Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
File: _kTUEsldodkpQxr8aSuUnlnZcFc.mft (raw, json)
Hash identifier: 8bqDftynNdKI/OhNv9SfsRPjWH0d8Z4q69E3+65ODNY=
Subject key identifier: 9A:74:4F:2B:73:9B:2D:2A:AD:63:38:C1:6B:59:DD:8A:43:A3:F5:5B
Authority key identifier: FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
Certificate issuer: /CN=fe44d412c95da1d929431afc692b949e59d97057
Certificate serial: 019FA2970C40D8F89677E944ACEDE2085C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
Manifest number: 72
Signing time: Mon 27 Jul 2026 08:00:35 +0000
Manifest this update: Mon 27 Jul 2026 08:00:35 +0000
Manifest next update: Tue 28 Jul 2026 08:00:35 +0000
Files and hashes: 1: TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa (hash: D3hZNlRBwUcocdYaP+buhwXKanIL4lhbGESYtXOauJE=)
2: _kTUEsldodkpQxr8aSuUnlnZcFc.crl (hash: AuMkC+Ko5JzG15twk0UEf4deNiVhsKy2Lyvk4DKR9QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:0c:40:d8:f8:96:77:e9:44:ac:ed:e2:08:5c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe44d412c95da1d929431afc692b949e59d97057
Validity
Not Before: Jul 27 08:00:35 2026 GMT
Not After : Jul 28 08:00:35 2026 GMT
Subject: CN=9a744f2b739b2d2aad6338c16b59dd8a43a3f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:dc:d7:ea:3f:3b:9a:4e:13:ac:bd:fb:d7:
b1:8a:4f:62:c4:aa:b4:9a:71:87:87:79:79:96:9f:
cf:3d:de:5d:c0:5d:dd:7b:92:15:e9:e4:9f:f9:ea:
fe:e1:3d:81:91:e2:8f:61:77:cc:fc:ba:07:89:cf:
1a:20:84:0d:35:66:85:d5:70:f3:f3:ff:b9:29:4c:
4e:df:df:a6:8c:63:8e:fc:54:ba:f9:38:4a:10:1c:
27:0f:42:80:e6:41:f0:ec:b1:4c:b4:32:1e:22:c6:
4e:46:b6:dc:e2:c2:62:1a:39:4a:9e:83:76:e2:64:
e8:ed:c0:4d:51:8e:75:de:eb:21:a3:ea:cf:03:ed:
c3:4f:ff:68:bc:47:e7:3f:e5:bd:5c:ec:ac:c1:4b:
d8:59:62:12:97:e5:63:35:80:2f:2c:84:96:36:51:
7e:45:fa:76:96:8b:ad:fa:f8:aa:f8:21:5e:66:86:
3d:be:41:ed:80:d8:1f:8d:b1:39:0f:93:c4:ee:fe:
b7:0c:d2:6a:7d:34:48:b5:a9:4d:ac:37:15:c3:6b:
96:f5:0c:a7:a1:d2:69:03:00:df:4a:c7:fd:e0:2c:
44:32:c3:d9:c7:8c:09:60:b6:14:3d:6c:c4:57:28:
7e:f7:9d:d7:ff:5a:a7:bd:43:b2:f5:72:7e:3c:24:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:4F:2B:73:9B:2D:2A:AD:63:38:C1:6B:59:DD:8A:43:A3:F5:5B
X509v3 Authority Key Identifier:
keyid:FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e3:df:84:96:a3:0f:69:49:8a:9b:dc:ec:57:07:41:c4:3e:
ad:47:c1:18:8a:67:b3:4d:89:55:45:1e:e0:15:15:97:ca:dd:
ed:fc:fc:84:90:fc:6c:39:fd:88:f3:ed:cc:d0:54:b1:e9:30:
23:8b:e3:dd:8b:de:26:ac:1f:b9:c0:b9:85:75:0d:e5:3f:24:
7d:35:fd:21:27:e8:06:6b:b1:ac:11:ac:ba:f7:d5:03:fa:43:
41:ca:75:45:62:62:31:6b:0b:56:42:ab:3d:e9:24:ce:f0:a4:
e7:da:92:13:d9:c8:3b:ff:ba:6e:b2:81:8e:0c:3d:69:ca:5e:
1e:c5:de:b0:50:4a:b6:93:75:1d:e4:d2:95:35:99:9f:bf:7a:
60:92:ff:72:b4:aa:8b:a8:33:e2:23:76:99:f4:32:7b:07:ac:
70:a4:44:5a:7a:78:50:6b:51:47:6d:95:81:f4:4a:3d:fc:fa:
51:78:14:21:b1:65:4d:7c:76:57:b4:4a:82:8e:5b:67:f0:3f:
26:3c:20:e8:36:88:bd:6f:e9:5b:27:c2:7d:65:e0:31:03:7a:
2b:6d:02:93:67:e3:bd:36:8d:21:9f:6a:13:67:26:bc:f4:e1:
99:8a:ee:1a:d1:49:15:8d:f0:20:7a:f5:61:e3:37:0e:9e:82:
73:52:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:15:16 2026 by rpki-client