Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json)
Hash identifier: wrTW+uGkKwvbz3o0SrTZWJAqwDoljM5VCN4iDLxGh3Q=
Subject key identifier: 0B:1F:C2:91:4C:C1:9F:6D:23:0C:F5:81:32:3E:B5:A6:F4:93:C7:BB
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019FA4F304D6F64AD984C2A3227D548D68F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 19:00:17 +0000
Manifest this update: Mon 27 Jul 2026 19:00:17 +0000
Manifest next update: Tue 28 Jul 2026 19:00:17 +0000
Files and hashes: 1: ea-vywNHOW21DX1J0UWlRSQDW38.roa (hash: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=)
2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: Mn+Uj45uAJ8RcmHoqXGhtchYHc1juOvH/1u2IMVMRvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:f3:04:d6:f6:4a:d9:84:c2:a3:22:7d:54:8d:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jul 27 19:00:17 2026 GMT
Not After : Jul 28 19:00:17 2026 GMT
Subject: CN=0b1fc2914cc19f6d230cf581323eb5a6f493c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:4f:f9:f5:5a:08:ea:b0:f9:87:80:f8:98:
d4:36:97:3e:21:e7:0d:61:bc:2e:75:c4:14:ad:fe:
e9:a8:6b:49:a4:7d:b9:c5:97:56:56:01:06:05:c6:
2a:08:41:83:df:6c:b2:b5:fd:ab:29:37:7f:17:61:
44:85:b6:f1:d8:76:49:48:03:5f:d0:48:91:07:6d:
1a:39:9d:f1:0a:81:4b:5e:22:57:05:92:f5:15:77:
d8:4a:e6:a5:3c:62:e0:2a:6e:10:a4:47:f1:93:56:
ea:21:c6:3e:ba:13:b3:31:65:36:5a:ad:76:d9:ce:
ed:31:02:5d:9b:37:6f:d6:b8:86:db:6f:0c:a2:3a:
7e:c8:f2:c8:c8:37:9e:68:d7:16:6c:ba:8f:f9:61:
ff:f7:ce:69:24:dc:91:bb:71:e5:f3:2f:24:6f:5c:
12:36:cd:af:57:38:c6:6a:ed:5d:07:cb:d3:3f:9f:
58:93:a2:43:86:78:69:be:89:02:a0:60:03:a5:b0:
5b:a4:f8:53:97:f4:6a:44:25:6e:f2:54:b7:22:80:
e7:d7:c0:7b:d7:cf:02:4f:dd:df:fc:96:1f:8a:2b:
5c:9e:82:a3:e6:b5:65:4b:e9:8e:ac:84:e6:35:6e:
4b:18:67:25:41:13:10:da:63:16:bd:e8:76:9c:df:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:C2:91:4C:C1:9F:6D:23:0C:F5:81:32:3E:B5:A6:F4:93:C7:BB
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:80:3b:68:2e:0b:04:90:ce:3c:7c:d1:db:a3:25:37:6e:b6:
d5:be:31:fb:8a:e2:fa:87:b7:da:e2:73:5b:b7:64:a6:a2:2c:
ff:cd:8c:31:28:74:db:a7:b1:8c:6f:6e:e3:e9:f7:ba:10:73:
bf:cc:e4:44:b3:c5:3c:23:0e:5f:ab:5f:67:25:ab:f7:85:9a:
d3:ed:5a:ab:8c:c6:f3:d0:a3:91:a7:9a:18:a8:d1:f0:90:60:
46:d0:de:ef:79:1d:2b:8e:f0:43:48:cd:68:64:27:ff:08:d9:
91:78:ce:14:15:a6:35:b9:08:52:37:69:06:84:59:3b:fa:59:
df:1e:a9:aa:7c:f2:4d:2e:99:0f:75:31:72:7c:36:98:d5:04:
b5:b0:0b:e2:e2:9d:ff:53:17:5e:91:40:c0:85:73:31:d1:a6:
3a:2e:6e:ea:3e:7b:86:11:94:35:a0:5c:c0:75:0e:78:32:1f:
67:b7:4a:69:dd:05:24:58:5f:3d:da:17:b0:65:9c:e5:16:8b:
ba:56:33:63:da:13:77:fd:ae:75:2a:04:b7:3a:96:e8:73:c9:
90:10:ae:f2:c5:86:de:68:2d:2e:57:12:be:1e:7f:ef:92:fc:
5b:36:64:f4:62:f4:2f:99:01:0e:08:67:22:20:e2:6d:0b:d6:
57:a9:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:02:54 2026 by rpki-client