Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: XLjtVOgEA66XNrODHWI3UGUG2BrwXrx8cX7mhgRungU=
Subject key identifier: 73:15:B3:71:60:6D:FC:4A:BB:C6:E2:F4:04:A4:76:08:E1:3F:C7:D9
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 019F927F0454D35A0976E3749AB475EFF11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 05:00:25 +0000
Manifest this update: Fri 24 Jul 2026 05:00:25 +0000
Manifest next update: Sat 25 Jul 2026 05:00:25 +0000
Files and hashes: 1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: K91qfD53yBSk91Jb5Gwg7NZgJ8LY3CnstUlvG4VWocY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:04:54:d3:5a:09:76:e3:74:9a:b4:75:ef:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Jul 24 05:00:25 2026 GMT
Not After : Jul 25 05:00:25 2026 GMT
Subject: CN=7315b371606dfc4abbc6e2f404a47608e13fc7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:ee:6b:c9:f7:ac:9a:a2:e1:53:e3:cb:f3:
33:33:a0:84:84:b0:91:9a:68:92:a1:c1:7d:ee:b0:
95:c5:9a:b6:01:d0:14:8a:e6:8f:bc:d2:19:19:56:
d1:ba:72:ea:b0:31:63:ae:a9:44:05:71:ca:a5:27:
0d:d8:92:4e:49:70:2b:21:8e:16:96:a6:e5:72:48:
7f:fe:b3:de:7b:0b:6e:12:57:51:d9:44:14:85:a1:
03:f2:f0:cc:a5:f2:de:4b:72:db:4b:28:29:cd:17:
fc:4b:81:a5:38:85:f1:91:b1:3f:d3:85:8a:97:80:
35:f2:13:35:08:c9:18:d1:e8:03:26:6e:5e:92:9c:
5c:62:db:bd:66:49:a6:e0:05:55:89:3b:c9:1b:09:
58:15:c8:4e:4d:bb:a5:07:1f:1d:97:c7:e7:42:c1:
01:26:66:60:3a:25:e5:2e:ba:7b:9d:78:6a:23:b2:
94:65:dc:33:31:a5:a2:38:54:8f:26:9d:ee:1e:f3:
c5:4e:96:dd:ea:e1:f6:03:3c:dc:f9:36:9d:51:55:
ae:50:84:ce:73:ba:a3:ab:15:f3:1d:c2:b8:fd:ad:
4b:72:7f:31:33:d3:2d:62:d8:40:2d:39:99:d3:14:
b4:13:7a:e2:9c:26:5a:7e:6f:3d:5f:91:cf:dd:72:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:B3:71:60:6D:FC:4A:BB:C6:E2:F4:04:A4:76:08:E1:3F:C7:D9
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:bb:fb:c0:16:62:33:8f:1a:3e:7c:a6:b7:85:9e:8e:79:
22:eb:c0:50:3c:f7:89:27:82:a5:97:f6:06:c3:c6:35:ad:9e:
27:3b:c5:42:e3:63:fb:9a:34:bf:b0:7e:55:96:2f:ca:0a:ff:
74:54:c3:49:27:ba:45:a8:f9:e8:66:cb:76:db:d5:e6:ec:5b:
cd:1d:a4:db:7a:e4:7b:7b:38:06:f3:6d:8c:94:ea:a2:0e:34:
8f:22:fc:93:1c:eb:fd:0e:e4:7d:9d:ed:34:c8:4c:3b:dd:a8:
8d:ca:28:e3:2a:f6:72:e2:7c:99:48:06:6c:59:a4:38:74:d6:
f3:64:ff:a3:ce:eb:ea:1a:5f:69:61:30:77:49:43:56:84:a7:
c4:16:49:1c:a5:8e:19:a8:30:7c:51:d4:fe:88:1d:d0:61:47:
5e:1e:ae:2a:34:39:e9:48:43:74:15:78:51:d7:7d:59:b1:de:
ab:96:40:69:4e:e0:43:01:92:a0:c4:5f:21:62:68:6c:0c:fe:
09:d7:ee:63:0a:6b:88:57:b5:8f:32:ab:73:2f:25:e8:3c:81:
07:f4:fe:7d:52:76:f8:64:98:11:35:72:d1:65:d2:e1:11:4c:
b6:9d:f4:5e:1f:02:49:8e:35:22:5e:be:4b:09:e2:5e:e8:8e:
d8:71:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:29 2026 by rpki-client