Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
File: kcvU3ulACZF4SiL7T0Kypy5eMPI.mft (raw, json)
Hash identifier: g2UcYEs1Lmgfbloh3WOcvkPlLsCdJSC82MKHhoQX0Yg=
Subject key identifier: 91:EA:EB:2C:2C:9E:0A:92:25:5B:85:78:00:01:8D:EB:06:8C:21:71
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 019F85D5E23355CA44128CEEF4D8755AEC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:14 +0000
Manifest this update: Tue 21 Jul 2026 18:00:14 +0000
Manifest next update: Wed 22 Jul 2026 18:00:14 +0000
Files and hashes: 1: dfMJsRYPaWYegojrV6JhI297OJk.roa (hash: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=)
2: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (hash: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=)
3: kcvU3ulACZF4SiL7T0Kypy5eMPI.crl (hash: v/kQJ6MD4D9tceorU6tR5ObzxPRNE0c8CXwhO5wgUQE=)
4: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (hash: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:e2:33:55:ca:44:12:8c:ee:f4:d8:75:5a:ec:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Jul 21 18:00:14 2026 GMT
Not After : Jul 22 18:00:14 2026 GMT
Subject: CN=91eaeb2c2c9e0a92255b857800018deb068c2171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:72:cb:21:15:a1:6d:8b:f0:1b:6b:6d:61:
dd:4b:c6:67:43:ec:42:7e:4d:09:8f:c7:4a:c7:aa:
2f:ca:cc:93:ae:d7:75:89:7c:9e:24:71:4d:7a:d9:
cb:86:ce:21:af:ee:eb:ca:50:f2:a3:d7:ca:89:43:
c4:58:1e:ed:20:0b:5e:c9:2d:6e:de:0e:d8:7a:4e:
18:1e:27:5e:e5:90:33:f7:4d:3e:11:31:f0:73:32:
73:a4:36:61:97:54:55:9a:1a:33:a4:19:0a:34:72:
d5:d3:b2:e0:74:bf:e1:ff:ce:2e:24:20:e5:47:3e:
e7:3a:be:91:6a:ba:d7:ef:04:46:5f:32:25:e1:64:
e9:7b:fd:09:05:e0:55:0f:c1:7d:ab:75:6a:36:9a:
2e:7a:c5:1e:ec:6b:54:ff:7f:e3:7b:e6:06:8e:07:
c7:bc:f6:00:13:38:a9:b0:cf:9a:a9:05:ae:fb:83:
2f:c1:66:c9:e1:a4:a6:12:38:15:9f:69:cf:28:9c:
d4:88:72:59:5b:7d:37:4f:28:92:ba:b2:d4:67:d9:
db:fb:5b:49:03:5b:b3:da:50:9a:c4:da:d5:50:5d:
92:c5:0f:dd:24:f4:50:7f:69:39:6f:f5:d5:aa:88:
4e:ee:f5:0c:0a:a0:d4:e4:14:b5:53:ab:52:b6:a9:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:EB:2C:2C:9E:0A:92:25:5B:85:78:00:01:8D:EB:06:8C:21:71
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:e2:83:40:e7:f1:56:a8:c1:43:27:0e:db:20:2f:ba:54:
2b:47:23:e1:8b:44:fe:14:ee:03:ff:98:9c:7c:55:97:f4:fb:
8f:38:09:fc:d3:da:0e:34:bd:72:52:e1:51:e0:e8:47:35:f8:
73:ed:6a:7d:e5:00:ba:b3:12:a2:08:05:07:fd:7e:06:0e:75:
56:11:b9:69:45:eb:75:31:f4:ab:bd:f9:ce:0f:82:9f:a1:c1:
1a:ba:11:9c:f9:12:f6:5a:bd:80:f0:94:72:78:79:bb:32:f1:
89:2a:13:73:0b:7f:06:42:ba:a4:e7:3c:20:e7:ba:90:eb:9e:
c5:c4:f0:08:45:6f:10:7d:3e:19:0e:89:0d:af:3a:4a:40:52:
0d:b0:9b:21:93:a1:75:16:d5:f2:fb:1f:ba:67:e3:d2:03:87:
18:6d:f8:59:4b:12:9f:d3:b7:0e:f4:d1:1d:b0:4a:5e:c4:b9:
bc:9a:d0:27:63:a8:d8:81:3c:c3:80:a8:28:2e:5a:9a:ad:e3:
df:c2:55:b3:78:09:d9:e0:31:4b:f9:db:64:f6:ce:ef:3e:11:
ff:17:b0:ab:5c:ee:ab:ce:36:9d:f8:c6:cc:aa:b6:41:28:50:
f2:20:c4:2c:eb:f7:d1:62:13:2d:fd:27:4d:f3:44:44:ff:9e:
91:6c:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client