Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: sx6fuIeew69cuYjiqoUiQwuoZhCXFDMs1+s3QakeGvE=
Subject key identifier: B0:4D:F6:DA:62:4E:80:20:15:37:51:39:44:A6:7A:DE:D9:3C:1B:11
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019F728632008D607805BBA107AF0FE4D23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1625
Signing time: Sat 18 Jul 2026 00:00:24 +0000
Manifest this update: Sat 18 Jul 2026 00:00:24 +0000
Manifest next update: Sun 19 Jul 2026 00:00:24 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: D3xt4S+neIQaPWmZxOifIj2hUH76+rdvVY+rTAZl2ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:86:32:00:8d:60:78:05:bb:a1:07:af:0f:e4:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Jul 18 00:00:24 2026 GMT
Not After : Jul 19 00:00:24 2026 GMT
Subject: CN=b04df6da624e80201537513944a67aded93c1b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:14:35:14:3d:02:f7:98:41:fb:0f:15:64:
65:c2:66:fb:ea:a0:ba:25:d3:4f:9d:3f:8f:d9:ec:
6f:bb:38:11:8b:d9:0b:6b:49:6d:d4:7d:cc:6a:8c:
2c:9c:3b:15:9b:c4:91:fb:0e:b7:86:b9:02:1d:f2:
f1:20:15:96:be:d4:95:d1:e8:26:0f:c1:25:f5:02:
51:30:9f:69:ab:d3:6c:79:10:bb:bf:26:aa:38:e0:
1a:be:4c:2a:92:20:be:1b:86:93:50:ed:23:e0:96:
7f:5b:b9:8d:2d:1e:a3:2b:58:72:fc:f8:31:bf:72:
39:b9:62:34:ff:b7:d4:17:b3:b5:bb:73:0a:78:21:
7e:66:26:00:31:b7:af:b6:d0:82:93:ba:8e:b5:51:
0c:e1:d1:d8:4b:53:28:ee:7b:92:43:62:18:e2:03:
de:e5:71:7e:9a:f3:88:0b:72:d7:1b:16:fa:9f:e0:
be:a9:44:ed:1f:e7:de:d0:b4:4a:4c:3e:eb:9f:b9:
9b:8c:73:42:5a:55:3c:22:2c:01:eb:e3:d8:1e:a3:
54:0e:88:96:4d:71:d7:9d:b8:2b:8b:23:56:b4:23:
35:86:d8:56:7d:b4:2d:f9:a7:82:9b:dd:97:4b:19:
a6:fa:40:88:36:3b:7f:82:18:1a:9f:9e:94:e8:d0:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:F6:DA:62:4E:80:20:15:37:51:39:44:A6:7A:DE:D9:3C:1B:11
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c7:77:94:16:a4:cf:c9:21:5c:8a:4d:7c:a4:d5:74:de:c2:
97:3d:f4:f1:72:63:f2:b0:01:22:93:de:4a:5b:a2:f7:0c:2e:
b5:f1:ca:97:98:cc:60:2f:64:79:f9:85:06:0b:fc:18:aa:82:
28:f0:68:04:37:25:15:6d:9c:49:d7:bc:a5:9e:7e:22:cf:47:
6f:94:35:22:96:9a:5d:0e:27:08:5c:4d:cd:0a:01:18:c8:5e:
59:a5:9a:ab:ea:e6:d4:ab:09:4a:32:4a:09:71:12:c8:50:2e:
1e:e9:c6:b9:d9:4b:8c:49:d2:b2:60:99:0d:b0:98:3a:4d:f6:
de:97:e2:72:1d:cf:a1:59:1f:a9:1d:84:f5:4f:16:41:c9:67:
68:da:ca:b1:2a:b0:cb:d4:93:81:3d:71:60:4b:e4:9a:d6:c3:
f7:0a:fb:cb:a2:fe:77:97:57:11:87:f7:33:5a:8c:46:5f:79:
bf:02:fd:86:80:55:aa:e8:df:a6:b2:73:9c:68:71:eb:4d:5d:
a3:a7:f1:b0:a9:20:67:62:c1:13:d8:d1:15:04:e5:32:5e:6e:
96:17:de:b4:a4:73:d9:1d:93:0d:ad:fb:58:e0:6d:9c:7a:ba:
e4:8e:ef:54:c9:d5:ff:b3:2b:15:40:43:ea:6b:38:e5:2f:4b:
77:2a:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:15:59 2026 by rpki-client