Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: SLrqSAJhWXH/pIVm0V4dwzzpevIJVPVCtuyuxZ1dT7A=
Subject key identifier: D0:C1:F8:11:34:0D:31:5A:99:53:9E:E3:45:6A:05:E5:69:F6:48:4E
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019FA0DFEF723241C891248486A1CF15D830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1592
Signing time: Mon 27 Jul 2026 00:00:58 +0000
Manifest this update: Mon 27 Jul 2026 00:00:58 +0000
Manifest next update: Tue 28 Jul 2026 00:00:58 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: FEB7Txj5aPUQXxQmD3CgygON+xa3K8MnQkVuBZ1fuXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:ef:72:32:41:c8:91:24:84:86:a1:cf:15:d8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jul 27 00:00:58 2026 GMT
Not After : Jul 28 00:00:58 2026 GMT
Subject: CN=d0c1f811340d315a99539ee3456a05e569f6484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:e2:1f:f8:b1:a2:1a:83:2c:0b:c6:d8:9d:
e0:c3:30:64:bd:26:72:2e:db:08:bd:d0:2d:ef:50:
c1:ee:4e:15:a9:76:96:9e:e5:dd:1a:e2:11:3b:c3:
d7:c1:bc:f4:bb:c0:f4:1b:80:57:90:dd:bc:79:53:
f3:58:2b:72:93:b7:46:48:d9:37:ec:5f:74:86:7b:
a4:1e:45:49:4f:21:7f:25:69:24:e0:5a:3f:86:aa:
91:16:d9:6b:8d:64:94:d2:f6:fa:b8:41:07:50:ab:
ba:0f:cc:45:aa:ed:6d:1f:e5:53:6b:70:d3:0e:ac:
70:de:a8:93:03:1b:84:a7:a6:f3:0c:ca:e8:eb:e0:
81:7d:14:af:78:2a:c4:43:7f:b8:90:aa:58:9f:38:
7a:eb:c5:1e:ed:cb:5c:80:0e:6c:73:26:49:7c:5e:
75:99:b4:80:9f:8e:03:e2:79:33:5c:87:26:17:77:
7d:a6:6b:fd:d4:3e:8c:2c:ca:7e:4c:36:ed:c3:bb:
54:b7:fa:ff:a4:47:ba:b8:e8:35:fd:69:e9:fc:a8:
94:22:b2:b6:dd:5e:43:2e:d9:e8:08:64:2d:54:70:
91:2e:f0:08:fc:da:17:61:1b:b7:52:9f:04:35:c2:
bb:7e:68:4c:80:e2:af:1f:b2:50:4c:7f:72:8a:0c:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:F8:11:34:0D:31:5A:99:53:9E:E3:45:6A:05:E5:69:F6:48:4E
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:2e:c1:1f:52:4b:b5:a0:e4:69:c9:ff:e7:3b:63:8e:a3:
6d:bb:22:4c:e0:ec:95:74:fa:85:d0:37:23:24:9f:e4:84:c9:
83:f3:bd:0c:39:b7:80:33:3f:ca:53:23:ec:24:f9:fb:f0:87:
70:f2:8b:ec:58:a5:34:bc:b4:84:48:8c:a5:17:c3:ed:e9:04:
5b:52:0a:6b:e1:91:52:c4:26:b4:93:55:2c:91:74:3c:27:a8:
87:e2:44:fb:25:0a:0f:7e:ac:b6:7d:b7:8f:43:da:82:3d:af:
9a:9e:6b:14:bc:4d:cd:2f:94:8c:e4:2b:55:70:9c:fe:1e:19:
50:5e:b4:be:6a:a8:75:18:48:6f:9c:a9:cb:6c:00:cd:90:7b:
e9:e9:ee:e6:9f:30:cc:e8:01:bf:36:34:ea:9a:4a:10:3b:01:
9e:2a:52:aa:74:3a:49:b5:d4:71:2c:be:a8:d7:14:f1:94:0f:
0d:f7:fd:84:75:ee:e7:33:4b:f4:ff:66:4a:d8:9c:f7:a5:d8:
95:2c:aa:67:bd:60:3f:21:98:f9:c9:14:ea:e7:39:bc:d9:6c:
be:ea:4f:23:64:ce:12:cc:59:58:00:55:8c:51:21:89:76:6d:
90:a6:43:2b:13:2c:56:66:40:ac:63:fd:14:24:68:d6:5c:45:
be:e7:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:14:10 2026 by rpki-client