Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: dHM4bScT7H6fNi8W/mSMA6R9sqb/GD78fqw/s112c4o=
Subject key identifier: 0D:33:73:C7:14:4B:A1:9A:16:80:70:A7:8E:6F:93:4B:84:DD:C6:61
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 019F9F95D946495C6B3D2B826011D844A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 05DC
Signing time: Sun 26 Jul 2026 18:00:25 +0000
Manifest this update: Sun 26 Jul 2026 18:00:25 +0000
Manifest next update: Mon 27 Jul 2026 18:00:25 +0000
Files and hashes: 1: gujpeuXdKQltuUKd7nb7ecCwHu0.roa (hash: 2n9HbUvjLRQ1ByGXuU3L0Iu4zHU5gGJaPtEBGt//aPI=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: k6xSJ/HA9JpHmDo42rv1t9hUEp1jqSJTLwyf47xa/So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:d9:46:49:5c:6b:3d:2b:82:60:11:d8:44:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Jul 26 18:00:25 2026 GMT
Not After : Jul 27 18:00:25 2026 GMT
Subject: CN=0d3373c7144ba19a168070a78e6f934b84ddc661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:f3:e4:9a:c4:79:88:87:2c:34:bd:72:fb:
84:78:a6:90:e3:c2:2c:26:9c:bd:e0:89:86:95:bf:
31:d1:b2:83:e2:f1:cd:15:07:b4:d7:b7:3e:82:ce:
d7:f6:e5:b4:77:76:e4:c2:c7:ba:35:f2:93:bb:f7:
b3:b4:17:4c:ea:9b:0c:33:61:ed:49:1e:64:0a:90:
26:c6:ed:3f:51:23:e2:92:4e:d8:85:ef:05:0b:e2:
36:51:f3:8e:a6:46:48:01:95:92:60:6f:3a:ea:a5:
58:80:f5:f9:1b:1c:2a:1b:b5:74:f0:4d:d5:29:99:
ea:6f:a9:b6:af:29:0a:7b:8c:a6:1a:32:6c:ec:74:
36:c9:76:bc:10:df:c6:ab:67:03:99:f2:11:5d:39:
23:01:8a:ab:96:e3:2d:17:d3:3b:e2:8b:94:e6:39:
d0:fb:d7:69:73:7f:8d:3a:fd:1f:93:5b:16:54:33:
05:53:a4:03:3d:90:bc:c0:da:61:90:8e:c5:01:56:
46:b0:f6:01:e2:b8:15:8a:4f:09:4d:22:e9:0e:26:
d5:66:0b:8d:69:a3:4c:f6:2a:5e:74:03:71:ab:79:
97:f9:61:4a:02:9d:d7:68:fd:d7:85:35:e8:32:a5:
87:e6:8b:f7:21:94:94:9b:da:3d:54:bd:1d:80:f2:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:33:73:C7:14:4B:A1:9A:16:80:70:A7:8E:6F:93:4B:84:DD:C6:61
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:8c:cc:af:b0:61:42:89:50:2f:38:d3:f1:06:c8:1c:09:
34:05:47:b3:79:26:87:0a:a0:91:81:49:1c:43:f4:76:ec:04:
aa:a6:7c:fc:e9:a3:ca:7e:09:45:2e:5b:25:32:be:a8:b0:1a:
2d:c8:aa:ff:88:33:33:ba:2c:12:a4:c7:86:23:d7:21:a2:22:
23:44:f6:45:79:a0:6d:b5:a3:e6:69:c7:33:76:b0:6f:a3:04:
8e:d9:20:d1:0c:db:30:de:ca:a5:40:40:d8:a8:6f:cd:e6:43:
5c:aa:ff:15:e3:9e:19:f5:aa:53:5b:bf:fb:e6:8c:66:ae:bd:
15:f5:01:ee:16:e1:de:27:50:63:71:95:23:13:a1:77:38:64:
11:b4:c1:d8:94:be:29:b1:6e:5d:74:97:5d:3b:08:c2:2b:ad:
bc:0f:4c:97:ef:90:49:66:d9:48:d2:a2:df:98:32:6a:54:50:
99:f7:14:52:cb:c9:2b:16:4d:37:a6:d8:d0:dc:ee:63:04:ba:
21:db:50:7f:0a:35:60:c4:51:e0:25:93:93:00:2d:06:d1:15:
60:f1:e8:49:fb:db:a3:df:50:7d:59:6f:de:23:34:59:59:25:
88:06:da:45:70:db:a2:d6:dc:d2:f2:ab:17:8e:b8:aa:b0:ad:
c0:b0:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:40:38 2026 by rpki-client