Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
File: kpbYTmTVXsgSR2-4BvD-daCL-ys.mft (raw, json)
Hash identifier: WwXwfYCLjDQezkw9JKbpOvkxesgXw2MpVDSN5EXUPhM=
Subject key identifier: 31:25:D0:5B:AE:25:BF:CA:84:9D:65:93:B2:BD:59:1C:80:0A:7F:B0
Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
Certificate issuer: /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Certificate serial: 019F864450B518904E8A8FDA234C281B0574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 20:00:51 +0000
Manifest this update: Tue 21 Jul 2026 20:00:51 +0000
Manifest next update: Wed 22 Jul 2026 20:00:51 +0000
Files and hashes: 1: WMTxNqy5dxe24um7JtSXmDnNRnM.roa (hash: TxZKxHcS8Fj+JFe1cwBosTBaRiZeeZ2HacumzoOW+L8=)
2: kpbYTmTVXsgSR2-4BvD-daCL-ys.crl (hash: 4RqRoebMK9yk72+P6w5phUXTy8bUQwkxJLDr8j9kdnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:50:b5:18:90:4e:8a:8f:da:23:4c:28:1b:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Validity
Not Before: Jul 21 20:00:51 2026 GMT
Not After : Jul 22 20:00:51 2026 GMT
Subject: CN=3125d05bae25bfca849d6593b2bd591c800a7fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:c1:4d:59:18:46:b9:9e:52:eb:f3:83:04:
f9:13:a5:2d:4b:ec:e1:71:9d:09:fe:7e:f1:85:9f:
a9:3b:57:8f:df:96:25:87:61:14:20:de:88:d9:79:
d5:cd:f7:7d:32:b6:fc:89:26:97:87:01:5a:1b:b5:
22:8b:71:03:8e:a1:6f:0c:58:4a:5d:91:1c:5d:82:
3b:15:b5:b6:bc:2e:82:7b:94:b1:24:90:ea:b2:d6:
f1:62:57:27:6f:a7:d0:2a:d9:58:5a:39:92:e2:97:
18:26:27:31:67:1e:fa:6c:ad:53:56:64:e6:f4:ca:
d9:a1:7e:35:b7:d6:ca:ff:99:ae:97:49:97:a9:ec:
7d:35:9b:dd:0e:6f:79:aa:fd:e4:f1:cd:b6:43:8c:
5c:3b:3b:10:12:82:71:b3:bd:0a:3a:f1:40:60:c9:
9e:bb:99:e7:c8:d6:cd:7b:c2:12:5c:0d:ac:05:0c:
26:cf:0b:55:a5:ae:7b:f2:4d:f8:78:63:09:a4:08:
86:4a:8c:45:d7:3b:1a:7d:fa:24:6d:5a:6f:fc:4c:
90:ee:bf:53:b5:00:cb:02:6f:55:98:af:34:2f:ff:
e2:5e:16:f8:a2:36:8f:bc:d2:be:f6:4c:6a:77:ad:
bb:16:a3:63:17:40:4e:0d:60:5a:e8:aa:ad:50:57:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:D0:5B:AE:25:BF:CA:84:9D:65:93:B2:BD:59:1C:80:0A:7F:B0
X509v3 Authority Key Identifier:
keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b8:a3:d0:38:fb:1c:2e:52:36:ce:9f:e4:6c:fd:02:86:02:
c4:d5:8c:4a:b6:44:f7:2b:f8:43:ff:cb:80:00:4b:2a:a3:37:
df:3c:e6:1e:5b:6a:6e:84:1b:33:ca:05:74:6a:79:e9:ed:ce:
41:90:92:03:d3:b8:f1:b7:3d:e0:95:3d:b1:b7:85:0e:74:d0:
6e:b2:48:d0:4f:97:80:41:f3:8a:6c:2b:30:cb:02:d8:59:63:
56:af:52:ae:be:33:5c:51:f1:19:c3:e2:87:d4:09:6b:01:fb:
23:09:c3:1e:2a:10:f4:21:2c:90:23:df:0f:8d:ac:11:45:d9:
62:6e:f2:09:d3:7a:6f:41:76:de:39:1c:d6:67:3b:78:ba:33:
8e:0d:3a:61:c4:34:da:bf:1d:93:b1:d8:bb:7d:af:6a:2d:46:
20:59:69:df:f4:bc:0d:b7:81:aa:9f:56:78:ae:05:cb:87:9b:
a4:fc:96:7f:24:65:50:87:fc:11:18:31:14:5a:9d:4d:1e:27:
ed:95:49:70:66:8d:e2:91:57:78:74:95:5b:d2:5f:3b:74:07:
92:79:04:1f:43:1f:00:a0:1f:b4:b3:8b:7d:f2:e5:cf:a9:68:
91:e7:95:cc:ae:01:8e:b6:e9:bd:6f:88:79:fa:a5:96:8f:91:
0d:d1:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:47:22 2026 by rpki-client