Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: nqSDkd38QC+2T2JL7ldgrZl8fXInkoZNMSOC2+sDdxc=
Subject key identifier: 03:CA:29:B5:4A:3A:43:90:64:0C:31:A3:2D:07:7E:CD:1D:78:0F:D2
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019F976EE425441C61773759472611B38D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 19CB
Signing time: Sat 25 Jul 2026 04:00:54 +0000
Manifest this update: Sat 25 Jul 2026 04:00:54 +0000
Manifest next update: Sun 26 Jul 2026 04:00:54 +0000
Files and hashes: 1: ea-vywNHOW21DX1J0UWlRSQDW38.roa (hash: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: cZuqG9iC9rbDxs40y2YCRqX6gya5cMhzHLijyomTi+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:6e:e4:25:44:1c:61:77:37:59:47:26:11:b3:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jul 25 04:00:54 2026 GMT
Not After : Jul 26 04:00:54 2026 GMT
Subject: CN=03ca29b54a3a4390640c31a32d077ecd1d780fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:2a:ae:d0:eb:08:6e:a2:5e:ea:ae:c0:55:
f2:95:36:23:66:f4:7c:20:25:c2:27:77:37:98:38:
ad:46:21:74:81:14:03:6e:89:e7:0a:6c:e8:b5:61:
73:cd:a9:ba:c7:6e:bd:4b:1f:99:d5:56:12:cb:95:
18:aa:f0:0c:13:fa:64:20:05:5c:c1:a4:34:c4:14:
41:3c:4b:1b:61:a6:74:df:2d:d0:15:18:79:c2:88:
d1:17:8d:32:08:dc:5e:5c:6c:e0:c0:03:a2:7f:39:
2f:b3:3b:20:70:d1:81:c4:fb:2a:59:cd:6d:ae:b2:
34:62:7e:86:90:85:88:3e:77:d6:b7:87:7a:a7:1c:
d1:66:70:2b:4f:cc:a5:bf:93:c1:f3:ed:66:99:55:
1d:e1:6e:04:03:e4:af:bc:02:32:f1:c5:93:24:b1:
4b:74:cf:d1:dc:18:4e:a3:61:c0:ad:6b:45:b0:b3:
9d:2a:11:b7:37:f7:f8:a1:e9:47:c9:c2:52:2f:28:
69:0f:cf:c1:55:2d:8e:34:0c:cd:06:50:94:2c:10:
44:e6:21:13:27:4a:e5:39:10:e9:42:ca:4a:80:27:
ca:14:20:ff:d6:95:13:65:ae:50:a2:7f:8d:0f:93:
00:12:f3:db:09:24:a4:be:a2:35:b5:9c:25:9d:4e:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:29:B5:4A:3A:43:90:64:0C:31:A3:2D:07:7E:CD:1D:78:0F:D2
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:9b:02:9b:65:9e:79:ea:1f:00:96:24:a0:91:0c:40:69:17:
a7:6a:e1:d3:b9:b4:45:ea:a1:b7:03:22:06:f8:b1:2c:6c:89:
ad:6a:b8:1d:2a:a0:81:7b:dc:51:c0:98:84:0d:e5:24:55:20:
39:5f:ed:e8:b1:40:de:d0:c2:72:8a:c9:19:33:53:5c:af:14:
b7:1b:d8:e6:d7:e5:30:4f:5b:72:81:ef:4a:21:dd:a1:88:ca:
94:7a:83:29:b8:2c:f3:ab:bd:17:03:e8:96:ba:e8:96:96:dd:
58:43:82:45:de:bf:b0:1e:a6:fd:d4:52:b3:cd:a7:83:83:96:
65:10:18:14:1b:36:82:f3:c6:21:28:84:14:de:a8:a0:b3:a8:
db:4e:ad:0b:4b:e5:04:96:3e:e2:5d:e6:2c:2f:69:93:57:6c:
09:64:46:27:07:9e:75:86:12:11:26:b0:52:80:d3:cf:91:35:
3a:a3:ae:5c:2d:db:1d:9d:c8:38:3f:d6:ad:81:ca:79:95:6a:
98:e1:ae:6b:11:2d:1a:af:dd:8f:d6:ae:31:1c:96:75:fa:5e:
ae:94:33:74:7c:04:19:ac:bb:ba:82:bc:6e:d1:16:fb:f2:d0:
af:c8:77:88:e8:58:68:fe:19:4d:20:18:28:31:97:07:12:ce:
f4:9d:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:37:26 2026 by rpki-client