Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: gg5Q030lNuo1vTkhqOBLGmMCRhzSNdu+QtJf3hY1Lz8=
Subject key identifier: 87:51:20:53:B5:5C:4C:6D:AC:AD:A9:2C:68:47:68:F5:86:36:3B:DB
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 019F85D6E38778D0B46E34576F74D5CD271B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:20 +0000
Manifest this update: Tue 21 Jul 2026 18:01:20 +0000
Manifest next update: Wed 22 Jul 2026 18:01:20 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: BoJmiAL445C/lTTc+zOaI/dS16i3ygbQsMhT/w99srA=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:e3:87:78:d0:b4:6e:34:57:6f:74:d5:cd:27:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Jul 21 18:01:20 2026 GMT
Not After : Jul 22 18:01:20 2026 GMT
Subject: CN=87512053b55c4c6dacada92c684768f586363bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:49:49:7c:71:ec:93:88:49:62:ed:b6:52:
0e:41:e1:cc:5f:13:f0:2c:86:0e:1d:71:4a:8a:fe:
10:1b:0d:29:4a:24:d7:03:c3:0d:8e:c7:d0:91:1f:
76:12:ed:7d:8c:32:8f:eb:42:85:bb:ce:8f:08:29:
62:8f:47:84:6c:a6:88:6c:a5:cf:7b:87:0b:8f:0b:
58:df:76:b1:64:c0:71:31:e9:72:1b:79:ba:f4:a2:
c6:84:cf:be:4a:bd:85:0f:b4:a2:3f:e2:44:f8:32:
2a:f9:92:b9:d1:6b:0f:a6:ae:fe:4a:e4:8b:1c:a2:
80:4f:1d:ae:5f:97:84:db:f8:dc:c9:b3:61:28:85:
4d:f9:b8:f5:a3:5a:ba:c3:0a:0e:e7:14:6e:03:7d:
d7:1f:d7:3d:2a:ce:44:bb:f7:e4:f9:da:03:f0:df:
ee:c8:89:47:ec:c7:9d:b2:6a:0e:f2:6a:6a:14:c1:
8e:b4:e2:6f:49:41:79:f7:06:64:d4:77:23:2e:60:
1f:d2:bd:38:e3:df:6a:2a:fd:3c:92:00:65:c5:f4:
fa:f8:89:ba:64:97:df:34:af:ae:a3:fc:f9:e2:19:
45:91:81:dd:92:5c:0d:14:65:9e:52:45:be:dd:20:
3a:d5:fc:92:15:2a:93:8a:f8:c3:63:a3:45:12:24:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:20:53:B5:5C:4C:6D:AC:AD:A9:2C:68:47:68:F5:86:36:3B:DB
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:a3:f5:b6:79:8a:26:5f:2d:50:7a:18:54:ea:73:d8:f3:
c9:3d:59:36:f3:02:42:08:70:69:9c:3f:76:b6:07:34:77:76:
72:85:af:a0:72:d9:ae:dd:57:35:29:1b:58:6f:58:b3:64:3a:
8f:77:65:36:a1:fb:76:0f:46:75:17:26:9a:07:28:4f:8e:74:
9c:b4:55:2b:a4:e3:c9:34:e8:a2:c5:a9:52:98:30:fd:62:7f:
dd:6b:67:e9:de:c7:79:2b:56:82:be:c3:71:26:73:c3:9e:e7:
88:c0:f1:0d:ae:bb:25:12:63:d7:10:d6:8d:c3:44:51:10:c6:
20:a1:35:08:95:45:a0:01:82:1e:a5:0d:e1:24:55:79:ef:33:
32:d2:d8:24:26:c3:72:91:23:78:0d:44:fa:41:e1:a2:52:6b:
d0:10:2e:7a:b2:7f:7b:f5:c0:55:11:46:48:b5:ce:f7:43:26:
83:da:0c:07:ed:1d:80:97:48:90:f9:c2:60:1b:41:c4:69:39:
56:b9:eb:d2:1d:97:b5:e2:4a:3f:f8:51:61:bb:65:fb:b2:4c:
37:b2:e9:d5:0d:ec:af:9e:d9:29:46:56:43:81:f0:80:86:da:
58:13:54:c8:c8:76:a0:25:1d:dc:c2:57:ca:de:b4:28:1a:76:
96:b7:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:08 2026 by rpki-client