Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: a7rMqB8IAWMPhnLfk5e0l9hrI9ESKwARSTqI8MXT028=
Subject key identifier: 3D:DB:65:50:99:71:F9:20:84:D1:1C:63:8C:52:98:4E:48:4C:53:80
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019F93FF60DA59435AA1A9A9E221AFE8CE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 12:00:14 +0000
Manifest this update: Fri 24 Jul 2026 12:00:14 +0000
Manifest next update: Sat 25 Jul 2026 12:00:14 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: OEggTJRwZ6rLrMZLG2MYd70Xl5N3ayKvZfpQjcISoDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:60:da:59:43:5a:a1:a9:a9:e2:21:af:e8:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jul 24 12:00:14 2026 GMT
Not After : Jul 25 12:00:14 2026 GMT
Subject: CN=3ddb65509971f92084d11c638c52984e484c5380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:f1:b7:11:ae:be:db:c6:2f:50:46:50:9f:
a4:23:b0:03:0f:26:b9:a6:3b:6a:7d:e4:53:57:0c:
3e:82:03:ad:58:8d:38:8f:17:b3:5f:46:d4:2f:41:
ff:d2:9e:4b:b5:08:d7:d1:a8:47:c6:37:7a:a8:fd:
18:91:e4:85:d2:aa:00:8f:5f:80:43:78:db:01:80:
a6:83:79:e0:0f:3c:81:b3:40:64:08:e4:b5:b0:9c:
bb:ad:47:dc:78:44:4f:18:61:2d:ec:d3:da:2f:34:
2a:d8:35:eb:61:1b:17:88:34:50:4d:45:af:2f:62:
61:9a:78:42:6f:80:a8:bd:41:fb:d7:35:74:98:01:
4a:bb:9c:3a:8a:b7:24:06:00:95:3e:8a:6a:e2:31:
c7:57:e2:07:fa:45:46:fa:c5:56:d2:6f:c0:f7:c7:
d9:45:21:30:eb:20:6d:2a:1e:5b:bb:07:78:e1:bf:
5c:9a:09:b0:0c:27:7e:7e:21:8b:83:68:f6:81:5f:
72:a3:a6:ee:40:95:e2:4f:32:d8:76:b7:74:9f:ad:
83:47:36:02:f5:34:9f:7d:b4:03:b6:ba:18:d5:9b:
32:c4:ae:a2:7e:ad:01:54:af:cf:ab:b9:26:0b:7c:
c2:bd:4e:19:c0:9c:6f:a7:88:9a:26:81:93:e3:e6:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:65:50:99:71:F9:20:84:D1:1C:63:8C:52:98:4E:48:4C:53:80
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4d:fe:85:d3:40:6e:cc:5b:3c:72:b1:7e:a7:bf:4a:25:0c:
1e:2d:75:e8:1f:04:5c:7e:26:71:ea:6d:cf:14:11:67:8b:5b:
2e:3e:34:53:92:f2:8e:be:ec:9e:66:3e:8c:88:e6:65:7c:8c:
de:04:78:0f:3c:b4:34:44:71:56:52:ce:f4:4c:f4:e5:85:f4:
d3:7d:e4:d3:4b:eb:a1:80:b0:39:73:09:05:7b:c6:62:82:d2:
96:17:c6:44:6c:68:9a:4e:36:fa:0f:c7:0c:78:1f:1e:83:fd:
e7:9c:59:0a:f5:4a:fa:8f:3b:9f:3a:74:a3:51:b3:86:a8:06:
a6:59:40:38:38:f6:94:d4:51:34:72:bf:84:42:31:c2:6e:73:
ed:60:af:24:40:8e:42:4a:1b:74:70:53:00:9d:3e:61:00:ae:
53:66:31:bd:da:10:b2:1d:15:88:7e:fc:83:b3:7b:fd:f8:70:
9e:03:ff:92:cc:66:9d:40:83:ac:4d:fe:28:ee:0f:9c:a1:95:
db:e7:78:4f:04:6f:e3:19:93:e9:f4:4b:42:43:c1:d7:c6:cb:
37:29:81:fe:eb:10:77:b2:00:8c:02:bc:a7:57:a5:d3:16:3a:
05:93:54:46:a7:55:14:ac:86:00:a5:60:e5:4f:a9:2a:0a:f9:
b9:93:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:23 2026 by rpki-client