Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: ldCtpZ/TqFZqGn5sAuXs304IuI4/Fc3l/SJ5YTo6oa8=
Subject key identifier: CB:4C:70:9D:E9:D3:D2:C2:92:B3:C7:02:EC:91:53:74:E2:45:12:9D
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 019F9022BCE80555A3141BD8C05BF13149C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 18:00:23 +0000
Manifest this update: Thu 23 Jul 2026 18:00:23 +0000
Manifest next update: Fri 24 Jul 2026 18:00:23 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: JzJhubLFWdHe7Yh4z5FstaBcAZdRR6ILjQf+j/pkNbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:bc:e8:05:55:a3:14:1b:d8:c0:5b:f1:31:49:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jul 23 18:00:23 2026 GMT
Not After : Jul 24 18:00:23 2026 GMT
Subject: CN=cb4c709de9d3d2c292b3c702ec915374e245129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:25:32:ec:d8:0a:77:ed:2d:fd:0e:ca:38:
57:04:98:40:00:2b:92:e6:db:6a:60:4c:7c:a0:a6:
fe:58:47:73:2c:a5:18:1f:53:ff:58:a8:ac:90:0e:
df:e7:fa:28:d4:21:1a:48:8f:c3:53:d9:95:e3:c2:
0c:cc:91:9c:aa:78:58:72:81:6c:07:c3:ed:ba:7c:
9a:75:7c:57:2c:cc:1d:b4:a0:84:00:87:d3:cb:ac:
88:ec:43:58:16:39:02:23:39:5e:be:b9:3e:98:ae:
eb:09:06:1b:82:18:8a:0d:47:47:2b:09:fb:7b:fd:
fb:8a:62:4d:8e:78:00:06:3a:32:ef:22:b2:b0:a5:
79:f2:ef:86:61:5a:d3:dd:a6:03:33:28:d8:31:fb:
13:d8:e2:8b:59:d5:bd:27:58:18:87:a1:94:8b:39:
b0:a6:6e:4d:43:e4:3a:e9:8e:40:6e:3e:bb:5a:64:
4c:e0:ec:50:6c:44:8f:4b:f3:c5:d7:06:25:14:30:
70:e4:95:dd:4f:a1:b4:75:4a:76:4a:b7:6f:47:a3:
5c:11:39:57:34:1f:9f:1b:27:5d:7a:5a:cd:a8:c6:
b9:74:b3:7f:55:5c:12:8d:d4:dc:b8:33:1d:fe:41:
dd:11:1c:5f:6b:d2:6c:af:a0:35:e4:98:a8:2f:50:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:70:9D:E9:D3:D2:C2:92:B3:C7:02:EC:91:53:74:E2:45:12:9D
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:66:08:0f:ab:32:4d:96:bb:c5:c7:05:da:4e:80:4d:53:fb:
a1:4c:4b:7c:56:eb:b3:3b:ac:c9:f0:2b:a4:43:8a:fc:8c:6d:
da:02:de:94:33:a0:0f:9f:75:6b:94:3f:06:f6:0f:eb:c0:3e:
ff:0b:c1:9d:c1:40:4b:62:39:51:3c:ef:c8:fe:d5:42:8a:8a:
dc:ea:63:89:c4:ea:da:59:04:c1:50:57:38:c9:54:82:79:5b:
b5:94:e7:c0:a8:ea:0c:1b:af:d0:1c:0a:5c:cb:87:3b:67:eb:
dc:f2:68:b0:89:5a:72:64:15:b2:91:27:f3:c9:2a:48:15:60:
d0:58:3b:e4:ca:30:ae:7b:37:48:98:de:b7:e7:82:ac:52:60:
15:2d:ac:70:b4:51:d3:0b:b4:28:91:02:4c:e1:e7:b9:22:40:
42:c0:c3:74:f8:7c:62:61:5b:c8:d0:26:55:04:40:24:93:b5:
48:d4:e6:6c:bc:88:1a:aa:79:c3:72:b6:54:58:67:4f:ff:31:
bc:f9:ec:bb:63:47:1f:64:ca:eb:2d:fa:8f:3a:3e:0a:a0:ac:
e1:31:d9:aa:1e:9d:d2:91:86:0b:9a:58:ed:7f:8c:96:e6:b4:
2a:6f:b6:3d:9f:a3:33:48:e7:14:a0:b1:41:d4:77:07:5a:f8:
5d:e9:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:35 2026 by rpki-client