Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: DvlXZ08S/rDg4N1Or1sLCkDtCI7NQNJS0MO2WZvQPH8=
Subject key identifier: 17:32:D9:DD:C0:FC:41:7D:D9:9B:47:1D:48:7A:F2:C2:F4:9F:2E:14
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 019F916C9F781B47CC9F94AE6228B881C070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:42 +0000
Manifest this update: Fri 24 Jul 2026 00:00:42 +0000
Manifest next update: Sat 25 Jul 2026 00:00:42 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: OtH0HPLDpNPcjm7U8+l3fQmlKcLU+HxlidcqClCrZS8=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:9f:78:1b:47:cc:9f:94:ae:62:28:b8:81:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Jul 24 00:00:42 2026 GMT
Not After : Jul 25 00:00:42 2026 GMT
Subject: CN=1732d9ddc0fc417dd99b471d487af2c2f49f2e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:95:09:ba:d3:20:a7:22:46:2f:7f:71:a2:
37:80:9d:e4:87:08:59:8d:cd:10:f1:0c:c6:4a:5e:
67:f6:fe:e5:6e:d2:8f:d6:21:fe:c7:26:4e:e4:b8:
6d:93:44:91:87:d4:61:00:da:aa:59:bf:1a:ab:ea:
d6:31:06:1d:0d:3c:ba:2a:d4:72:6c:8a:8a:b4:d4:
f0:91:d4:d3:48:4e:31:3e:dd:18:8b:31:d1:15:b0:
3f:ab:ee:cd:a5:d5:28:0c:fe:2f:d7:a8:39:b1:2a:
a1:6f:63:40:c0:d3:a6:e7:e5:26:1a:5d:3f:bb:56:
46:e0:d9:ca:92:53:b0:af:6e:44:87:7e:26:4b:b2:
1e:ca:9b:aa:85:f6:e0:8f:10:3a:a1:43:30:5a:d6:
b6:6d:c6:53:1b:41:85:24:e5:b8:bf:1e:0c:13:01:
c1:1e:b8:49:be:a6:20:82:12:db:f7:98:3a:ac:a3:
a3:6b:86:59:f7:37:18:31:b8:79:86:8f:54:a0:4e:
be:ab:eb:ec:18:53:4e:56:79:04:ae:e3:2d:be:30:
af:6b:03:9d:95:42:7d:09:89:89:77:26:5a:47:54:
96:cb:06:fe:92:09:81:6a:78:65:63:38:f8:47:6a:
31:52:d6:a5:eb:21:dd:08:12:28:2b:85:71:49:66:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:D9:DD:C0:FC:41:7D:D9:9B:47:1D:48:7A:F2:C2:F4:9F:2E:14
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d9:22:f2:74:fc:ad:bf:07:48:74:c3:fb:f3:60:67:de:25:
e5:bb:c6:d3:9f:ea:e6:48:e3:0d:6c:69:fe:ac:f8:82:ef:bc:
90:f9:56:80:cf:c6:d6:dd:81:b0:6b:fd:9e:ef:5f:f8:01:61:
19:b8:21:79:9a:36:9f:02:c9:f1:99:90:00:f8:8d:b5:48:5d:
af:03:8a:5c:d5:db:d0:83:31:87:fa:02:b1:02:22:80:dd:f1:
15:22:ba:e6:0a:81:fb:df:61:d8:8f:40:d1:64:6f:b5:74:85:
b4:27:e3:31:df:57:d8:88:30:24:8b:ad:ac:24:ae:39:46:5c:
17:47:84:c8:37:93:37:4b:3e:8d:6c:61:ca:34:5d:00:9e:a3:
66:e1:b2:cc:11:26:f6:e3:aa:6a:de:f2:0a:18:cf:12:f2:ad:
e9:4d:fc:8f:d6:53:71:59:e0:0f:06:a7:37:e2:6e:2d:ef:94:
72:12:5b:7e:7c:b1:99:ba:42:9b:d3:3c:dd:cd:7c:1d:22:cf:
15:46:50:30:47:74:67:45:af:69:03:fc:c2:1b:36:3c:fe:26:
50:8f:03:2e:30:84:b7:91:ec:1c:9a:8d:98:7a:c2:ec:55:2b:
f2:6d:9c:83:72:f5:ef:a0:e7:83:55:20:ae:31:e5:c7:08:88:
a9:07:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:14 2026 by rpki-client