Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: NTZBgwy+H9tFx8QSKJx36Nw4/iuQq6VPMkm5lrT+T0Y=
Subject key identifier: 58:E0:AE:9C:40:D7:45:3D:06:78:67:89:1F:57:48:47:9A:02:FE:B1
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019F91DAE1227A87DF7C8C25F05BA08C2B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 17A5
Signing time: Fri 24 Jul 2026 02:01:08 +0000
Manifest this update: Fri 24 Jul 2026 02:01:08 +0000
Manifest next update: Sat 25 Jul 2026 02:01:08 +0000
Files and hashes: 1: AO06uJHkVshYcEPLGfhX8Uw9gpc.roa (hash: 5SvwdBIYhvyrwzSR8AKYSXgpfbX0MUkDamcTaTo4pOY=)
2: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: KXBN32AaKMDVdrVx9AgCLj3ZDPCuYbOqpHKzCoSApyc=)
3: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e1:22:7a:87:df:7c:8c:25:f0:5b:a0:8c:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Jul 24 02:01:08 2026 GMT
Not After : Jul 25 02:01:08 2026 GMT
Subject: CN=58e0ae9c40d7453d067867891f5748479a02feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:0f:1a:34:a7:b9:4e:30:08:cb:b9:ab:92:
c1:b4:6d:aa:a3:f8:09:4c:b9:2c:13:b8:c0:e1:92:
c8:73:10:75:ed:a5:2d:9e:29:83:1e:11:0e:c7:a6:
51:88:93:d3:0d:cf:77:aa:60:46:3e:ba:0f:6f:46:
2a:cc:cf:5a:4f:cc:ea:04:1a:5d:a3:3f:99:26:4d:
8c:c0:41:ef:12:96:42:c3:85:c9:5a:30:95:2a:bd:
f8:12:d1:be:c5:06:c5:fb:38:94:7d:8c:12:3d:ee:
c8:54:29:73:85:36:77:e8:19:9c:49:c1:a4:99:bc:
b2:d8:1f:76:3e:b6:74:ae:cb:0e:18:28:fb:2b:ab:
7e:cc:3b:f5:7c:a7:7d:96:68:d6:0a:4c:37:3e:99:
8a:b2:3b:39:86:35:53:16:b1:bf:fb:9a:34:e4:6f:
79:7a:09:7c:f2:ae:3d:2f:83:4f:fd:dc:9a:1a:9c:
0e:a9:b0:bf:46:44:77:28:90:bb:8d:c3:c1:5a:15:
c2:52:97:2a:3f:06:92:cb:3e:77:97:79:ba:27:05:
d1:07:70:77:6e:8e:56:a5:09:71:92:26:66:32:cc:
c4:4f:8b:59:b2:6a:e7:97:dd:cf:e6:ca:29:a0:04:
63:6e:2f:10:ef:7f:54:e9:f9:97:84:1c:06:94:a4:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:AE:9C:40:D7:45:3D:06:78:67:89:1F:57:48:47:9A:02:FE:B1
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bc:0f:7f:5a:59:8e:34:bd:ed:c9:a7:6c:a2:82:25:82:58:
81:29:5e:a9:e1:69:a7:78:90:ec:64:99:22:83:5d:5b:a1:65:
12:49:58:bb:e3:50:28:68:4b:be:13:2e:a7:0b:d5:da:09:46:
f9:73:03:18:ab:99:96:f6:c4:b0:79:37:c0:a7:e5:86:1a:e1:
27:ce:38:9c:b2:88:51:0c:df:db:1e:6d:86:7e:03:e8:30:9f:
d7:ef:9d:87:c5:c7:1c:9e:be:db:f2:83:9b:57:f2:83:da:35:
9f:67:73:2a:69:1d:59:b9:b3:c7:da:19:e1:1d:9e:5c:03:04:
81:58:e6:b7:78:60:4f:1b:19:d7:50:6e:79:6e:bc:92:2f:c0:
d4:57:e1:4f:65:80:22:b5:59:b5:e0:77:90:d9:aa:c7:f0:02:
7e:93:59:45:4f:1f:b9:aa:c9:43:b0:cf:fd:e2:d7:d3:8a:42:
9a:9c:08:5d:af:42:57:c3:6c:6c:e5:7a:fc:65:1e:80:50:4c:
99:4f:1a:3a:d7:80:b5:a6:b6:35:82:0b:ed:e3:39:eb:db:9b:
e2:d6:b1:17:cf:2b:23:fb:31:63:d0:30:aa:11:60:55:11:05:
c3:13:1b:e6:33:95:0b:12:e0:5d:2c:2a:cd:f7:38:1e:22:fb:
9c:bd:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:11 2026 by rpki-client