Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: zG8y4ZBEZIiN6Pa+Caru/LAB8PsGO0421zGosU3UMhQ=
Subject key identifier: 19:01:D1:51:30:66:CF:E9:E5:B3:82:96:5B:FF:33:FB:4E:E6:B6:51
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 019F9FCD860A57B7CA2BC93BA94729CCA593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 19:01:14 +0000
Manifest this update: Sun 26 Jul 2026 19:01:14 +0000
Manifest next update: Mon 27 Jul 2026 19:01:14 +0000
Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: ryhGf8LZujTdzDlXezwocemLL4FuT5Eba/i3iVGTaw8=)
2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:86:0a:57:b7:ca:2b:c9:3b:a9:47:29:cc:a5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jul 26 19:01:14 2026 GMT
Not After : Jul 27 19:01:14 2026 GMT
Subject: CN=1901d1513066cfe9e5b382965bff33fb4ee6b651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:80:e5:0f:ef:f9:2c:82:27:99:06:6f:be:
0f:76:19:d5:ef:fc:65:84:f8:cd:6e:90:a3:b9:68:
ed:dd:3d:97:2e:7c:bd:62:24:02:75:24:74:c6:53:
a1:1a:91:1e:96:7f:73:eb:4e:1c:3b:df:0b:55:8d:
fe:5e:c9:bd:06:1e:4b:5f:5f:19:5d:7e:b7:1e:37:
ea:55:30:32:93:03:d0:6d:8c:af:2c:fc:db:20:65:
8f:c1:e1:b8:a2:c1:68:3f:e4:eb:03:fc:41:7e:28:
58:6a:1c:ed:ee:7b:78:19:5d:d9:64:c3:fc:88:d1:
c8:4a:5a:1b:9d:87:fa:f6:a8:f6:a4:c7:c1:9c:8f:
34:76:63:4f:d3:21:e1:f5:29:e3:b5:18:1a:0b:87:
41:6d:06:6e:a7:d5:84:6e:3f:26:0c:96:98:7b:8c:
24:f4:aa:5f:b6:22:a7:fb:f8:59:a6:93:92:db:cf:
cc:5e:13:36:a4:4d:df:47:ca:9e:63:88:87:95:ab:
4d:59:ca:96:d8:e6:35:d7:b4:b1:82:80:a6:01:a6:
92:30:2e:70:1b:ea:17:0d:fa:2a:3d:c8:2d:14:80:
5c:11:03:9d:14:5b:2c:a6:6d:f7:57:ff:e3:5a:8f:
2c:87:71:9e:03:74:73:13:a1:be:7c:32:14:7c:97:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:D1:51:30:66:CF:E9:E5:B3:82:96:5B:FF:33:FB:4E:E6:B6:51
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5c:52:08:8a:ab:fa:45:a9:dd:05:b0:40:17:90:4d:45:11:
88:5e:0a:00:27:f7:75:41:d1:21:c9:ad:08:88:c9:25:d8:78:
89:ca:3c:c9:7e:95:e8:9a:4a:0f:dd:62:47:10:95:ae:26:3b:
5f:4b:6d:50:29:f5:9f:5b:89:b7:d4:66:89:38:6a:38:a9:ea:
9d:c5:64:1d:f1:7a:3c:3e:45:72:69:7d:6a:58:41:8a:1a:63:
68:48:c5:8a:14:97:4d:af:58:52:e5:5e:fd:79:8e:fa:25:ad:
0b:3d:9a:68:24:e8:5f:ff:b5:5c:86:e0:60:fa:e5:cf:bf:46:
d2:4f:1b:92:27:97:2c:f1:16:11:74:fd:2e:5b:4f:0d:26:cc:
e3:21:66:37:c9:f0:25:29:38:a9:d5:30:72:3e:90:c4:7c:8f:
ac:c5:cc:62:ad:62:81:af:d8:39:c9:a6:d4:8c:cf:f9:c7:d6:
5a:96:6d:a1:01:4b:c8:03:6c:82:49:b3:e9:31:09:33:91:09:
4e:48:4c:17:42:ea:8e:74:e4:64:2f:cf:30:15:a6:23:c8:af:
23:94:23:cb:a4:a8:72:2b:97:86:1e:1f:87:57:96:4f:a3:d6:
b8:db:16:b0:48:b0:1f:bd:87:24:19:2b:d7:2c:b1:10:d5:1d:
b1:38:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:59 2026 by rpki-client