Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: gHktVHdgNpQ0TOYO4iNLccEYJ3RRNDiu9IVhDtizlm0=
Subject key identifier: A9:5E:DF:E2:67:AD:5D:B6:AF:08:75:07:47:C7:53:D5:86:0C:C5:66
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019F8FB4C558320D6E643423E2F7A54B94C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 165B
Signing time: Thu 23 Jul 2026 16:00:16 +0000
Manifest this update: Thu 23 Jul 2026 16:00:16 +0000
Manifest next update: Fri 24 Jul 2026 16:00:16 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: D9b6PiG9EM6E5yirsbg2/iCLMroXc6iAxDX2BwQFybk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:c5:58:32:0d:6e:64:34:23:e2:f7:a5:4b:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Jul 23 16:00:16 2026 GMT
Not After : Jul 24 16:00:16 2026 GMT
Subject: CN=a95edfe267ad5db6af08750747c753d5860cc566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:dc:73:18:68:2b:e1:98:87:7c:4f:8b:49:
38:0a:50:b4:e4:f6:de:a4:e4:65:bb:92:0f:8c:b8:
fe:68:c8:95:10:e4:bb:ec:3f:23:1e:1c:1d:b7:28:
63:f0:a0:46:2e:0f:ac:ac:97:78:ca:b1:9b:13:0e:
08:75:b7:82:5e:a1:e7:f4:1f:ce:47:ba:d1:bd:32:
d1:02:36:9a:9d:c8:cb:32:bc:39:1e:48:a7:33:65:
12:cd:34:ae:b8:80:ad:42:d3:5f:2a:91:3a:e4:3b:
bd:a2:8f:d5:b7:d6:c7:e3:e9:74:92:d9:56:b4:c1:
c9:c1:3b:1d:2f:08:e1:f6:d4:c5:f4:c9:e3:ea:57:
5e:1e:84:a3:38:03:c3:a1:fc:a1:61:c0:67:fa:66:
ee:b0:b0:eb:b5:b5:ce:5b:ba:8c:b7:f2:5d:3f:59:
55:32:03:61:de:e2:1f:b5:26:a8:9d:67:45:bf:01:
81:14:1e:be:4b:53:9c:2a:de:89:40:41:e5:93:d5:
02:3b:a3:60:05:8e:61:55:df:9e:d8:9c:c4:63:29:
af:a7:59:fa:13:31:87:d0:a7:f8:48:79:56:8f:3c:
11:2f:4f:7f:d9:8d:99:35:69:3a:a2:63:b3:45:86:
50:43:f1:05:bb:80:7a:ac:1c:cc:8a:bd:bb:b0:b2:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5E:DF:E2:67:AD:5D:B6:AF:08:75:07:47:C7:53:D5:86:0C:C5:66
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c1:5c:58:76:52:38:48:00:d1:55:f7:9f:86:58:5a:d6:21:
59:26:4f:7d:08:aa:24:77:88:76:59:47:84:35:43:62:d4:3a:
ae:38:21:69:e8:07:f5:f9:22:12:0f:77:43:2a:32:25:e6:2a:
33:cc:e7:55:7c:18:c5:28:9f:1f:e9:e1:1d:b3:f4:b5:82:c2:
1a:2d:98:8d:59:48:94:d8:05:fc:a8:1f:e1:d0:be:3c:83:9d:
05:e6:50:2c:c5:76:dc:9a:8f:37:e2:ad:ae:bd:61:d6:05:bf:
53:63:1d:ef:90:09:59:c4:20:be:7b:2e:8d:fc:15:f2:e7:99:
21:2f:5b:09:ee:7c:bb:f4:50:ae:b3:81:0b:4e:1e:e3:f6:a1:
12:33:1b:01:3e:cb:22:88:76:d9:bc:10:55:96:e2:7e:c8:19:
10:a0:69:34:47:d5:b5:cb:58:25:79:9b:92:39:22:fd:d2:f1:
c5:0a:47:10:cb:40:af:a2:61:63:4f:c2:6c:c8:d9:0b:91:50:
a2:fa:7c:85:78:bf:0f:ff:40:76:7b:1c:e5:19:62:33:13:e5:
61:dc:54:8c:83:95:b6:2f:de:64:29:86:da:61:ac:5b:1e:0c:
e0:d9:dc:a3:8d:e4:86:30:f8:3e:45:7e:d1:68:78:32:14:3a:
09:30:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:09 2026 by rpki-client