Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: ZFSMocrNIZ0xSDGtxcCtpDfzjLxSSpzkZVqO2/eo2OQ=
Subject key identifier: 6A:31:7A:75:A7:8F:A9:22:7D:B7:07:50:5D:43:5B:BF:99:48:F1:B3
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019FA297496566A80629BC553873DA6236E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0D7D
Signing time: Mon 27 Jul 2026 08:00:51 +0000
Manifest this update: Mon 27 Jul 2026 08:00:51 +0000
Manifest next update: Tue 28 Jul 2026 08:00:51 +0000
Files and hashes: 1: 61jEoPY3BUG6j9cu_lF8RKNi7JI.roa (hash: 4WzEHJ+ROSfn7ovwc2eGPGUGeBlvLhI0622lMwFDYa0=)
2: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: kw4jYHJZcFgiPAhIPmkBtASHjBCKSDq5iqOI+6TIOfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:49:65:66:a8:06:29:bc:55:38:73:da:62:36:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jul 27 08:00:51 2026 GMT
Not After : Jul 28 08:00:51 2026 GMT
Subject: CN=6a317a75a78fa9227db707505d435bbf9948f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:79:90:e1:43:30:90:05:84:22:3c:9b:e0:
45:ec:c9:bf:5f:79:b3:2f:a9:78:ea:b0:a8:ab:37:
d2:14:62:8a:1a:a7:0b:a7:50:cb:34:b7:16:3a:fc:
91:30:2e:ae:f5:06:1d:16:3a:7f:94:c9:16:e1:31:
1b:39:cc:e3:76:57:69:ac:f4:d6:a0:4a:62:a6:a0:
b2:32:2f:e7:83:0b:69:6f:8f:f6:e3:16:45:95:58:
cf:8d:31:74:e2:eb:8f:46:ef:56:5b:d4:64:68:7c:
96:4e:db:06:fa:26:89:63:37:46:9c:c6:13:d6:44:
63:a3:c3:ff:06:85:13:c6:6c:f3:2d:a8:76:81:f7:
a8:ce:5d:a8:ec:4f:66:e8:4c:44:2d:d5:bd:87:94:
57:dc:cb:9a:93:96:09:91:10:ae:bc:83:27:cf:50:
6d:1c:b8:d4:61:eb:3d:38:5d:d6:93:18:89:0a:52:
72:26:48:c2:25:90:2d:ee:6b:92:93:02:2e:a5:c2:
aa:cc:8a:7c:55:b3:67:df:c5:35:e0:ae:ea:12:2d:
37:d9:81:eb:17:91:83:0e:17:69:4f:da:a3:07:e4:
b4:db:9e:07:34:4d:6e:b7:ab:2a:54:3c:a9:d5:3e:
b8:32:d4:9c:0b:1c:9c:d9:b1:e4:c6:4b:c0:ff:9e:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:7A:75:A7:8F:A9:22:7D:B7:07:50:5D:43:5B:BF:99:48:F1:B3
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:72:d8:9e:3b:6b:36:2d:64:5c:63:1e:2b:7b:b5:f4:e6:50:
75:f9:6f:bc:db:b4:23:6a:80:90:fd:a2:7d:e2:c7:ba:a4:9e:
de:04:e5:16:bf:b1:70:9b:a5:75:ba:5b:9d:5f:f8:82:8b:14:
16:84:d5:cb:f2:a3:b5:9d:40:c3:18:3c:68:26:08:a4:db:a4:
44:cb:6b:31:a0:db:34:23:c9:83:71:b8:fc:3f:29:cf:5b:05:
52:42:58:4c:12:85:7e:2b:79:4c:b6:4e:b1:91:9c:18:0a:55:
08:ff:c0:b6:e3:dc:58:a7:a7:cc:ea:ad:fe:02:ed:e2:fe:d1:
fe:d2:97:75:14:cb:24:42:05:b2:0c:cf:07:0b:de:c9:8a:69:
ff:5e:db:c3:ca:95:e2:f1:98:63:42:08:59:8a:c0:e0:72:05:
bd:a0:bc:54:14:6c:d9:91:f6:4d:d5:14:c3:e7:e7:9c:56:e0:
93:93:cf:c7:78:3f:e4:a6:21:c9:57:12:e8:60:c5:a5:39:3e:
66:d1:48:e4:9d:fa:d3:4e:87:5d:d3:ef:1f:47:6f:8f:52:74:
97:57:e6:94:00:05:dd:2e:14:50:c8:aa:94:a5:07:16:b6:35:
c2:32:61:91:19:dd:fa:ed:7f:40:38:de:83:00:29:03:2b:0e:
ca:82:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:13:26 2026 by rpki-client