Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: bItW9yjy9MLp5niO0UELnMQU80PHXxrPBRj3jxyRnQw=
Subject key identifier: F6:87:01:3F:27:24:55:4A:3E:93:38:A4:E1:C4:E7:EF:07:44:81:36
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019F90C7B03451E264F55FDBB893CB98DEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: N8FZaEmDC3LX+AGNGyi6aMXR4PqMCt7igV1a0jWLlpI=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b0:34:51:e2:64:f5:5f:db:b8:93:cb:98:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=f687013f2724554a3e9338a4e1c4e7ef07448136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:f5:cb:96:64:b1:a8:0c:7e:d4:37:49:5e:
fb:53:08:0e:8c:92:79:07:2a:e9:d3:68:01:e0:f3:
40:ce:16:f9:92:1b:80:eb:99:52:2a:ac:b9:aa:b2:
eb:db:57:d0:1f:e2:66:00:4e:ee:16:76:83:41:9c:
a0:e0:65:c9:b5:e1:d2:ff:e3:a5:85:4b:1b:95:03:
90:7c:ed:f0:52:ce:1e:9b:cb:25:e7:60:7d:7b:72:
cf:fa:58:df:1c:5a:75:f0:b3:b3:46:41:22:59:8a:
25:4b:8f:5b:2c:8a:5a:08:f6:14:e2:7b:53:5a:93:
b3:e4:db:15:91:0f:e2:e1:30:97:42:83:01:6c:f7:
9a:7b:ef:dd:24:a3:f9:61:87:5e:9e:76:f9:7b:1c:
8f:06:3f:e5:87:ac:1d:c5:ce:81:07:ab:8f:d1:6a:
85:04:5d:38:73:ae:99:a4:d5:46:7f:ee:43:54:5e:
ae:7b:6c:04:9e:e5:07:07:5a:6a:40:d2:a6:b9:d0:
85:26:c2:19:8c:f3:cd:23:47:d0:db:e2:7b:bc:c7:
dd:49:57:06:28:6c:e6:3a:28:86:4a:17:93:0f:f9:
84:86:88:9c:6c:a6:34:2c:75:54:6a:4a:27:a0:4b:
47:5f:89:6b:70:66:4f:67:91:32:fa:b2:fa:8a:af:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:01:3F:27:24:55:4A:3E:93:38:A4:E1:C4:E7:EF:07:44:81:36
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:8f:e9:b0:3e:00:82:60:1c:14:55:8d:fc:8f:e4:8b:b8:
4f:b6:ab:e1:5a:6e:2b:f2:b8:a7:59:61:f0:1b:3d:ba:4f:18:
17:76:68:71:21:ac:a9:01:bf:23:17:b3:fc:4e:7d:f2:53:b3:
7c:f2:d8:d9:8e:45:83:2d:f2:50:19:79:38:2e:c1:fd:ee:ad:
33:35:b6:25:23:7c:d3:57:49:65:d4:97:ab:f7:3a:cb:de:a2:
51:a3:1e:25:59:80:38:07:56:68:d8:83:2a:37:af:4d:be:54:
1c:4c:88:f9:72:9e:9c:00:92:bd:2e:58:cf:0c:b0:f6:5e:2b:
6c:d4:2a:72:94:07:b6:46:37:f3:b5:ae:5d:b5:c0:7c:9d:cf:
23:2a:87:52:75:39:a8:24:64:d4:f5:d5:03:59:aa:a0:0b:e0:
4b:d6:e6:23:c1:37:37:1a:8a:9d:83:e1:0c:5f:ac:a9:06:07:
ba:55:b6:97:fc:b4:f8:8a:db:59:c6:1a:03:37:c9:3b:ad:9e:
f6:b9:e6:b4:52:23:3c:c8:48:9e:b1:01:55:41:7a:29:35:cc:
2d:26:9f:31:f9:04:b1:80:2b:ce:ea:51:c5:99:dc:33:4b:ab:
62:e8:14:f0:22:7f:86:fc:c7:5f:47:eb:39:1f:d8:c7:7a:de:
a4:71:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:35 2026 by rpki-client