Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: Nk7ZxJnmjX2iWvsIowmhY/frBGZO5PUH7sZPkVM3FEg=
Subject key identifier: E9:16:D1:7E:10:0F:CE:BB:CF:12:07:D4:73:41:02:14:54:41:40:36
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 019FA3731DA4D0C4CED45842BDFDA19734BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 12:00:58 +0000
Manifest this update: Mon 27 Jul 2026 12:00:58 +0000
Manifest next update: Tue 28 Jul 2026 12:00:58 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: plWdanZSDPH7BnbCygzRB4kX+v1MH2r6kd+8N3YIjRs=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:1d:a4:d0:c4:ce:d4:58:42:bd:fd:a1:97:34:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Jul 27 12:00:58 2026 GMT
Not After : Jul 28 12:00:58 2026 GMT
Subject: CN=e916d17e100fcebbcf1207d47341021454414036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:26:1e:da:4f:45:08:93:9c:ec:ba:68:e5:
44:3a:4d:ff:49:14:36:1e:85:ef:66:dd:a6:5e:94:
c4:5a:a2:75:09:a4:73:4d:51:41:20:bb:53:cb:30:
ae:a3:0f:31:19:45:82:15:ab:00:b4:ee:cc:69:94:
ef:89:66:ae:a1:d1:ee:fd:75:e8:c7:7a:77:54:2e:
3a:73:8b:42:8b:d2:bb:75:48:58:78:84:6a:15:3d:
52:a3:6c:d0:92:1d:78:9d:25:ed:f9:51:5d:dd:71:
f0:c6:13:d9:85:42:5a:ac:78:3a:a8:7e:4e:7f:2f:
78:8e:07:aa:c0:ab:a1:b6:20:0c:32:a8:9c:1e:28:
b8:b9:40:f5:29:20:64:32:fd:1c:d1:39:78:97:c4:
74:f1:9e:a0:c0:0a:a2:00:da:be:5f:d4:23:bc:fd:
37:71:73:ba:15:93:0f:bb:49:8f:81:d3:15:85:e5:
41:7c:4c:b4:08:27:7b:81:0f:58:5a:45:db:79:f3:
26:8f:82:13:d3:af:89:df:d2:18:44:b5:c6:8b:79:
ec:f1:22:12:72:8b:e8:78:de:4e:1b:6b:f4:1b:52:
ba:6a:e6:06:e8:78:d1:75:25:bb:89:4e:b2:41:eb:
c2:18:2d:2a:e0:8e:21:60:4d:f0:8b:b2:06:01:e9:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:D1:7E:10:0F:CE:BB:CF:12:07:D4:73:41:02:14:54:41:40:36
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:98:39:09:0a:a2:3f:5c:e0:82:0c:4a:ec:25:4c:43:2d:
56:5d:c0:bb:92:42:ae:6d:a7:1d:d9:f0:3b:53:fa:26:52:e1:
83:58:90:47:8f:47:10:88:20:7d:f2:8b:b5:c6:a6:a2:62:ed:
f3:44:a4:c2:42:18:bd:ba:73:d7:df:12:68:ea:8a:42:51:dd:
d1:d0:9a:24:d9:dc:34:26:ca:05:b5:f3:5a:09:3f:f0:d4:be:
37:88:6d:28:60:46:de:78:8b:af:bb:6f:da:38:12:24:21:fb:
87:de:92:8e:2a:b0:bc:7c:26:70:3b:23:63:8c:32:ff:b2:05:
76:1c:4f:e8:6c:7d:8c:a4:7e:d6:3e:3a:75:52:c9:15:cd:0c:
21:f2:b7:45:1a:26:23:b7:9e:bf:93:07:32:8e:1e:7b:7b:01:
d0:96:44:fc:f4:6e:ae:4c:82:d0:d2:c2:87:1b:20:b0:7a:cb:
f9:89:57:3f:82:b8:46:42:84:16:12:06:02:c1:a0:61:41:37:
da:41:3f:99:69:ca:05:e6:a1:8f:39:4f:cf:16:3b:dd:41:0a:
e0:5e:4b:c5:7a:65:e2:51:45:c4:aa:67:14:a7:0f:0c:2b:11:
f3:d3:0f:43:0a:6f:29:e2:0e:35:e6:c2:e5:fe:50:52:70:9a:
92:fe:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:36:07 2026 by rpki-client