Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: HITO2eTHVjT5a1bu9kVPf9KPz7s/F6Nn8O+vnWaZF14=
Subject key identifier: E8:91:78:42:5C:2B:08:21:D3:2C:AE:A0:6F:EA:F1:14:DF:FA:73:25
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019F9391B7DF42D4EB893733D7D1A4A2D86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 12B7
Signing time: Fri 24 Jul 2026 10:00:28 +0000
Manifest this update: Fri 24 Jul 2026 10:00:28 +0000
Manifest next update: Sat 25 Jul 2026 10:00:28 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: Ix4Pd0MD9dmkVGre2dL5ZH3nyqAgh/ZUFMm0xr3rRCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b7:df:42:d4:eb:89:37:33:d7:d1:a4:a2:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Jul 24 10:00:28 2026 GMT
Not After : Jul 25 10:00:28 2026 GMT
Subject: CN=e89178425c2b0821d32caea06feaf114dffa7325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:cd:5e:80:fb:a4:83:a4:bd:22:cb:6b:83:
de:d3:ae:0f:15:5f:bd:f4:cf:79:ab:ce:08:ae:b3:
22:69:3f:b0:be:33:2a:d0:56:95:92:2d:02:89:e8:
65:61:d6:90:41:77:24:0c:4d:7f:90:e5:36:3f:21:
f5:86:b4:7a:66:fe:d2:2f:76:87:a5:90:3d:73:cb:
e2:0e:ba:53:89:89:02:41:fc:4e:45:03:d3:ca:ea:
e7:cc:c7:39:09:33:cc:62:3d:d3:29:0a:94:18:14:
ad:dc:f1:de:15:f9:44:9f:54:28:ab:04:f1:3c:7d:
3f:1d:c8:a0:96:6e:fa:44:2b:83:52:cf:4d:46:a2:
20:81:56:46:28:fb:79:60:d2:7c:59:f6:0a:31:62:
1b:c8:01:db:ba:23:bf:23:ad:c3:e9:71:70:3b:d0:
89:3b:96:df:4f:e7:64:4a:32:20:36:23:b2:4f:0d:
68:0a:0a:e9:65:1e:69:18:7c:4c:c5:69:77:83:83:
91:dc:3c:61:08:0b:a1:d9:80:0a:70:0f:10:e8:5a:
81:ec:4c:c8:88:c0:cf:30:e0:1f:78:15:d6:b5:b7:
7a:e4:e0:76:36:37:de:b4:7f:30:8b:20:83:a5:82:
7a:36:e7:67:b6:3d:5a:4e:ea:41:92:97:05:85:5f:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:78:42:5C:2B:08:21:D3:2C:AE:A0:6F:EA:F1:14:DF:FA:73:25
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:23:43:89:50:81:a3:f5:37:3a:d9:af:e1:b5:b7:0c:36:55:
8e:c9:02:6e:09:b7:c1:ee:0a:03:4a:5d:b7:d3:c9:e4:fc:53:
5e:a1:85:34:37:72:41:ea:70:ba:5b:b7:e8:24:ba:c3:d4:30:
2a:07:48:8e:ca:01:03:7e:f5:54:1f:5e:8f:7e:03:e3:75:e2:
92:81:f9:19:32:7f:5c:9f:91:dd:52:88:b5:85:e3:8a:23:93:
52:d5:7f:1b:4f:d1:ef:0c:35:dd:e6:85:1e:10:67:dd:6f:2b:
73:09:36:44:e2:36:12:74:86:3e:00:82:03:69:d5:76:86:c4:
fd:47:61:2e:ef:f8:b3:a3:bb:45:f5:50:c5:33:40:8a:30:eb:
72:46:b8:83:0e:d9:37:07:38:32:9b:7c:2e:d2:7c:3b:d2:e9:
1c:f5:8d:0b:7a:90:dc:a3:a0:27:cc:9e:ac:cd:72:a4:84:3a:
ac:fa:2d:d6:37:d9:a9:2c:ac:23:ef:a3:10:ea:36:d4:ab:50:
50:05:f5:51:57:36:32:7a:38:69:90:a4:06:ac:d6:d2:07:4e:
35:c1:0b:b5:74:a8:55:4a:51:65:7c:f2:c5:f1:b7:b4:00:3c:
37:c1:b1:44:6c:74:e3:85:32:54:b4:e1:d2:d8:c5:5e:bb:24:
c1:87:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:46:03 2026 by rpki-client