Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: ddsUzkykCLhMbJUQiTdKKzmOAPXTIm0xW4fPzUqoG7o=
Subject key identifier: EE:72:1D:E8:F5:01:8C:0B:FF:E1:4D:13:BE:A3:16:A7:2A:B6:CE:B8
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019F935C1231413DEA2C202A6C75905DDD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 09:01:52 +0000
Manifest this update: Fri 24 Jul 2026 09:01:52 +0000
Manifest next update: Sat 25 Jul 2026 09:01:52 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: fQToqDNKJeAC4E2mKidK7+uXYhx8P8aoOdUPOWObbDM=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:12:31:41:3d:ea:2c:20:2a:6c:75:90:5d:dd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Jul 24 09:01:52 2026 GMT
Not After : Jul 25 09:01:52 2026 GMT
Subject: CN=ee721de8f5018c0bffe14d13bea316a72ab6ceb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:11:f3:86:32:de:8e:65:5c:38:b6:9f:90:
17:fd:21:90:fe:e0:c8:24:3a:eb:14:48:37:03:38:
ab:60:d8:93:b5:d1:54:b7:af:1e:0d:70:74:7d:cf:
11:19:ab:58:84:b4:39:04:b3:5a:4f:0f:d0:74:d1:
fa:da:fa:8f:8c:6d:b7:81:3b:8d:e9:34:a2:56:45:
24:ad:dc:cb:9d:43:a4:7c:15:ed:91:a5:59:2f:1c:
6f:07:fc:e3:62:fa:57:e7:e6:f5:ff:b1:db:45:03:
39:b9:fa:aa:83:4d:2e:0f:ab:64:ba:93:39:95:69:
f0:4e:6e:4b:3a:01:68:4f:ee:3c:dc:6e:77:b5:ce:
45:88:dd:22:ae:06:3e:de:14:43:f8:6d:53:42:79:
30:0c:8e:bf:d4:23:71:b4:d2:fb:e6:53:fd:b5:75:
01:29:68:cb:b3:06:8d:4b:f9:3c:f7:fa:00:89:83:
59:df:90:6a:3f:f1:16:34:70:45:31:66:23:01:7e:
a4:42:16:34:80:05:af:e2:b4:8d:7b:66:f5:5f:ff:
4f:f5:62:e7:29:ea:85:09:bf:4e:9b:f0:d7:ba:f5:
ed:bd:81:b7:45:81:9b:75:3a:45:47:65:97:cf:1e:
c3:a7:37:a1:20:de:5a:6f:f0:27:43:d9:d8:ac:a5:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:1D:E8:F5:01:8C:0B:FF:E1:4D:13:BE:A3:16:A7:2A:B6:CE:B8
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:40:e4:6a:1e:df:82:fc:d1:65:ff:9f:70:22:96:fc:cc:b0:
6d:60:27:f7:55:2a:53:89:1c:d7:54:f7:d2:c7:a6:77:d3:3d:
9a:4e:95:33:2a:e5:ae:ef:84:72:a2:6f:da:a8:dd:3f:e5:57:
88:f9:ce:71:4f:8b:8b:ec:29:f8:05:4d:7e:16:7d:d0:53:eb:
12:a2:d0:16:7e:89:16:7e:a1:7a:3a:f9:ae:97:06:45:a8:9e:
03:56:39:d2:b3:e4:c7:0e:fa:6e:25:bc:8c:83:57:88:2a:96:
71:5c:10:6b:20:63:f0:d3:8a:aa:a5:25:b1:f4:2d:b7:36:fc:
4e:da:e4:13:fa:c9:a0:80:5f:c2:53:30:4a:48:9b:7d:0e:e9:
42:55:80:ce:ff:20:38:6b:66:7a:c7:7e:d7:58:19:af:12:46:
1f:1e:86:a1:6c:f8:7b:5f:08:75:d8:63:fd:f3:74:27:10:e9:
c9:bb:43:75:d8:38:f5:64:66:a2:bb:bf:fd:81:08:2b:7b:02:
dc:91:27:ec:17:b4:34:e5:19:f8:c7:22:13:d6:96:3b:54:a1:
bc:cb:ad:af:38:db:b9:e9:cc:44:62:24:a7:b7:96:a7:6d:fe:
5f:f6:a4:f9:d9:30:1f:6a:db:db:3f:6a:23:9e:04:52:fc:b6:
16:9b:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:08 2026 by rpki-client