Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: zHEwIJh61817FdTqz8LVNdCryLGxf6EwGODasuQgj+A=
Subject key identifier: B0:F3:21:59:0F:32:36:B6:EF:45:1E:60:A6:E1:8B:65:90:E2:D6:97
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019F92ED1D4F5F3A0D9A92FD4517A29DCDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 07:00:40 +0000
Manifest this update: Fri 24 Jul 2026 07:00:40 +0000
Manifest next update: Sat 25 Jul 2026 07:00:40 +0000
Files and hashes: 1: FBhDmdYEI1srtuu7JrFgr66x8ew.roa (hash: R2ovnBFrcn5EnM6GfbKn3aVU8U4YfuAvDOw4VakEfcE=)
2: H0_IomRRpyz9ZuX5Gk79E728dxM.roa (hash: e7ZDp/bE6peOT9CEy08QjhlQAfh2fOeWM0+4hMAUyDw=)
3: aYuTn-9yQTAQTYpNQto8rHBvH-k.roa (hash: nykKhsVthOtSK2vkaElBeNHj+3rLVcnRvVm79PIvOeg=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: RwrVSu+8vgZDiYsvUwMzHi7nFte5IdGO5BbEgo5g4Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:1d:4f:5f:3a:0d:9a:92:fd:45:17:a2:9d:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jul 24 07:00:40 2026 GMT
Not After : Jul 25 07:00:40 2026 GMT
Subject: CN=b0f321590f3236b6ef451e60a6e18b6590e2d697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:6e:cb:48:ed:61:5b:dd:89:3b:0b:4b:02:
70:bc:65:4f:60:fa:4f:ca:a5:a8:05:09:28:81:dd:
a6:f2:8f:c5:14:28:82:36:66:07:a5:58:8c:ab:5b:
dd:3b:20:57:fa:ad:a0:d0:5e:44:5e:28:1b:d4:2f:
4a:16:fa:6e:ce:a0:80:f1:bf:dc:be:c0:3f:4d:6a:
ea:50:16:6c:3a:91:45:b4:10:4a:16:c5:4c:20:57:
00:76:bd:54:09:63:20:3c:3c:58:66:54:03:25:26:
3e:47:be:e7:16:38:f6:d4:c1:3f:ad:5d:8b:c3:39:
e1:3b:d6:9e:b3:12:9a:d5:b6:64:d3:c0:d5:a0:da:
a4:4c:7f:07:c2:b2:e3:96:70:37:67:d8:3e:72:9d:
71:05:91:b9:e8:54:48:60:ed:4e:d8:5c:a4:f1:d3:
15:f9:80:d7:0b:1c:56:18:d8:5f:58:e6:ec:ac:b0:
b7:98:cb:98:1d:93:af:f6:5a:f5:13:7a:f2:c5:a9:
f4:92:07:e5:9b:96:bd:88:3f:72:13:1f:48:e0:77:
04:fc:30:93:90:bb:02:08:50:b7:2e:f4:7c:b6:c0:
b4:5c:d4:a3:95:ec:2a:11:4b:93:ac:fc:2c:7a:1a:
02:7a:5c:c7:fd:56:32:e4:0d:9b:01:ea:5e:15:ae:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F3:21:59:0F:32:36:B6:EF:45:1E:60:A6:E1:8B:65:90:E2:D6:97
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:62:dd:17:39:db:72:9f:0c:9a:2b:e4:1c:5b:cf:12:30:85:
77:1b:74:f5:6b:07:3b:1e:17:35:09:9f:fa:4a:21:e5:e9:82:
0c:6c:f9:a5:56:97:d8:0c:06:89:3e:98:ae:3a:40:61:bc:b0:
c9:d4:37:83:ef:0e:bb:ef:09:63:3e:50:ca:c7:d0:91:0e:9f:
16:5d:b2:2a:4a:dd:98:91:47:91:a2:4e:7b:12:ea:48:dd:81:
10:f9:01:6f:d9:02:50:97:31:da:c1:73:93:c9:f9:3e:7c:85:
e5:31:2d:91:8e:59:69:91:cf:48:be:e7:a0:ed:cd:7a:df:28:
ad:e4:96:0c:9e:b4:b4:94:8b:19:6c:2e:e8:82:27:a6:3e:ec:
20:79:76:d8:54:07:db:2f:0a:b6:93:77:de:21:29:d8:55:8c:
86:f4:94:51:8a:26:5a:00:7a:d8:28:1c:b2:a3:dc:bc:90:7f:
bf:3d:9c:e0:8c:b6:d4:5e:e2:d8:98:11:82:f1:89:71:49:b0:
c7:f7:78:71:ef:2b:47:3b:8d:4f:3e:fc:03:87:6f:7d:a0:bd:
37:9a:a1:71:d8:b8:10:ff:7d:04:53:b6:b5:23:08:b5:ac:00:
20:53:fd:54:54:b5:30:6a:a3:ce:ce:ea:4d:ce:f5:b8:e7:8e:
9c:e1:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:26 2026 by rpki-client