Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: E21ysEhfUwHKYeBEUb8Y8V5zH1nsoLhdT0TTfEglFbU=
Subject key identifier: D7:32:8B:F0:34:3E:DF:76:A0:5C:84:A0:E0:7B:FB:D3:C2:EB:AF:47
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019F860DB1EF792F3AD09336867570AC03D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 19:01:12 +0000
Manifest this update: Tue 21 Jul 2026 19:01:12 +0000
Manifest next update: Wed 22 Jul 2026 19:01:12 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: Jixgw7ndCMvVJxsPYnc+Dcys7U/hLS86zGs5dMiJ6H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:b1:ef:79:2f:3a:d0:93:36:86:75:70:ac:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jul 21 19:01:12 2026 GMT
Not After : Jul 22 19:01:12 2026 GMT
Subject: CN=d7328bf0343edf76a05c84a0e07bfbd3c2ebaf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:6b:d2:0a:ed:88:b7:07:12:e0:0d:f2:f4:
ce:a3:7c:9a:81:1f:85:9b:53:81:64:25:14:d7:41:
16:e5:c5:53:24:5c:9c:ca:1f:08:58:03:a9:f1:51:
dc:09:19:8c:22:f7:93:ed:42:cb:99:e9:75:07:64:
17:e3:2d:36:8c:14:55:07:6c:0f:2b:92:74:db:3c:
f4:2c:4d:3a:46:41:15:b2:c4:b3:e5:f5:33:58:a3:
66:8c:08:b5:55:32:36:dc:f1:45:90:18:6c:58:67:
d1:f4:4d:6a:03:d1:4b:b9:ff:8e:93:07:9d:04:a9:
97:0d:75:f9:c0:e8:17:25:aa:c3:13:d3:21:2d:50:
14:18:f4:44:fc:6f:12:f5:29:96:2c:80:f9:6e:68:
2b:97:69:dc:21:b3:93:96:6f:b7:a1:9b:90:f4:96:
08:33:9f:92:fb:52:82:e3:e4:5a:c0:46:1e:40:82:
95:52:6d:46:5e:8f:38:c4:93:20:32:87:25:05:30:
94:b1:ff:85:b8:1c:8c:18:fd:38:d3:df:fa:c6:95:
ab:8c:fc:a6:83:06:ec:4e:ad:a4:9c:70:90:f6:a4:
90:f4:96:47:ac:75:7e:8d:75:9d:ce:54:50:c6:7b:
46:85:22:1b:c1:d9:b6:ea:b2:b8:80:8c:a7:f8:ea:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:8B:F0:34:3E:DF:76:A0:5C:84:A0:E0:7B:FB:D3:C2:EB:AF:47
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b7:09:8d:1b:fe:4b:1d:c4:74:1c:e6:aa:67:99:1e:de:9e:
98:48:81:bf:22:18:06:29:f9:c4:33:42:43:f8:4e:bd:2b:21:
1b:3d:22:db:86:21:7f:0e:b2:e2:42:65:9d:2d:1d:d8:f9:18:
d0:4a:6c:46:06:89:7e:15:a5:c7:93:05:39:2a:a9:60:44:b5:
08:c4:69:4c:27:ca:5e:6e:2f:fd:54:8c:6e:cd:dd:be:82:17:
5b:2e:80:05:f0:e5:19:ea:7d:f9:58:dd:33:e2:ce:20:96:df:
d0:4a:aa:e7:9a:5c:01:76:d1:89:89:25:0b:4f:4b:a3:60:27:
22:bd:d1:ca:d5:28:00:d7:36:86:22:4d:e2:05:e3:07:9f:cc:
86:e5:7f:c9:82:2c:8c:1a:c0:6e:4a:a2:ad:1e:41:3e:79:83:
48:bc:19:d7:61:84:60:67:04:a8:46:1b:ee:69:be:52:5e:26:
72:0d:6d:56:c3:54:22:86:54:2c:ae:19:e8:21:98:87:5d:6b:
93:fa:50:8b:49:ff:10:20:ba:e7:ea:a6:4d:15:45:20:9c:a1:
46:ed:ab:73:36:61:22:ed:a5:07:9e:39:ce:01:23:2f:1f:b5:
33:90:51:5f:f0:21:f5:49:5a:97:bd:95:56:ed:6a:14:76:11:
82:d1:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:24 2026 by rpki-client