Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: l1NtCcTV613H1sU6MhnTbsDSwG0HYBTbp0H9l2kzx8I=
Subject key identifier: 46:14:4C:FC:60:7C:D2:E6:78:4F:F7:13:79:47:40:39:19:96:4F:C8
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019FA2972E8E9A9D4D8E49AAB18EDDBE1D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 08:00:44 +0000
Manifest this update: Mon 27 Jul 2026 08:00:44 +0000
Manifest next update: Tue 28 Jul 2026 08:00:44 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: eJdn91hAadVpk4rHopWhTqONmnKnqBqe4v+udI8XBSw=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:2e:8e:9a:9d:4d:8e:49:aa:b1:8e:dd:be:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jul 27 08:00:44 2026 GMT
Not After : Jul 28 08:00:44 2026 GMT
Subject: CN=46144cfc607cd2e6784ff7137947403919964fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:5e:b7:83:a8:e3:3e:41:7d:d7:24:31:8e:
33:86:6d:0f:40:42:66:f8:9f:ab:62:d5:be:2b:c7:
5c:1c:38:1a:75:d8:07:4c:e7:0a:41:dc:af:a6:cd:
8a:4a:f0:fd:2c:03:3b:0c:c2:a0:71:41:1d:2c:df:
6f:50:1b:94:d2:b6:13:68:75:10:fa:93:18:4c:e4:
77:20:dd:6f:4d:90:4c:21:6c:d3:df:28:f1:4a:68:
46:50:1e:48:e0:a6:68:f5:e6:7b:b8:42:c3:1e:10:
03:43:c4:81:85:e2:d0:37:f6:c5:31:da:2f:61:52:
46:22:17:b5:d8:c5:51:c9:c5:a9:67:d2:1b:55:82:
a7:ff:ca:ed:de:66:05:84:87:11:e8:da:09:4e:4f:
69:a8:22:fd:20:34:67:33:87:e9:1d:f3:f2:4a:a6:
6c:73:99:a6:af:46:71:59:9b:30:30:77:1b:52:2c:
24:7e:bd:c6:65:76:d7:27:e1:78:07:a1:63:bf:88:
87:e0:59:0d:a3:7a:38:a3:0b:dd:b1:ee:6b:0d:ff:
90:46:2d:5d:25:78:fa:8a:61:c7:ee:8b:2d:b2:87:
64:32:e3:27:ec:dd:df:1d:c0:e7:17:6c:73:6a:a2:
47:20:c0:a8:c6:af:76:9e:4d:51:a2:ab:46:8f:a5:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:4C:FC:60:7C:D2:E6:78:4F:F7:13:79:47:40:39:19:96:4F:C8
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:35:08:20:36:db:bc:e4:9b:7d:97:07:6b:1a:b9:34:76:01:
1c:3b:74:ce:a3:c0:08:48:4b:a9:18:ea:25:c9:2f:76:9b:44:
13:69:c8:77:af:6f:a7:39:8f:94:c2:5f:3d:60:67:de:ae:2c:
1e:83:37:41:6a:9e:70:87:78:77:63:3f:ef:58:ac:04:11:93:
40:a8:66:4c:00:ff:14:dd:57:ab:01:ad:4c:e7:05:ad:ad:61:
39:c6:75:88:c6:eb:47:14:85:f1:23:c6:60:aa:b8:30:2a:ca:
3a:7e:d0:6c:4c:ec:9b:6f:7c:ba:3a:d2:02:73:ee:79:02:93:
e6:d5:ef:37:8d:9f:2a:26:df:1b:dc:c8:62:fc:00:88:ff:c6:
57:81:26:f5:cf:2d:9a:42:41:ed:fe:ab:1c:39:c7:05:86:c2:
4e:4a:93:45:9d:f1:7c:9e:a9:65:dc:38:71:e0:d1:e0:59:77:
7c:76:42:95:d8:3c:58:10:f3:01:85:58:41:a4:7b:7f:e1:62:
40:ab:8e:a6:bb:00:04:ae:11:16:a9:c6:f0:f6:92:4a:96:c0:
ee:4c:b9:9d:60:34:f0:5e:f4:5a:ad:fb:d9:be:22:2e:4b:3b:
02:bc:be:a7:77:cb:74:43:5b:f8:f8:9c:cf:46:3c:e0:00:79:
e4:12:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:16:12 2026 by rpki-client