Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: N4Byd3SfgsRDH0V5HRntgEnUFhQcgypQbenQq4QnTcg=
Subject key identifier: 47:5F:C1:C3:E8:2B:DF:CB:FC:55:6A:9A:B3:6B:1F:A9:80:58:54:9A
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019F935AA4D9E1C78A17EF4B9E10D4A6E990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 158B
Signing time: Fri 24 Jul 2026 09:00:18 +0000
Manifest this update: Fri 24 Jul 2026 09:00:18 +0000
Manifest next update: Sat 25 Jul 2026 09:00:18 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: wc7NoK9PsLkH0LdFSjZRKm+Kk/oYMm4JrG8CDn44zWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:a4:d9:e1:c7:8a:17:ef:4b:9e:10:d4:a6:e9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jul 24 09:00:18 2026 GMT
Not After : Jul 25 09:00:18 2026 GMT
Subject: CN=475fc1c3e82bdfcbfc556a9ab36b1fa98058549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:af:f5:cd:de:55:2f:58:93:86:43:ce:bf:
29:10:fd:1f:06:e5:2e:74:7a:0d:b1:79:fd:c9:f4:
03:64:72:1a:2d:ff:23:96:94:77:6d:82:12:ed:c8:
96:06:f6:b7:88:1c:52:7b:65:5e:d8:c4:13:64:1f:
f1:82:31:47:b5:dc:a1:7f:79:ac:6b:93:5e:ef:bd:
5f:be:51:96:56:02:71:4c:64:f5:29:62:81:17:25:
86:db:47:d8:7e:54:6a:b1:7d:b5:fc:a0:da:83:a6:
55:eb:54:9e:cf:eb:9b:4a:02:df:2f:7a:ab:ee:fc:
ce:4b:fa:02:5c:2e:a2:20:51:e7:c6:e9:b9:c0:3f:
4e:50:d1:cc:ec:25:cd:71:52:c4:af:b7:15:7e:07:
3b:b1:85:79:b2:44:60:72:3c:b0:57:d0:78:6e:e1:
14:63:8e:a5:91:2e:67:cb:3f:8d:44:49:58:1a:de:
cc:83:c8:f3:1a:c7:c8:80:54:f2:a1:d9:6c:39:34:
5f:cd:b9:a3:0d:87:4b:e4:db:2b:dc:c5:d5:8b:3a:
dc:f9:2a:d2:c8:6f:b7:b0:8a:3f:96:f7:93:3a:9a:
6b:6a:6c:ab:c2:ad:e3:bc:49:5c:60:16:59:e2:8a:
5f:fb:03:91:75:32:68:bc:2b:a7:f5:02:56:df:f1:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:C1:C3:E8:2B:DF:CB:FC:55:6A:9A:B3:6B:1F:A9:80:58:54:9A
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:2f:48:30:3c:4a:f0:f4:a9:2a:d3:c3:22:a3:d0:45:21:
c1:e2:71:e3:30:75:42:26:08:3b:52:96:15:6f:2c:99:4a:b4:
84:a6:9e:49:55:4c:e6:79:ec:a1:63:8c:0f:9a:ad:56:7d:d9:
e6:33:3e:7a:12:17:1b:e6:b6:3b:24:9f:a0:ea:29:e7:cf:b0:
6c:51:ee:94:81:cd:5c:6e:20:d9:bf:9b:76:42:cf:d2:8f:27:
31:c9:de:74:9d:31:2a:e8:db:93:c0:53:86:61:c0:22:bb:4b:
8e:ee:8d:68:5a:cd:3e:40:58:50:4e:ab:76:06:28:9e:fb:fc:
27:e4:63:9a:8c:05:ae:21:e1:cd:9d:93:f1:8e:0c:91:14:72:
78:6f:45:03:73:73:52:7c:0b:c3:33:0b:b7:66:71:84:c1:d8:
6f:70:4e:7a:91:94:2e:d1:92:e1:1b:94:6b:9f:8d:bc:7d:94:
93:36:09:16:30:66:27:db:06:0a:2c:f0:f4:ab:6a:ce:aa:08:
27:ab:7a:e8:1c:ed:f6:ab:31:d0:76:f6:e8:f7:ad:d9:92:45:
5d:f1:4e:59:86:07:3d:2e:f7:0a:a3:df:11:0d:08:4e:71:e0:
fa:8d:ea:3f:46:1e:16:a4:9e:1c:45:8c:0f:75:77:3e:2a:d3:
23:41:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:59 2026 by rpki-client