Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: J1oY6A5K8OzSeBnta6GUCPVeSJjFabl2yfp6iAojtRs=
Subject key identifier: 0F:BB:1A:8F:B1:12:DC:4A:D8:6D:9D:DB:56:38:F1:18:55:DD:C2:31
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019F946DDC63573993EC5EE2879868BB2E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 14:00:55 +0000
Manifest this update: Fri 24 Jul 2026 14:00:55 +0000
Manifest next update: Sat 25 Jul 2026 14:00:55 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: Ts8Q1FYV9WDnMHiFW5/M54SKFxs+S3OLq1Xo8i9VqzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:dc:63:57:39:93:ec:5e:e2:87:98:68:bb:2e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jul 24 14:00:55 2026 GMT
Not After : Jul 25 14:00:55 2026 GMT
Subject: CN=0fbb1a8fb112dc4ad86d9ddb5638f11855ddc231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:ae:ad:ab:47:f6:5b:c2:32:41:31:00:d2:
ff:db:ed:ee:b1:6b:2f:de:72:aa:98:15:c3:72:63:
67:33:49:56:77:f9:90:0a:42:b2:ed:28:d4:ad:27:
98:2d:47:31:c2:b9:61:52:51:f2:22:4b:1d:30:61:
7e:e9:18:2a:61:45:28:02:b8:e9:c3:52:83:4b:a1:
66:71:ed:77:58:51:d3:82:24:75:93:8b:62:33:d8:
45:79:c6:64:b9:f3:86:22:28:9d:fd:71:95:2d:1e:
01:41:51:ce:0b:63:6b:dc:5b:66:b4:03:88:f1:61:
e8:b1:82:f0:7d:17:a3:3e:7e:22:35:ab:bc:3e:87:
80:6e:ea:c0:60:ec:34:cd:12:8b:4a:c7:99:cf:fb:
a1:79:a3:64:95:73:da:7a:51:6b:dc:3d:be:15:00:
8b:67:7c:57:c0:50:ed:f2:83:86:8b:9f:53:ab:a2:
bf:c8:95:f7:6d:dd:4c:3d:18:91:b8:5e:ef:07:86:
0f:da:be:70:2a:83:be:74:70:b5:a7:b0:86:94:b7:
91:39:2a:86:5f:58:46:b8:32:69:d6:5e:25:da:79:
c5:1d:b7:24:d3:0b:00:73:04:59:b6:2a:fb:7e:e7:
a8:03:ba:a2:24:55:8b:f3:0e:9e:12:eb:cb:5e:44:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:1A:8F:B1:12:DC:4A:D8:6D:9D:DB:56:38:F1:18:55:DD:C2:31
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:65:65:ed:51:50:34:9a:a5:96:82:46:13:53:02:d8:ef:f4:
96:7c:00:a3:5f:f2:91:e9:82:d5:bf:cd:69:30:8c:60:36:ec:
ff:17:80:7e:50:73:43:19:79:02:3d:81:a2:2d:8f:d1:c5:2b:
e2:b1:ad:2b:fd:cb:1d:79:ac:ab:a9:09:cd:6a:29:6b:11:2a:
89:19:b4:14:44:26:22:b1:2f:e9:e4:21:23:14:b2:cf:b1:93:
c0:30:7e:00:b1:bf:06:9b:da:ed:d8:20:5a:27:df:34:8c:5c:
db:7a:3b:09:41:f8:fa:f5:af:7f:80:e4:5d:52:9a:9c:1c:00:
ae:12:82:72:36:1a:58:b1:eb:9b:22:35:7c:d7:87:31:24:5a:
2e:85:18:41:0a:02:a4:29:df:3d:cb:c5:b3:22:21:f9:d3:df:
a3:8f:0b:94:9a:92:a8:7b:93:0e:5c:64:33:bd:f9:2a:85:bf:
30:17:c5:95:86:94:21:58:48:4a:df:d9:ae:1b:94:0b:d3:06:
76:fb:2f:39:1a:f7:58:f8:ad:03:6d:b5:f7:9d:5b:b8:50:cb:
64:86:05:50:61:5b:13:29:3a:e9:82:a3:dc:d8:54:19:c5:d9:
54:63:25:b3:d4:e1:2b:07:f7:a5:fe:26:dc:47:70:de:f1:8f:
69:61:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:13 2026 by rpki-client