Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: RXmpT6Gh+Ple5n4j5V9BELSgqAYDWUrBsX2yVFsB1Uk=
Subject key identifier: B4:65:6A:68:22:B6:76:B4:23:15:F6:47:8A:1F:08:21:12:33:F2:D1
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019F9248FDFC7400877785095AAD59FA878D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 15BD
Signing time: Fri 24 Jul 2026 04:01:24 +0000
Manifest this update: Fri 24 Jul 2026 04:01:24 +0000
Manifest next update: Sat 25 Jul 2026 04:01:24 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: OL2vBCExAQ8VL6H62kd87iA4EZvm46G/mi4J0gvUWcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:fd:fc:74:00:87:77:85:09:5a:ad:59:fa:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Jul 24 04:01:24 2026 GMT
Not After : Jul 25 04:01:24 2026 GMT
Subject: CN=b4656a6822b676b42315f6478a1f08211233f2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:ea:54:32:92:7c:47:10:c3:2a:bd:84:29:
6a:04:54:d9:79:e9:c0:08:ad:11:d2:49:3f:cb:68:
04:5e:e2:f2:4e:4a:46:d8:ce:7d:3e:c8:00:fa:ff:
a7:78:13:b7:a2:13:65:81:e5:f3:cd:2d:ff:6a:fa:
92:c6:13:ec:37:90:f1:6c:b7:c3:55:b8:b0:03:cc:
9d:9e:d9:94:36:b9:e7:25:c2:1b:fd:6c:9e:76:84:
dc:4f:f4:ac:64:37:bf:44:ad:22:8e:3b:06:b5:be:
62:d2:f0:11:ee:eb:cb:d4:c4:aa:09:17:de:19:fa:
fd:7d:14:fb:3b:31:5e:83:60:14:15:93:68:86:a1:
e7:d4:aa:8e:26:c9:d6:dc:ec:a2:eb:1c:6c:14:4c:
f0:1e:df:90:ab:6b:ab:dc:a8:02:e2:e3:56:18:31:
2c:8c:75:1b:be:8d:14:25:04:7b:82:04:30:d1:07:
6f:50:b8:8e:c8:fd:7c:41:d2:a2:56:2a:fe:e4:3a:
bf:8b:13:88:9c:ca:01:81:1b:eb:94:3b:fb:b4:c7:
40:1f:db:41:ac:de:e8:28:b5:9e:d1:0f:1d:e1:6b:
fb:b0:6f:72:5f:57:b5:21:3b:86:9f:3a:7d:78:fe:
8e:68:9a:2b:a2:a4:f6:fe:9c:34:10:9d:cc:a8:d9:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:6A:68:22:B6:76:B4:23:15:F6:47:8A:1F:08:21:12:33:F2:D1
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a2:ef:fa:56:d6:54:be:6f:49:11:02:7c:72:1a:c6:68:2e:
f8:1a:da:a9:00:9f:1a:cf:85:cc:bf:d9:ad:b3:aa:63:58:3a:
a9:8f:b9:b0:5b:91:15:f7:a9:d8:c3:73:72:e8:98:ea:1c:9d:
83:26:7f:5b:2f:24:23:02:2f:37:f6:57:88:26:1c:a8:8c:1e:
84:90:61:e7:5f:b9:63:35:86:b3:1f:d8:a2:ef:d1:ae:20:68:
71:21:d3:8b:4b:b2:0f:99:a6:11:c6:f4:fa:4d:99:88:22:9e:
f2:a4:8c:60:5b:dc:03:34:d7:0c:52:c6:e6:57:fe:14:78:d3:
bc:c9:3c:64:27:c5:c3:9c:2d:9a:b4:eb:0c:1f:1c:91:5c:30:
fc:3a:d6:94:54:32:1c:0e:cf:f9:be:60:10:b3:b9:c9:5f:71:
fb:c5:57:91:ce:8e:80:53:1a:6b:f0:00:2e:36:76:80:f9:eb:
9e:a0:16:e8:dd:ff:a3:b7:5a:ed:60:3c:fc:65:c6:82:8a:73:
00:6b:75:8f:50:a4:7d:8f:34:2f:b8:75:db:75:4f:7e:53:9c:
e8:0f:3d:ee:36:ce:bf:94:02:fc:3c:13:31:46:1b:5f:fc:ab:
d0:f9:5b:98:0c:ce:90:57:d5:af:d0:41:a8:d8:0b:e4:f3:b9:
8b:df:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:49:29 2026 by rpki-client