Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: PD/dbm3mO6RnRfkm+eTwWNS9GQT+zkW6D5IvZ/vUOa0=
Subject key identifier: 17:7A:AE:88:2F:B7:C7:80:BC:F3:A6:D8:8F:4F:24:E2:2D:94:50:26
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019F90C82521518FEFD105A8513CA7AD07BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 21:01:03 +0000
Manifest this update: Thu 23 Jul 2026 21:01:03 +0000
Manifest next update: Fri 24 Jul 2026 21:01:03 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: ClCoZAzXa7LdGMnVtuApFT47oZB5wRi3dAUarYnbaKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:25:21:51:8f:ef:d1:05:a8:51:3c:a7:ad:07:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jul 23 21:01:03 2026 GMT
Not After : Jul 24 21:01:03 2026 GMT
Subject: CN=177aae882fb7c780bcf3a6d88f4f24e22d945026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:d0:aa:62:e4:ce:ae:c5:cf:ea:32:52:09:
a2:92:a4:e6:bb:29:0d:59:49:21:bb:98:04:71:8a:
6d:d4:b5:43:93:60:3a:9a:f1:d9:03:25:50:03:15:
50:db:16:a3:be:19:96:d5:6c:c8:2d:bd:25:1c:02:
35:ae:eb:31:fe:6d:7e:c6:a2:f0:b3:13:60:5e:14:
e1:3f:d1:8f:3a:ce:22:b6:72:18:5e:fa:5e:3d:3f:
7f:12:63:d8:af:a7:c5:d0:76:2b:b1:c3:d1:0e:14:
06:ab:4a:c3:ab:2e:86:57:33:cb:a7:d8:ec:8c:a8:
4a:10:a2:e2:e0:ec:5e:7b:68:f0:4c:f9:99:34:a8:
46:f4:ad:4a:46:35:7b:8d:9d:1c:86:08:20:da:a1:
7d:49:a2:85:fa:fc:a9:5c:0b:4e:3f:60:39:9f:c2:
87:f4:01:94:db:af:89:e3:c9:bf:a8:f3:49:d1:f8:
2e:56:f0:06:ee:d8:ae:88:1c:b7:d2:d6:55:16:e6:
58:5a:76:11:47:88:20:7b:d7:49:70:df:89:f3:44:
2c:a6:3b:d5:b8:e5:dc:e7:fd:d9:c6:d4:33:e9:39:
d8:d7:f1:8d:56:4c:22:7f:9e:01:5a:ce:60:c0:45:
1a:60:75:12:bd:a9:3c:34:b8:da:fa:e1:7f:6d:72:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:AE:88:2F:B7:C7:80:BC:F3:A6:D8:8F:4F:24:E2:2D:94:50:26
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:8f:ca:b9:26:33:2d:58:e0:7b:a5:53:d0:5d:21:b1:43:
90:8a:19:07:33:da:f0:04:42:4f:33:e2:53:0f:81:3f:ef:c7:
c3:5b:0b:fb:55:e6:35:e9:a8:a0:2f:73:ce:35:51:d3:88:6a:
47:e6:a9:fd:7d:b9:a4:3f:f4:b9:f9:77:52:a0:3c:52:27:0e:
18:e9:54:fa:2b:1a:67:80:47:08:f8:de:a8:22:82:ff:d4:9a:
06:bd:82:3b:73:ac:c9:42:06:86:1a:70:52:ce:b4:0a:9d:0d:
79:7b:d0:e3:5e:da:0d:be:c7:73:74:88:f3:d2:a5:8e:56:bc:
4b:31:77:e0:d2:13:bf:2d:7c:f9:62:7f:b1:b1:12:47:cf:f1:
d8:f4:31:5e:e7:f7:a1:f5:dc:7d:d3:7a:e7:34:42:44:e5:d5:
74:6c:61:ee:31:ac:74:3e:55:5b:a4:73:93:98:03:55:80:2d:
98:bd:91:41:a1:48:35:eb:90:da:fb:07:01:dc:6d:7c:00:1e:
04:3f:7a:8b:e3:5c:d0:af:4c:f9:77:01:2c:4b:7a:f9:a1:80:
58:98:df:2a:ab:1e:02:71:17:ab:b0:28:61:16:23:70:e6:ed:
b5:99:aa:b2:40:d8:e5:fb:41:06:5a:55:39:2c:8e:fe:6f:12:
03:8e:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:04 2026 by rpki-client