Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: LTpRrY6i+Hv4dHI4/3306vnVYnpQn6XWXo6keLI4q1M=
Subject key identifier: 21:59:20:C4:7A:ED:06:3B:82:80:61:F4:40:24:E9:79:06:3D:6E:B8
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 019FA417604679AF1A0DC52D750484E96FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 19D6
Signing time: Mon 27 Jul 2026 15:00:22 +0000
Manifest this update: Mon 27 Jul 2026 15:00:22 +0000
Manifest next update: Tue 28 Jul 2026 15:00:22 +0000
Files and hashes: 1: M0wDu78r7xywtOeR44tzruZSaEQ.roa (hash: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs=)
2: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: tmsZYGjyhqS+EcwneVPxRKL1qa7dT54r2zT/f03fU4c=)
3: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (hash: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8=)
4: vG7UQUChYLey5nR_Sv-0wx1TNeg.roa (hash: S15AVBuDsdwRGeDBytez+VIQASsm2pW1hwEeubDp1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:60:46:79:af:1a:0d:c5:2d:75:04:84:e9:6f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jul 27 15:00:22 2026 GMT
Not After : Jul 28 15:00:22 2026 GMT
Subject: CN=215920c47aed063b828061f44024e979063d6eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:bb:6c:2e:01:61:ba:b1:3d:25:7e:8e:d8:
0c:d3:45:45:47:27:83:65:7a:c8:58:4a:72:19:26:
f2:0b:2f:91:6b:18:ed:47:b0:9a:19:c2:24:39:75:
0d:88:92:c5:12:30:9e:d2:8c:2e:d8:61:b2:b3:bf:
e1:58:fc:8b:e4:3f:45:dc:7a:cf:1b:34:bf:a7:c0:
22:fd:2a:b6:30:31:24:85:60:49:45:38:0f:5a:08:
54:a5:4b:1e:e5:5b:8f:29:87:99:44:2f:13:2f:b2:
c9:bd:2e:8d:96:4a:b4:52:b8:e5:2e:38:ea:cf:04:
a2:a9:9e:0e:03:30:da:b3:53:48:60:6d:54:3a:c7:
3b:c7:04:0c:56:9c:41:e6:de:c8:fc:4d:4c:11:ee:
0d:43:76:00:80:ed:e1:78:6a:6b:d7:f0:98:2e:5c:
b6:88:d6:53:2c:6e:c6:93:f5:61:e6:d7:ba:cd:d8:
44:4f:59:0d:97:e7:a3:25:26:19:c4:8c:46:0d:90:
08:0b:62:11:6c:12:97:fc:b4:fe:ac:10:1f:8a:34:
ac:a1:ae:d6:9b:63:b8:c8:f1:22:7d:ab:80:eb:4a:
e8:81:19:46:65:95:cb:ad:42:dc:4a:90:1d:3e:0a:
e0:1f:a4:0d:6e:d7:db:25:69:e0:e0:67:ed:bf:a8:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:20:C4:7A:ED:06:3B:82:80:61:F4:40:24:E9:79:06:3D:6E:B8
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:25:f5:31:43:80:a2:1f:8b:35:eb:e2:7b:6e:db:64:d8:71:
93:f4:21:b2:74:5b:4b:13:39:da:80:f2:a1:00:a4:4d:53:94:
5e:03:ec:a1:7a:7e:a6:34:59:82:9f:a3:57:3f:0d:56:ee:22:
4c:0a:dd:56:e5:39:76:02:c6:2f:a3:5d:b7:45:89:66:32:e1:
8e:f3:b7:35:a7:26:8c:b2:ad:1d:0b:29:f8:50:b6:e0:54:fa:
af:72:b0:49:a5:4b:8a:71:52:b5:dd:c0:9c:99:fc:ec:73:0a:
31:89:9e:be:aa:a0:b2:54:94:a2:74:42:96:75:a9:de:e5:ed:
8c:22:bb:bb:7d:6c:79:fd:59:ac:c1:af:91:e0:ec:99:6c:c3:
3b:e6:7b:0b:03:90:0d:54:94:c2:f3:01:66:c9:6b:7f:c8:af:
4c:71:93:1c:bd:e2:53:bc:63:fd:c6:b7:90:20:24:a3:76:83:
16:fc:8e:ce:e7:dc:87:ce:eb:8b:7d:76:35:64:ed:a5:25:30:
b8:c2:31:3d:7f:77:1b:e2:f7:29:88:fa:6a:a7:37:5f:e4:57:
61:49:3b:5c:44:28:1a:25:40:a1:f2:e4:bf:2e:46:15:bc:fd:
0a:be:f1:6c:a9:bf:d0:ed:1d:ea:86:9e:d5:74:fb:14:9d:d7:
88:6c:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:32:31 2026 by rpki-client