Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: lEBlNqVnWpS6PCfHEIHS5xgA1Lhq5dURataxzzezC/0=
Subject key identifier: 76:7C:30:46:BE:56:BE:C3:47:B1:E4:B3:2C:F7:0A:32:2F:D7:7C:34
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 019F728785C44E0744664F587E8AD809405A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 173B
Signing time: Sat 18 Jul 2026 00:01:51 +0000
Manifest this update: Sat 18 Jul 2026 00:01:51 +0000
Manifest next update: Sun 19 Jul 2026 00:01:51 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: CEBWZH7CZPKbLyoY3AAvmYH0dPEJtrXMqxsp7HJ+PG8=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:87:85:c4:4e:07:44:66:4f:58:7e:8a:d8:09:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jul 18 00:01:51 2026 GMT
Not After : Jul 19 00:01:51 2026 GMT
Subject: CN=767c3046be56bec347b1e4b32cf70a322fd77c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d1:c4:ed:1e:ac:4c:87:5e:39:e0:1a:27:72:
a0:43:56:86:b9:30:d7:65:7d:4e:a6:c8:74:27:c5:
fe:d6:fe:c4:e3:85:e7:bf:a2:41:3c:42:79:ce:a8:
51:15:96:06:f9:5f:f8:36:d2:8e:91:77:7d:10:aa:
68:bb:e3:1d:75:dd:b2:d0:db:e7:60:60:16:50:fb:
af:fd:c2:72:be:08:57:08:5f:d9:b1:f7:58:43:19:
d6:7d:03:b2:08:67:3d:47:64:7e:20:ac:23:52:35:
65:33:b2:1c:2f:98:53:c1:17:b5:e5:48:0c:f2:f1:
ce:6e:b4:6e:ab:8a:63:05:85:18:d3:a9:e1:16:7d:
e4:b4:a2:33:4b:59:03:40:8b:4d:08:6f:72:63:34:
34:b9:ad:b5:17:a8:4e:57:e8:14:15:63:74:2b:6d:
13:f5:6c:52:3b:de:bf:ca:dd:88:e9:7c:93:6c:25:
6d:28:1d:c3:d8:4d:08:60:8e:f0:16:b6:8d:20:ca:
89:ce:9c:00:18:2d:b2:08:6c:67:7e:2c:3c:06:d4:
36:1d:e7:21:1d:22:8d:6b:bd:fd:35:48:e7:ce:f4:
e8:c8:20:de:6d:03:b9:30:47:8c:04:f3:0f:77:57:
40:cf:12:8f:a6:a0:64:90:a4:39:7a:c9:67:09:95:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:30:46:BE:56:BE:C3:47:B1:E4:B3:2C:F7:0A:32:2F:D7:7C:34
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:76:c0:c9:4b:b0:b2:a4:3f:e3:c8:02:97:e0:2c:f6:e2:e2:
bb:e0:45:b0:a5:fe:6a:6e:f5:d3:97:b0:3b:bf:fb:9f:50:11:
d3:41:79:2c:02:b3:20:5d:62:0b:9d:73:ba:a5:9a:99:ac:0d:
9e:bc:88:6d:fa:f9:50:fd:47:05:7d:6e:b0:b3:ec:e0:34:a2:
32:db:53:62:37:50:f2:5c:4a:cf:2a:1e:3d:cf:d2:c6:47:e0:
06:91:55:10:15:78:fb:b9:13:07:bd:ef:cc:3e:76:47:f8:cb:
fe:7b:75:cb:fe:dc:be:ed:e5:e6:62:6b:7a:fb:bc:6f:5b:ef:
c8:eb:51:51:a1:b9:77:58:54:75:4d:bc:75:e6:ff:55:f9:54:
f3:79:8b:2f:ce:79:af:a0:a6:8c:75:92:83:04:55:8f:ab:5b:
72:99:eb:15:93:6f:7b:85:56:b3:65:6c:8e:9f:58:49:13:d9:
3e:79:64:4d:c8:be:11:d6:61:66:32:9d:3e:86:de:52:cf:42:
59:74:c5:8c:42:2b:9b:d7:e4:d4:74:64:b0:19:24:ab:bb:f7:
b3:d0:99:ee:99:1b:5f:fb:19:1c:44:c3:a5:f6:11:6f:58:67:
7f:79:d6:84:3b:d8:4d:9e:a6:52:24:c4:08:01:1b:ce:67:1b:
58:a2:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:27:28 2026 by rpki-client