
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: 7C3vCtX2YqegrUpldD1x7pUKRL348dQD64y0UiDqV7o=
Subject key identifier: E8:03:51:F4:69:C5:4D:D7:3B:D1:FF:A7:BB:64:7C:6D:7F:18:62:A8
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 019F98817C6B1985A2029E3847EA194AD617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 19CD
Signing time: Sat 25 Jul 2026 09:00:50 +0000
Manifest this update: Sat 25 Jul 2026 09:00:50 +0000
Manifest next update: Sun 26 Jul 2026 09:00:50 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: nymajaco11dibXMCYLP1NGpIfOKwaF1N5hDLmOb+JFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:81:7c:6b:19:85:a2:02:9e:38:47:ea:19:4a:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jul 25 09:00:50 2026 GMT
Not After : Jul 26 09:00:50 2026 GMT
Subject: CN=e80351f469c54dd73bd1ffa7bb647c6d7f1862a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:52:42:98:f5:1f:dc:21:9c:70:2b:e2:df:a2:
80:cc:ac:a3:e3:b8:e8:e2:e7:6e:d1:17:18:a4:28:
90:21:cf:15:5a:08:e3:eb:a1:c2:49:04:41:db:93:
36:c5:93:2d:da:41:e5:ef:a5:92:fb:41:42:9b:15:
ff:dc:f0:22:a7:e0:ae:c5:5b:f4:49:c4:a5:46:0e:
87:de:2f:4a:b8:93:43:a6:bb:07:5a:b2:e3:41:a6:
a2:bb:3d:b5:e5:a8:e4:30:06:07:b9:38:84:41:3d:
c0:3e:f8:91:15:9e:5e:54:48:b7:03:26:08:21:ae:
10:0f:e0:23:45:14:3a:6c:9a:c1:20:10:12:8c:c1:
0d:50:0f:69:17:d3:f7:dd:c0:b7:f5:ae:46:93:e4:
cd:2e:55:93:03:f7:f6:5d:ef:da:fb:2a:33:11:10:
8b:86:0b:7c:c2:85:b9:ea:ff:40:64:3b:8d:60:5c:
e1:3e:c4:f2:86:f1:1d:f4:d8:f1:f8:93:5e:7c:3f:
46:ff:bd:08:b6:4c:00:f0:91:7b:23:df:51:6b:a2:
96:10:6c:8d:f0:79:40:62:35:0f:8b:ae:79:fc:81:
b7:fd:57:67:dd:67:33:a5:69:79:8d:8f:41:78:23:
08:91:c3:11:7c:14:3e:8b:fd:cc:c5:29:09:7c:7f:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:51:F4:69:C5:4D:D7:3B:D1:FF:A7:BB:64:7C:6D:7F:18:62:A8
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d9:6f:97:d1:ed:33:af:c7:70:63:d6:b5:f1:b7:71:92:9b:
75:81:2a:13:3e:62:49:7e:e5:bb:c7:8e:b1:ff:90:63:db:bd:
61:1f:94:70:a7:25:3d:03:2d:b1:fa:c3:f0:11:06:d9:a8:fc:
48:38:c5:32:b3:7f:17:e2:fe:fd:dc:1e:a1:dd:f4:05:9b:9d:
85:79:d9:72:a5:76:31:94:18:e2:21:36:b6:c7:f4:4f:9f:20:
04:39:59:79:c5:3a:6d:32:8d:5b:40:a5:0c:f8:50:2d:51:1d:
df:cc:35:46:77:ba:a8:a0:7a:4a:1b:ab:fa:d2:f5:64:6e:bb:
60:a8:a3:36:db:f3:05:6c:2d:df:96:ee:ab:97:c8:f3:f6:da:
4a:87:de:66:94:ba:8a:a2:64:b5:a3:55:5c:4a:6c:bd:79:41:
a7:87:a9:2e:2d:52:16:24:ca:cb:2c:2b:2c:ae:37:b6:83:84:
c4:72:24:03:f2:ee:d5:52:70:f0:2f:01:d4:9e:de:7e:7a:73:
5d:95:38:b4:8c:67:66:1e:9a:ea:01:13:0a:2d:88:75:f4:cb:
d7:01:b6:29:40:6f:67:29:d4:77:3b:07:4c:fa:10:59:93:86:
88:cb:53:44:bb:91:b8:ad:19:9a:01:69:81:87:f0:86:b1:62:
9b:df:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 15:10:18 2026 by rpki-client