Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: 8V4u0K9Olh2NtUMglLuB35qsxgcucc8g2TFnnxSmHfQ=
Subject key identifier: A3:21:32:84:5F:84:DE:C7:E4:60:8D:A8:AD:DB:69:7E:EC:1B:BA:E9
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019F9E4C9A8AA25EB477F05AE713BA19B236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 10A4
Signing time: Sun 26 Jul 2026 12:00:47 +0000
Manifest this update: Sun 26 Jul 2026 12:00:47 +0000
Manifest next update: Mon 27 Jul 2026 12:00:47 +0000
Files and hashes: 1: YthcC5vfZaqX4lQHCzfAkYHmBn8.roa (hash: e1Wa1MDzLGWDE0S3sqNrMKZLPwUzO14S8dedZF4Jkxs=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: RI1FBKLrkeim+BPbeiCSZCra3Nky8Jfd4Xj36myx7qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:9a:8a:a2:5e:b4:77:f0:5a:e7:13:ba:19:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jul 26 12:00:47 2026 GMT
Not After : Jul 27 12:00:47 2026 GMT
Subject: CN=a32132845f84dec7e4608da8addb697eec1bbae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:ce:cd:fb:04:9b:2d:ff:1f:5f:b4:a0:32:
c5:da:5c:f7:b6:26:b1:c4:47:65:70:20:99:87:e0:
ba:8c:e2:22:e4:68:09:d8:e3:3b:9a:b2:fb:e7:cb:
8c:b7:e5:db:1c:27:80:51:16:22:f3:0b:c7:46:aa:
a5:74:fd:f4:4e:ba:c9:8e:93:36:d1:83:81:02:33:
6b:e6:46:c6:56:15:da:67:04:25:9c:ec:da:3e:b7:
a4:7e:1a:79:dd:98:d0:bb:d7:a8:f8:0b:55:19:d4:
ed:42:74:04:26:2c:5b:c1:05:80:9d:50:84:b9:d5:
8f:ef:24:74:3f:ff:7b:cc:7d:f6:56:f2:ed:9b:cb:
6a:42:f4:e6:b5:f1:d1:bc:89:71:ee:99:bc:8f:37:
af:6d:d8:30:a4:23:6c:8a:fd:ac:db:0f:20:7d:eb:
b1:dc:a6:c9:86:05:5c:ee:99:27:73:73:c5:03:11:
03:fb:96:2d:de:12:b4:1e:5b:5b:ce:b4:66:86:9d:
f1:c7:43:60:91:01:bc:4b:9a:f5:a6:ea:17:ec:21:
63:9a:61:41:a3:aa:c6:d7:33:88:2a:a2:6e:98:75:
d4:2e:70:16:a2:9f:31:ca:8c:0c:3a:ca:7f:05:7c:
43:2b:b0:33:c8:00:f3:d0:8f:be:35:87:30:41:cb:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:21:32:84:5F:84:DE:C7:E4:60:8D:A8:AD:DB:69:7E:EC:1B:BA:E9
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:55:c8:fa:ea:97:d1:14:bb:54:0e:1e:e9:fe:5d:e5:55:e4:
f9:84:b2:10:31:40:e1:7d:44:9e:83:32:d1:6c:96:af:5e:81:
a3:46:54:c6:eb:d5:b1:9d:14:ba:87:9f:fb:92:71:c5:e3:d5:
72:bf:a4:d0:f8:16:d9:6c:6e:6c:08:cc:be:1d:4c:3a:1c:96:
0d:00:22:bc:d2:b1:99:58:ff:73:d8:10:ef:57:10:3f:14:76:
a2:67:78:0d:db:55:8f:dc:cd:e0:6f:19:cb:8a:8e:08:11:7c:
35:87:7b:35:fe:60:9e:5d:d3:f8:ab:34:ec:f0:47:8c:6d:35:
94:5d:bb:54:34:f0:f3:ee:cf:f8:24:5c:14:61:04:b3:cd:a6:
a1:b1:9d:00:f7:9e:7a:9f:b8:81:a5:ad:04:aa:64:35:2b:61:
9e:c9:07:fa:51:62:de:ed:47:b7:e1:71:54:f3:d5:ce:2e:87:
5d:bb:f2:e5:ac:37:b9:4f:64:cf:96:cb:3f:03:50:7b:f7:03:
fb:17:ef:a1:44:32:b9:4c:a5:66:4a:42:58:cb:18:34:3c:8d:
93:e3:95:03:ea:ba:5c:fe:24:82:47:09:09:ea:bc:34:a9:99:
ad:5a:a9:96:85:c9:5a:af:84:1c:69:69:c8:b7:cf:34:38:15:
c7:89:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:24:55 2026 by rpki-client