Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
File: k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json)
Hash identifier: P2zZhmQTIKrYitG4TS47YQCbU5gVmG2kba5D4Xt7evg=
Subject key identifier: AB:25:8F:5F:FB:DC:21:96:01:69:91:32:21:47:B2:33:34:6F:80:C1
Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
Certificate issuer: /CN=934449923648062d79433dc86d32efe42cacb3db
Certificate serial: 019FA25FFB72C3D2F08CF6942832725CD398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 07:00:27 +0000
Manifest this update: Mon 27 Jul 2026 07:00:27 +0000
Manifest next update: Tue 28 Jul 2026 07:00:27 +0000
Files and hashes: 1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: eSpIJ1VV9sAaS/vXuM5+9yoIaeIRVPdi6JLSnhdA2Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:fb:72:c3:d2:f0:8c:f6:94:28:32:72:5c:d3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934449923648062d79433dc86d32efe42cacb3db
Validity
Not Before: Jul 27 07:00:27 2026 GMT
Not After : Jul 28 07:00:27 2026 GMT
Subject: CN=ab258f5ffbdc2196016991322147b233346f80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:40:ad:f7:92:46:67:71:52:60:08:9d:1e:
08:f6:f1:87:36:00:c8:c3:03:5f:16:1b:83:5a:8a:
8d:c4:43:0e:d3:b2:4f:90:e5:c8:67:9f:be:ea:c0:
68:87:ec:6f:6b:5e:b1:a3:7e:0e:84:1c:44:f8:37:
a4:ed:2e:af:4e:36:95:d2:e2:b0:7e:8d:a3:ad:65:
bd:8f:87:7c:f9:d0:e1:0c:b6:44:a6:39:6c:f8:66:
02:4c:89:7d:71:41:10:c1:3f:ee:ef:6f:86:90:b3:
03:56:97:3c:bc:d1:54:41:d1:2a:d5:9e:ca:70:0e:
93:fe:63:18:95:a2:14:a8:9f:5f:c0:46:a7:da:58:
5f:62:c4:6b:9d:a8:bd:80:8f:a5:63:b0:ef:d3:2d:
a6:dc:96:cb:2e:65:18:55:a7:49:d6:23:c9:5d:b7:
6a:43:0f:77:b5:b5:4e:98:17:3a:26:1b:91:0f:e4:
d4:22:05:43:d6:36:5e:70:4e:2d:da:d2:24:b1:c7:
66:38:2d:76:c8:7a:ce:b2:5e:79:86:94:b5:ec:5f:
e0:cd:ec:5c:91:7d:9d:2f:9d:b2:f0:52:79:3f:00:
e9:9f:66:69:11:25:e9:54:31:b4:61:95:e3:63:9b:
5f:8c:d0:f1:30:23:8b:4f:bb:fd:b3:5a:33:c4:b0:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:8F:5F:FB:DC:21:96:01:69:91:32:21:47:B2:33:34:6F:80:C1
X509v3 Authority Key Identifier:
keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:d9:66:5e:4a:47:7a:73:7b:e0:a3:2d:17:d3:97:68:7f:
49:95:46:e1:ce:0b:de:6f:11:53:cc:11:db:30:f0:9f:51:96:
d5:86:6f:89:af:6b:12:c3:15:dd:b6:7d:a4:31:22:15:52:f8:
89:9a:8f:52:0e:c5:7e:23:bd:3b:25:c5:b8:34:4a:b5:7e:ce:
12:eb:72:22:17:41:bf:2d:42:ef:6b:a9:f7:c8:f5:2e:39:fb:
37:a7:5f:df:62:f0:c6:56:5f:65:0a:7b:aa:60:a1:d5:1e:5a:
08:34:7c:ac:a0:7e:a1:a9:76:15:df:9c:ce:d6:0a:f2:00:33:
2a:d5:79:5e:c5:11:f8:65:f9:31:89:91:15:6d:38:73:6d:2c:
5d:fe:e8:8c:93:1c:25:42:9e:e3:b0:3a:6c:d3:88:9a:47:35:
d7:73:39:b5:2c:62:f8:3a:f2:5b:41:a2:0c:d5:b8:c4:b5:02:
51:71:24:23:e7:3a:19:48:07:9a:b2:0e:6b:b5:5d:f5:d5:0f:
90:a4:09:46:fb:26:e8:cd:59:ee:67:9a:c6:13:bb:74:29:33:
e9:ab:a2:f0:00:5c:fa:df:09:c1:72:e3:47:3e:ed:b7:83:ce:
2f:2a:c8:f4:d6:ab:e1:55:de:ab:63:bf:d0:8e:1f:e6:a4:14:
dd:4f:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:08 2026 by rpki-client