Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: yEt8xsQP/2ZrLPYDyGNv+o9GOZ17K0li0kgxigujw8w=
Subject key identifier: 32:F1:7C:90:0B:A3:D4:95:C1:DC:50:E3:CE:96:46:A9:C7:23:FA:92
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 019F8B6A9602776F180B28DAA561ADA720C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 04B3
Signing time: Wed 22 Jul 2026 20:00:45 +0000
Manifest this update: Wed 22 Jul 2026 20:00:45 +0000
Manifest next update: Thu 23 Jul 2026 20:00:45 +0000
Files and hashes: 1: igP_j0gqdj6VYQfMBatyuvEtzjE.roa (hash: Cvo1yExlPO8Dsib93UiD0RmAn7lporXrd5tMSD8Uf7s=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: Hg7+/3QXVIQFT1PFaQ1U4GyNjNTrAwvnW3ZUnEonQvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:6a:96:02:77:6f:18:0b:28:da:a5:61:ad:a7:20:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Jul 22 20:00:45 2026 GMT
Not After : Jul 23 20:00:45 2026 GMT
Subject: CN=32f17c900ba3d495c1dc50e3ce9646a9c723fa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:03:e7:d6:9f:52:b5:fa:4a:0b:6b:37:61:
95:70:da:a4:c7:1b:c3:51:68:60:c7:3b:4c:57:b7:
f0:db:28:51:87:d8:ad:92:8d:72:b6:4a:ef:1f:0e:
33:b4:ed:94:0f:10:76:8f:7f:98:d0:66:db:b3:5f:
d0:db:1f:29:51:10:9c:5d:e3:b1:fb:89:ea:72:e3:
6c:ee:22:7f:e7:08:3e:71:44:40:ff:e0:68:25:40:
40:e7:22:7d:4f:a4:15:92:a6:d5:10:b6:8c:40:fa:
9f:c3:75:76:46:60:82:bf:cc:a8:3c:a4:57:23:6b:
18:ec:e1:9d:a1:9e:ab:3b:4e:62:08:94:39:9f:c7:
f2:e6:e8:68:7d:ac:41:ce:5a:69:89:81:fe:78:0f:
8d:e5:99:0e:07:6e:6e:87:8e:bb:ef:0d:f2:11:00:
8f:fc:35:48:10:48:eb:25:98:36:53:98:4a:22:ac:
5c:a2:13:8c:4f:f5:81:61:4e:cf:84:e1:4b:53:07:
a7:99:a0:1c:d7:f5:88:1c:40:14:03:69:20:75:dd:
bb:2b:20:3a:b5:0b:c0:e2:a6:b3:9b:d1:2c:65:8f:
f3:26:92:d2:79:8e:cc:cd:92:f8:41:47:df:c7:db:
49:4d:09:99:f2:ec:16:49:3d:98:d4:fd:35:e8:69:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:7C:90:0B:A3:D4:95:C1:DC:50:E3:CE:96:46:A9:C7:23:FA:92
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4e:f9:f8:d0:a3:92:45:ae:45:ea:40:82:be:e2:37:51:eb:
41:84:cc:79:22:8e:e4:ce:6e:4f:fd:f0:a3:cc:00:61:55:60:
6f:6a:58:53:8c:52:55:9f:b8:dc:82:56:d3:33:30:04:bf:06:
58:35:1f:5b:b6:32:06:18:71:60:ea:b2:08:6b:11:21:fa:e8:
2c:8c:84:40:2e:17:57:43:69:8c:de:25:3d:e1:c7:5d:e3:a6:
1e:b7:9e:bf:73:29:46:2d:85:2a:5c:ab:27:52:f3:19:5e:d3:
51:49:df:72:86:3b:58:a3:b9:d7:3a:c2:9a:b5:b6:cc:4d:93:
29:6e:2a:d5:3a:07:83:37:a1:27:af:2f:c3:04:87:94:a6:83:
a0:b6:0e:cb:a9:b6:83:aa:1d:99:99:0c:bd:e1:b5:d4:0e:9f:
11:67:29:09:8c:67:d5:f8:d2:d9:ce:ec:55:c4:6c:ca:bc:1d:
c2:c8:a0:65:ed:03:ff:20:fd:82:a4:c0:fe:94:80:ea:ed:d4:
12:61:12:ad:d3:0f:1c:55:95:3a:7a:b3:50:43:4c:9c:b4:a4:
1c:cc:4a:2f:69:fb:73:df:38:0b:41:5b:e6:07:8e:28:d6:3e:
57:98:64:c6:57:56:b5:07:d4:17:d6:a4:1b:2b:22:e7:72:67:
0b:b6:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 01:31:14 2026 by rpki-client