Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: VnAbab+biENcvnQtTKpShbOfL7H/qAJDCKy8DNXCeTg=
Subject key identifier: B3:2E:08:67:B1:3A:A8:47:BC:40:67:D7:6C:DD:F1:FD:BE:4E:E3:54
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019F841EF01304C88D7E4D7207C29C0D0F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 19CA
Signing time: Tue 21 Jul 2026 10:00:47 +0000
Manifest this update: Tue 21 Jul 2026 10:00:47 +0000
Manifest next update: Wed 22 Jul 2026 10:00:47 +0000
Files and hashes: 1: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (hash: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=)
2: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
3: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
4: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: OXrZ2/j5wT0/4Ni4GUme/xqwO2zzVVJni/hBd9Lya5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:f0:13:04:c8:8d:7e:4d:72:07:c2:9c:0d:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jul 21 10:00:47 2026 GMT
Not After : Jul 22 10:00:47 2026 GMT
Subject: CN=b32e0867b13aa847bc4067d76cddf1fdbe4ee354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:af:c3:8b:21:40:78:4f:b7:8d:46:75:0b:82:
6c:ef:87:74:0c:2f:df:0b:2d:43:8e:a5:b4:e3:fb:
9f:16:e3:d3:9f:80:e2:46:6a:78:c8:88:89:33:01:
1a:d1:50:b6:6e:fb:60:ab:93:45:f2:ae:a4:9e:64:
4a:95:4c:38:12:23:88:67:47:98:3a:ae:aa:35:d0:
de:e1:b0:82:f3:3e:4b:66:53:b4:34:1f:57:ec:52:
a9:89:ad:2b:13:ea:92:8a:79:e8:b8:dd:f4:97:6f:
56:7b:33:18:14:72:9a:0b:12:4d:14:e1:89:86:d9:
57:1a:d3:6d:04:38:4b:0b:c6:53:18:0a:a6:1d:ce:
4e:43:b9:ca:b5:58:8c:9a:41:10:a8:65:50:e4:c7:
81:f4:45:1c:92:5c:e1:e8:24:3b:95:0d:e2:ac:95:
89:e6:1e:1b:29:14:1b:3c:5e:af:db:d3:71:6a:a3:
42:d4:47:e3:b8:ba:06:f4:8e:72:66:92:00:f1:12:
2d:b8:2f:f6:fe:2b:14:d4:e8:f8:5d:bc:5f:c7:80:
19:6d:ba:a8:1d:4c:8d:b6:1b:28:b1:6a:04:d3:ea:
36:f7:c8:b2:3d:66:71:3f:f2:fa:eb:0e:0b:d3:70:
ea:52:6d:a7:50:1a:d4:2c:83:33:34:27:aa:75:79:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2E:08:67:B1:3A:A8:47:BC:40:67:D7:6C:DD:F1:FD:BE:4E:E3:54
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:d7:a7:31:c3:08:85:15:9a:36:96:f6:f0:0e:2a:e1:74:
73:8c:30:56:5e:cc:7e:be:06:43:6f:ed:7a:0e:10:86:92:43:
60:bd:de:f4:04:07:6e:bd:60:8e:a0:fe:1f:c7:aa:2e:45:c4:
d6:a1:17:dc:76:37:7d:49:4a:b8:85:fe:21:6f:bd:3b:ea:ff:
03:09:aa:06:73:ac:6c:25:88:01:84:63:0d:7c:fa:ae:6a:6e:
9d:6b:e0:a4:59:c3:f4:10:32:e3:b6:c9:c7:fc:09:90:c1:a2:
f4:62:f8:c5:84:38:b9:42:fc:05:f7:b8:c9:23:e6:2b:d8:10:
5d:66:15:ed:91:c1:ab:b3:25:b1:46:45:2a:a4:2b:5d:ed:6f:
b4:29:54:f3:50:e6:7a:c4:62:6d:3d:7e:63:8c:0b:69:ef:37:
24:cd:93:23:10:61:bb:f9:31:c3:60:36:0f:2c:45:7e:a4:64:
89:5d:e6:0b:75:a8:df:4f:8f:33:8c:47:48:de:82:4c:27:9b:
79:1f:cc:dd:42:4a:dc:05:df:25:56:94:6d:89:84:28:30:6f:
90:49:d3:11:c4:4b:97:01:ea:32:77:48:76:bf:60:33:d6:5e:
77:8d:5a:fe:24:f1:81:86:12:8b:41:ce:da:43:ec:22:bb:5f:
f8:76:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:56 2026 by rpki-client