Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: IVZpyJFveEoa9Hjg3b3JceAb88Ky23j8fQY0DBedXTc=
Subject key identifier: BB:6A:76:90:8F:2F:52:58:62:C0:C9:3B:E5:20:83:D6:A7:37:D4:1B
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019FA1164C4798D3227E26DDDF032F43F449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 1664
Signing time: Mon 27 Jul 2026 01:00:20 +0000
Manifest this update: Mon 27 Jul 2026 01:00:20 +0000
Manifest next update: Tue 28 Jul 2026 01:00:20 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: qqoovXWJPgJAovhRL9E4JmE+VyhY8MMNGAK+c08lYbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:4c:47:98:d3:22:7e:26:dd:df:03:2f:43:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Jul 27 01:00:20 2026 GMT
Not After : Jul 28 01:00:20 2026 GMT
Subject: CN=bb6a76908f2f525862c0c93be52083d6a737d41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:57:2d:3b:90:87:c9:f3:b6:ad:a1:4c:9d:
f7:62:8d:81:19:d1:a0:5f:2c:27:9d:c0:23:ad:57:
4b:54:00:aa:ae:15:11:c2:37:0c:df:ac:f5:0b:36:
8a:47:c9:d0:65:e8:22:53:50:15:25:64:7e:7b:af:
76:02:72:13:22:f6:97:ee:3e:e1:91:c7:74:21:ef:
00:2c:60:e4:bb:66:a3:0c:9d:47:7d:9e:29:66:9d:
99:f6:70:19:73:53:58:b7:e3:a0:8d:cc:83:40:6d:
b0:d7:56:8d:99:61:58:20:ac:b7:0e:69:6f:c5:fc:
3a:a4:c5:df:2c:aa:5c:fd:f7:00:7c:f4:3e:8c:da:
21:71:89:db:77:9a:cf:4d:97:f0:54:ea:96:b9:f1:
95:cf:29:33:92:5e:d7:c8:09:eb:0c:4e:db:66:07:
55:65:32:e8:f3:52:e8:02:7e:ee:82:06:d3:89:22:
32:fd:27:bb:bc:8e:3c:fd:77:16:4d:b1:8d:77:8a:
2d:ea:61:03:37:f1:c1:30:7f:ce:c5:85:06:4f:f8:
f4:11:73:1c:c6:c9:7d:66:17:89:f5:42:2c:79:86:
65:bc:a2:f6:d4:f6:bf:43:fb:a4:91:4e:eb:c0:19:
7d:76:a1:fa:fc:15:00:a5:d2:b3:44:d4:b3:98:63:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:76:90:8F:2F:52:58:62:C0:C9:3B:E5:20:83:D6:A7:37:D4:1B
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:eb:f4:d0:12:48:56:2c:1a:c2:bd:28:4c:ee:ba:cc:c7:0b:
bd:1c:c7:63:73:69:99:8b:03:49:b0:b8:cb:35:53:97:42:f9:
54:69:1c:07:63:a9:2a:7c:ce:ed:bf:0e:00:79:54:90:b2:41:
cd:66:1a:39:6b:4b:aa:8b:2b:cc:6b:52:38:f8:be:ca:b1:9e:
32:50:d3:69:32:48:0e:69:6b:18:98:40:b9:de:94:86:04:30:
ae:df:3b:0d:15:04:54:b7:c1:85:ed:ad:e0:53:8e:95:80:ee:
d7:e7:88:fc:d6:5a:85:ae:87:6d:15:45:77:da:6f:7f:cf:bb:
61:17:a0:fd:cf:da:5e:11:41:5c:b9:e3:3d:6a:b6:f1:2c:8f:
3e:cb:ad:ce:57:a7:d1:bd:40:e8:2f:51:2d:4d:92:fa:6d:98:
0d:5b:19:dd:fe:a5:41:ff:f2:af:fc:0d:60:9d:55:fd:eb:1d:
4e:b0:dc:0e:c6:fe:88:12:82:97:f1:6d:7e:df:ae:03:d1:3c:
5b:fb:05:51:83:94:02:5e:32:55:6e:99:90:70:d0:a2:2f:15:
5c:26:f9:10:20:85:a8:88:8c:cc:45:63:e0:a1:1c:6f:ab:09:
b5:c2:78:52:c8:58:b8:e3:28:f7:97:b7:63:56:ab:b4:6c:cc:
43:51:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:36:58 2026 by rpki-client