Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: Flj5oR0yMCn+0ZkQakKM7KADJtd2zL8zYTqWa9rDqCw=
Subject key identifier: A9:FD:F6:AF:F0:F7:CB:9E:10:66:CC:AA:AA:BD:BC:5B:88:3B:96:25
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019F946E3DD84DE90703D52279ABCD2022E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 14:01:20 +0000
Manifest this update: Fri 24 Jul 2026 14:01:20 +0000
Manifest next update: Sat 25 Jul 2026 14:01:20 +0000
Files and hashes: 1: EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa (hash: DiOXAHVLFTKKr3dT1PY1tAEci/bbe0sz/zVufkS6kQs=)
2: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: bh6VV2vLs2zPA2djCBXAsPspBTXS/34HjqnzBi2vhx0=)
3: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:3d:d8:4d:e9:07:03:d5:22:79:ab:cd:20:22:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Jul 24 14:01:20 2026 GMT
Not After : Jul 25 14:01:20 2026 GMT
Subject: CN=a9fdf6aff0f7cb9e1066ccaaaabdbc5b883b9625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:98:d6:df:37:0e:4b:df:b6:13:ee:76:f7:
39:cf:d9:e1:70:2d:a7:2f:6e:e6:ad:6c:11:1d:e2:
e1:f2:97:c6:09:f2:2e:3d:19:6c:34:ec:b2:fc:5c:
0c:78:9e:e4:77:c3:7c:a0:d8:a1:12:23:b3:58:2a:
6e:c2:0b:1d:f2:74:75:5b:39:a1:55:49:e2:72:83:
22:3d:3f:8e:6e:d4:f1:2d:7d:6c:6e:87:8b:a0:a7:
49:13:ff:bb:16:e2:a4:98:68:ff:ae:e2:98:65:56:
e6:8c:9a:5c:94:e3:29:e4:f1:9d:c0:87:24:1b:f4:
fb:c3:8d:f7:22:bf:9f:6c:ba:55:fa:6f:b6:1d:04:
9d:8b:bd:c7:d1:70:ba:52:f6:27:74:32:a4:8e:e0:
bc:66:05:a8:9b:9b:b4:2e:db:0b:2a:6f:2c:fd:d2:
70:78:24:b3:31:7e:3b:38:60:0f:ba:72:90:c0:fe:
cf:df:4f:4a:67:f5:9a:b7:8d:43:be:38:08:e4:7d:
b0:d6:2e:18:7f:27:1e:5a:9b:01:7c:dc:ec:8b:ca:
0e:a4:df:7c:3f:7f:90:11:c1:c6:f7:4e:c2:71:42:
04:09:5f:d5:8c:42:c2:f2:87:56:e0:92:bb:e1:36:
f9:b8:1f:66:03:c9:77:d7:aa:37:3f:3c:c0:b8:cc:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:F6:AF:F0:F7:CB:9E:10:66:CC:AA:AA:BD:BC:5B:88:3B:96:25
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:d1:e9:2a:d0:85:e3:17:03:3b:43:ab:30:0f:f1:72:1d:
14:9e:b9:40:7f:48:eb:ce:6c:18:e6:39:be:5e:0d:6a:dd:c5:
7f:13:ef:58:df:8f:4f:c4:dd:aa:52:48:41:0b:f3:ec:84:af:
50:7d:ca:2d:d3:0b:1e:a2:f6:7d:a4:8c:ee:61:7b:7a:ca:31:
d9:ae:d1:57:8b:93:35:b1:ae:ab:1c:02:e3:9d:92:98:22:41:
b5:8a:77:e4:96:f2:1f:dd:b7:69:af:85:1f:e6:46:28:61:a9:
74:d3:a7:af:fe:d1:8c:22:72:a1:e8:d2:29:37:a3:2c:a7:60:
30:a5:8a:8f:1b:5c:cc:c4:e3:b9:46:f2:16:c3:be:e0:13:6e:
39:03:e9:7b:23:c6:32:7f:60:4d:bf:4f:84:35:c4:ea:9a:29:
24:a5:ea:52:c5:a8:2c:a7:71:3a:43:13:c3:c4:9e:21:95:16:
7e:1a:80:7c:59:39:cf:62:50:44:b3:f4:cf:ea:be:4b:70:2a:
f0:a2:f0:04:cf:0e:1f:5b:ab:72:40:ed:50:97:8a:13:0a:93:
81:8c:71:39:0f:6c:6a:2e:d7:44:2e:e0:ad:8a:9d:fe:af:c3:
d3:3f:6f:68:6c:9c:9d:54:5e:43:0b:6e:a6:36:4a:40:6f:78:
3d:4a:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:12 2026 by rpki-client