Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: VvoP6mu/trCWycBKnQXfiSRyaDnx1U49oKj7/sOAYGg=
Subject key identifier: B7:BD:31:BA:0E:E8:13:82:83:33:CD:7F:51:B3:AE:31:EB:8C:77:B6
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 019FA2CF3071F0E1B1C1322096182D7030CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 1564
Signing time: Mon 27 Jul 2026 09:01:54 +0000
Manifest this update: Mon 27 Jul 2026 09:01:54 +0000
Manifest next update: Tue 28 Jul 2026 09:01:54 +0000
Files and hashes: 1: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: U2JbgueH6g41v6JSTGAx8+fwOFPjTZy/x5BnDUz7RWU=)
2: ob5sPFaRhRWX8YvpmsOhf_L42qk.roa (hash: F2rzq+6Lw+VZW+xrLLgUfoPJgDVHj07vj+YUG1nzWfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:30:71:f0:e1:b1:c1:32:20:96:18:2d:70:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Jul 27 09:01:54 2026 GMT
Not After : Jul 28 09:01:54 2026 GMT
Subject: CN=b7bd31ba0ee813828333cd7f51b3ae31eb8c77b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:1b:5c:d9:68:84:83:54:f6:8d:f0:06:34:
93:f7:06:ba:53:df:ff:12:08:b3:0b:c4:a0:80:43:
e1:b8:d6:b3:2f:cd:b0:ef:37:28:3c:54:4a:25:29:
01:8e:4e:57:d5:f4:0c:da:01:be:1c:35:02:fb:0b:
88:89:d0:5e:4c:3a:37:7c:75:4c:6a:50:18:d5:2d:
10:9a:a0:0b:75:95:83:66:52:a3:dd:fd:a1:4e:f5:
3c:2b:c0:5f:22:46:86:f9:27:08:d8:4c:18:72:78:
f2:2e:02:ed:c6:96:e2:4d:1e:b8:ad:ce:29:f9:fb:
3b:b1:e4:ce:13:44:20:e5:b9:5d:6c:02:84:57:5b:
f7:bd:a7:8d:d9:ab:5d:db:c1:37:43:3b:11:22:66:
83:df:fb:43:93:7a:80:7b:b7:b5:25:ee:df:e4:89:
40:32:dc:81:06:06:da:5f:88:ad:0b:f2:a5:ae:0d:
b8:d6:de:f1:84:5f:14:e0:d6:7c:98:14:e3:98:b9:
ae:2f:98:2b:6a:3d:5f:aa:da:25:83:ef:e4:39:cd:
65:65:b5:14:c9:e9:fd:ba:d1:21:34:53:1d:90:63:
56:39:b7:4f:07:0e:40:fc:f0:ef:f4:bc:d0:19:b0:
79:dd:f9:09:da:35:de:95:2e:6c:e2:98:ce:21:84:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:31:BA:0E:E8:13:82:83:33:CD:7F:51:B3:AE:31:EB:8C:77:B6
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:dd:1a:d7:e6:b1:12:0d:12:53:7c:72:cf:d5:a8:29:1a:
28:3e:0c:de:a2:31:ac:69:0d:9b:4f:73:86:34:59:05:81:6d:
00:73:d5:f7:b0:6e:19:f3:53:e4:89:fa:11:b4:13:ff:62:05:
a2:34:98:db:64:a5:d1:67:09:41:2e:ca:28:e8:39:c0:45:5d:
f6:23:69:73:0b:b5:09:7d:ff:05:b0:a3:6f:10:07:f4:be:aa:
c8:4e:5f:19:cd:fd:d2:24:7c:82:de:f0:2e:47:60:dc:22:20:
7b:b6:d4:83:7f:f0:66:0c:fa:8a:30:bc:81:79:d8:8a:58:71:
21:40:25:78:49:f2:b2:0a:89:d3:4f:92:b4:3e:e5:bc:d1:5d:
cb:69:57:a0:91:c6:32:0b:ac:28:6b:5c:04:56:4d:fb:ad:13:
64:08:3b:84:b6:84:9e:22:a5:5c:a6:bc:0c:e2:28:a3:b5:b5:
5a:7a:2d:b0:c4:bc:4d:d0:58:6a:fc:3a:9d:ea:2a:7f:28:a0:
65:64:da:73:99:37:1a:49:a3:1f:22:56:5c:f4:31:ec:e8:f3:
35:91:45:22:ec:cf:fb:e7:a1:c3:17:17:ed:c6:d7:3b:0d:47:
b5:ea:6c:0e:f2:1d:57:9d:5c:99:78:e2:ed:05:55:6d:0f:25:
3c:3b:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:11:58 2026 by rpki-client