Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: yt3bc+4Fnc0NyJnYY/nFlqLhNNETYzax0owVDQWdAN4=
Subject key identifier: 5A:80:07:0A:42:CD:D2:C2:88:CE:38:D3:FC:82:B2:F8:E6:72:00:B9
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019F935AE1D8925858C08EAC8A43326CDC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 09:00:34 +0000
Manifest this update: Fri 24 Jul 2026 09:00:34 +0000
Manifest next update: Sat 25 Jul 2026 09:00:34 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: GMk9XZvfUvxkoh3r1yoiyyNI904z1TW54cl0LirdMCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e1:d8:92:58:58:c0:8e:ac:8a:43:32:6c:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jul 24 09:00:34 2026 GMT
Not After : Jul 25 09:00:34 2026 GMT
Subject: CN=5a80070a42cdd2c288ce38d3fc82b2f8e67200b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:52:64:a0:f5:b1:94:85:75:0c:68:ef:f3:
ef:5c:be:43:92:92:09:62:e8:55:45:b8:84:9b:ad:
6d:39:2b:69:38:fd:e8:1a:88:eb:23:86:2c:85:ec:
aa:66:2b:a6:1b:92:11:36:84:62:aa:aa:b6:81:3a:
d4:06:5c:07:1d:97:5a:95:f8:6a:49:7a:c4:dc:d7:
d4:dc:72:bc:8b:cf:98:af:ac:3f:81:6d:b4:d7:0b:
69:00:1d:ec:ad:4b:be:21:6e:ea:6b:29:5e:97:e8:
98:2f:b8:99:eb:97:2c:52:b0:83:de:58:e0:0d:a0:
30:60:af:b5:b7:c6:77:6f:e2:f6:22:c3:89:9b:f2:
e9:e9:c1:6b:da:a2:d5:42:b5:c7:a5:e0:be:7b:34:
a4:3f:af:3d:c7:48:b4:b5:ad:0e:9a:8a:ea:c2:28:
15:d8:b0:30:f7:46:02:cd:bc:53:5d:7a:69:f4:b3:
44:c2:f3:5f:6d:5e:13:10:1f:e2:52:ec:e8:ab:ba:
be:ad:de:71:54:19:b5:5c:33:91:1f:24:76:0f:06:
8d:20:88:0e:e3:03:f5:7b:cf:89:bc:5b:bf:42:eb:
ec:27:61:f0:1c:98:d7:61:25:2f:0f:c1:0b:08:17:
59:07:d5:c3:7b:06:cf:6d:ee:b2:97:c8:0e:c2:4e:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:07:0A:42:CD:D2:C2:88:CE:38:D3:FC:82:B2:F8:E6:72:00:B9
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:88:f2:9f:1b:94:a6:6b:82:b0:8e:a5:a3:37:d4:88:9b:
92:b9:d1:67:e1:68:72:88:0f:1b:83:1b:1d:c6:ab:5f:ff:c9:
02:53:dd:58:42:0e:d8:e2:59:b3:a8:a4:84:91:b9:47:8c:c7:
c1:07:cb:ec:13:de:81:10:9d:b5:16:c2:8f:d2:ac:90:76:e5:
8a:46:ae:99:a4:83:43:11:01:8a:09:94:54:b2:09:ef:1e:4f:
97:8e:9d:e7:24:03:e5:35:26:a6:db:cf:0f:2e:7b:d7:f1:1b:
b6:e0:aa:de:e1:b1:9e:68:d8:35:01:22:12:38:64:ad:c0:46:
e6:e1:9c:f2:c0:f2:d0:46:67:32:2e:41:7b:7c:9b:57:0f:ca:
01:b3:47:b5:8d:d3:3d:dd:4f:81:d0:90:56:53:c1:b1:bf:eb:
95:cf:24:5f:42:04:86:0b:d0:a3:33:74:e3:90:61:b2:e5:89:
60:77:19:e8:72:59:36:65:3b:fd:e2:6e:98:eb:e3:b5:e8:2d:
18:02:bb:83:0f:ea:21:59:d8:55:97:b8:3f:56:43:4e:2a:d4:
68:06:4b:c7:b6:bb:b6:40:ad:51:60:62:f2:65:d9:1b:da:32:
8a:56:c8:d8:ee:d0:70:a0:e6:d9:c7:4e:d3:33:12:e8:20:65:
a7:7b:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:43 2026 by rpki-client