Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: Phiw1xuxrTJ5AjosL0XdXkd+yAPu2n41JlXY6kexsGk=
Subject key identifier: FF:63:E1:53:2C:D0:CB:57:CC:1F:9A:6D:5F:D8:FB:96:97:30:77:B5
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019FA1F27E84F826301703F2E24788AECF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 082A
Signing time: Mon 27 Jul 2026 05:00:51 +0000
Manifest this update: Mon 27 Jul 2026 05:00:51 +0000
Manifest next update: Tue 28 Jul 2026 05:00:51 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: kUlUUUNwYn/t77WMh8mU8WnPhwN8V/YMmA5FGi+cCc8=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:7e:84:f8:26:30:17:03:f2:e2:47:88:ae:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jul 27 05:00:51 2026 GMT
Not After : Jul 28 05:00:51 2026 GMT
Subject: CN=ff63e1532cd0cb57cc1f9a6d5fd8fb96973077b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:e9:23:6f:9a:a6:c1:6a:e7:fe:51:85:9b:
65:7d:25:82:bc:e7:2e:a7:49:f0:40:5c:e9:69:70:
67:c0:be:2f:be:e0:04:2c:58:1d:3d:d6:eb:75:ef:
3a:92:4e:a0:a4:bd:48:59:d8:36:93:7e:57:4f:06:
86:41:c8:c0:f2:f4:1b:3d:21:d1:ce:06:6d:f7:ed:
f6:30:41:96:db:66:68:a2:eb:20:3c:4a:68:59:b6:
92:99:76:8f:be:6f:8b:f1:b7:40:bc:31:4d:67:f1:
12:25:8e:6e:07:76:4e:d3:d0:a1:44:90:55:cf:14:
a6:76:07:f5:96:a4:a4:59:c9:85:b0:a3:e0:d9:59:
9a:7f:73:08:6a:b5:4a:cd:1f:8e:8c:29:61:7a:65:
39:50:64:9e:d3:4d:59:5c:9e:93:3d:f8:c6:2d:d8:
22:da:b8:44:2d:19:d3:3c:51:51:df:67:84:79:26:
da:01:5e:f4:fb:25:55:b6:2c:31:92:37:d7:e9:6e:
d5:9a:14:a9:f0:fc:a3:4b:a8:69:42:d4:f2:25:08:
55:a7:e6:9a:30:ef:af:6a:82:3e:48:05:e4:fb:e5:
9c:0c:a6:12:05:2c:56:5e:b2:73:4e:5a:c4:34:10:
55:b4:28:d9:ef:e3:a8:76:4b:b5:5c:c0:1e:b8:6d:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:E1:53:2C:D0:CB:57:CC:1F:9A:6D:5F:D8:FB:96:97:30:77:B5
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:78:9b:82:73:73:1c:83:e6:3a:49:0d:d4:1a:c8:65:5e:e4:
e6:0d:2b:6a:7b:33:2e:1f:cc:2a:f5:d8:8c:69:9f:79:27:08:
d2:a6:55:d4:6d:8c:ce:01:3d:08:61:a9:15:b7:81:39:c5:e4:
01:bb:ca:ee:ed:b7:f0:b2:68:47:3c:ed:6a:ba:9d:e1:ea:fe:
9c:c3:2c:dc:84:34:75:c0:aa:f7:da:d3:c7:ce:49:cd:7b:41:
c0:e2:f9:ce:2f:3b:71:f1:92:49:f6:fe:fb:b8:92:c9:be:80:
57:00:09:3a:40:ef:6d:66:a7:cf:46:cd:04:34:dc:f7:23:d5:
3c:9f:53:89:96:ce:d0:9b:94:bb:f2:9c:e1:bd:b8:67:fa:e5:
58:81:19:0f:8d:b2:7d:10:67:26:b0:07:ac:75:c3:0b:dd:17:
f7:96:54:ad:6e:47:f2:17:3f:38:b6:56:24:d6:05:c9:42:87:
96:9c:db:79:6b:d4:32:53:d3:cd:c8:04:23:47:51:db:09:1d:
63:41:08:78:3f:98:09:18:c3:da:f5:af:0c:64:a6:3e:a5:f1:
fc:78:b9:a4:53:6c:ff:b3:cb:1b:ae:22:8a:d3:fd:24:d6:74:
65:d8:95:f4:7d:2c:6b:73:b0:4c:3a:a1:84:29:06:a7:ca:a0:
d3:53:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:57 2026 by rpki-client