05:1e:61:26:d4:64:05:c5:fb:6c:9d:17:
e4:db:9d:e4:b8:f2:c6:5f:f7:94:90:77:77:58:47:e8:f5:2e:
f4:63:44:d6:0e:e2:59:14:77:bb:db:d5:be:30:53:f7:ff:be:
bb:b2:d8:78:ad:f8:9c:c7:48:ea:e5:f8:0f:33:51:af:0e:1c:
b6:ce:f9:71:ea:52:67:57:89:e5:de:b2:31:09:4c:f7:e1:fe:
52:cb:f5:09:72:dd:0b:9a:ca:03:1a:ce:b7:fd:3e:b5:9f:d5:
fc:8a:5c:d0:5c:78:19:ba:f7:a8:99:92:3d:b2:9a:91:28:61:
38:95:2f:89:55:58:f5:63:4f:a0:16:63:03:50:5d:84:1d:55:
97:21:9e:8e:40:bd:91:2f:14:47:52:6d:b2:42:af:e7:e1:ea:
8d:bb:35:50:1b:1d:01:00:05:b2:9c:60:f8:5c:4e:81:94:f2:
c7:29:70:ac:2f:e9:ba:55:5f:53:dc:b4:4e:12:a8:84:71:c6:
fb:1e:85:e4:24:35:55:ce:83:0e:93:c9:66:ed:e2:51:9c:a6:
54:22:02:57:06:57:64:32:2d:db:42:ab:ea:64:e4:bd:b6:fa:
91:d1:4e:da:bd:fe:6f:80:90:81:4b:81:1f:65:32:4c:74:f9:
8b:57:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:16:46 2026 by rpki-client