Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: LBCpphPxyD2T8AxSyyQFi0DcMpBLq57g2zYXqbBYWL0=
Subject key identifier: 60:65:A3:3F:FE:0E:24:83:A2:64:D4:46:13:25:14:AE:2D:A1:BD:ED
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 019F8644B83480CA559E8B4C871331BE9667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 20:01:18 +0000
Manifest this update: Tue 21 Jul 2026 20:01:18 +0000
Manifest next update: Wed 22 Jul 2026 20:01:18 +0000
Files and hashes: 1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: 4poGgtOatUcOyLzTIIA/EnL4MEe6Oc1D/yDapNoXv+U=)
2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:b8:34:80:ca:55:9e:8b:4c:87:13:31:be:96:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: Jul 21 20:01:18 2026 GMT
Not After : Jul 22 20:01:18 2026 GMT
Subject: CN=6065a33ffe0e2483a264d446132514ae2da1bded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:a4:13:a7:b3:47:b2:1f:1e:1f:d5:2d:48:
f6:52:11:b3:85:80:51:97:8e:1f:af:9b:37:cc:21:
5d:80:cb:d0:48:63:ab:a8:1e:81:e3:5d:37:3f:06:
b9:96:44:81:d3:3d:63:f7:ee:4d:d7:c7:6f:be:a7:
7b:4e:0b:ef:7d:e0:d5:ec:bd:a2:5d:fa:0e:71:27:
fb:75:6c:5d:1e:1d:f3:98:50:7b:fb:ba:c5:af:4d:
d7:6c:b2:2b:2d:67:8c:7b:38:65:bf:af:71:43:77:
e8:13:62:c2:2b:e9:1b:0c:ed:d3:be:1d:39:21:1f:
0e:96:4a:a1:e6:00:93:b6:4f:03:51:f1:21:67:98:
14:5f:0f:12:6a:e4:e6:c8:0f:d6:e3:63:66:bf:bf:
90:9a:5d:34:87:ec:3a:32:6e:0c:80:6f:21:ee:fb:
db:18:df:f7:9a:a3:f6:38:bd:d9:4b:0d:b7:a4:5c:
e0:2d:42:1f:93:28:bb:ae:a4:e7:25:a8:b1:c9:0b:
30:e0:77:3b:af:25:64:33:dc:36:52:07:88:fa:80:
27:69:82:ba:48:f1:e2:cc:c9:84:d6:2c:6e:13:69:
bd:b9:56:e1:3b:37:a2:85:c1:26:6b:a6:54:c2:9f:
c1:fd:0e:27:42:76:b3:c0:93:f2:04:96:0b:35:25:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:A3:3F:FE:0E:24:83:A2:64:D4:46:13:25:14:AE:2D:A1:BD:ED
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4a:21:da:fa:2d:61:67:d5:00:95:47:62:68:59:76:70:78:
e0:f9:0d:d5:87:6c:d9:94:73:1a:1f:ac:9a:00:18:90:3d:df:
21:f9:12:7d:ef:e7:7b:9f:ef:1d:c0:eb:89:e8:46:24:64:45:
59:9f:9a:ed:d2:59:08:4c:cd:f9:42:7d:36:b2:a1:34:75:a6:
c6:21:e4:a6:1e:bd:28:ee:7c:9a:96:b7:9a:5e:a4:c0:24:9e:
06:61:da:d5:5c:53:96:39:07:96:38:b2:f7:7a:39:6e:02:cf:
9f:3c:46:d1:43:da:62:5e:38:16:b1:9f:b3:7b:7a:7f:26:40:
f4:81:5b:c8:8e:4e:d1:a3:e6:01:35:a3:36:48:d9:fd:4d:9b:
1e:16:10:2b:fc:32:a7:64:47:2c:f0:a2:24:98:ff:25:31:ce:
e5:1c:a0:f1:b5:b4:04:85:17:c8:b4:0d:47:d6:49:fa:d2:90:
2b:f7:e4:65:e8:1e:63:6f:1c:82:a0:d8:4a:21:1c:7b:c3:f5:
25:cc:ce:1b:37:c2:36:6e:dc:e9:9e:1e:4f:f9:34:91:6a:43:
c5:ec:62:d6:99:7b:2c:33:17:3a:b4:6a:aa:55:dd:a9:5b:e9:
e7:da:f1:11:ff:fb:52:38:02:47:d7:cd:83:67:dc:d7:5c:15:
28:c8:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:49:39 2026 by rpki-client