Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: Xhrx8kJiAU1Wvyxo27D9uzX4iafPMplBdwQrbGZ12Z0=
Subject key identifier: B5:88:5E:D3:A5:25:18:43:A5:E2:DA:42:A9:4A:76:56:F6:4D:21:9B
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019F9090BF0800EDE77925B37D8F07D19CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 1217
Signing time: Thu 23 Jul 2026 20:00:32 +0000
Manifest this update: Thu 23 Jul 2026 20:00:32 +0000
Manifest next update: Fri 24 Jul 2026 20:00:32 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: y1ubetjgbvjZznQvkZGr5gq6kgj0BlC9eIKLXrzbbq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:bf:08:00:ed:e7:79:25:b3:7d:8f:07:d1:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jul 23 20:00:32 2026 GMT
Not After : Jul 24 20:00:32 2026 GMT
Subject: CN=b5885ed3a5251843a5e2da42a94a7656f64d219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:43:a5:6a:c7:a9:6e:72:0b:ea:20:fe:c7:
e0:39:d3:86:99:7d:0d:80:df:0e:5e:9c:50:d0:0a:
4d:6d:fe:64:ce:01:ed:36:f9:cb:e3:a4:e7:e0:cf:
a3:a2:78:47:81:68:79:a3:a1:58:a7:0b:da:66:29:
61:6f:6f:08:01:5e:51:6c:df:67:d2:97:7c:3a:83:
b6:31:06:f2:40:bb:1f:de:e2:1c:07:62:f0:24:e6:
a6:84:92:d5:99:c9:19:ef:77:5f:7f:08:38:7d:cc:
9f:f4:7b:97:24:f7:92:ed:59:53:68:bc:71:fa:4d:
6c:d9:6f:f5:53:a0:77:39:40:8f:b2:d8:0e:f8:82:
b9:61:ed:7d:89:55:62:68:a3:b5:6b:0d:67:63:ea:
70:52:c7:b6:f1:b1:a6:8a:4a:b7:48:d3:6a:7a:89:
e3:90:d3:aa:99:bf:0f:f0:eb:54:3f:e3:ec:37:2c:
f7:02:1d:c4:df:a5:02:5d:9f:e7:01:e9:a0:6e:95:
38:27:bf:86:e0:75:90:be:c6:84:cf:c0:73:15:03:
51:5c:3f:56:f6:de:37:e0:a3:cf:2c:ee:53:67:1a:
87:35:db:3d:5e:d5:d3:f8:f4:66:ef:b6:8d:e4:d3:
7d:11:35:9d:ed:0c:42:2d:ab:44:98:a6:cd:89:b2:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:5E:D3:A5:25:18:43:A5:E2:DA:42:A9:4A:76:56:F6:4D:21:9B
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:97:17:b2:ec:92:a6:08:c4:cc:e1:78:33:9f:df:e6:6c:39:
b7:9e:e5:73:20:9c:17:db:60:3d:b8:11:e2:39:b2:b7:41:4b:
ae:cd:50:a0:50:46:c1:99:05:d5:9c:21:a5:03:5b:b6:cd:08:
d2:25:22:98:28:92:d2:45:58:ba:43:ad:b1:fb:eb:48:65:c5:
d0:9e:3e:3d:69:3f:05:4c:0c:38:23:14:7d:f4:e1:8a:59:1e:
9f:e2:af:33:44:56:a1:43:6a:b1:ca:04:26:62:fb:27:ef:1e:
ce:b8:09:b1:cd:b5:b6:da:5a:30:0e:87:19:36:34:c1:7f:45:
fc:b8:05:69:3b:9b:d6:98:45:dd:b8:16:60:ae:b0:6c:3b:b6:
46:f0:48:df:43:50:e4:7f:f9:94:1c:15:0e:cd:66:f9:a8:e7:
d6:67:d1:94:48:db:11:8c:d3:8a:8f:cb:88:77:8a:48:5b:2c:
07:8a:1b:5f:30:10:ad:1b:d2:43:da:d5:b6:3d:7e:78:d9:0c:
4a:75:4d:47:b6:41:c1:a3:41:bf:ad:2d:4b:3b:f1:c2:a3:93:
2f:8e:1b:59:8e:a8:56:f0:75:af:f1:8a:fe:95:04:68:37:6d:
27:c8:e5:9c:45:b7:b2:bf:7d:3f:7a:89:31:ce:7d:bf:d7:72:
ab:f4:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:56 2026 by rpki-client