Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: kCp5TRGRF5Bp6Uw1Zc0EBX9nfDgAdgxU8dAbJGH0D6o=
Subject key identifier: 0D:2D:E0:2B:D4:3C:F9:E6:8A:A0:A2:8E:54:FD:CB:91:17:20:A2:30
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019FA2295469AA88C7359B0F128D5B73DD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 06:00:45 +0000
Manifest this update: Mon 27 Jul 2026 06:00:45 +0000
Manifest next update: Tue 28 Jul 2026 06:00:45 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: z5go1tatKX98rcWkAAk43GM56Hgv094KyLMdAiF9czU=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:54:69:aa:88:c7:35:9b:0f:12:8d:5b:73:dd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Jul 27 06:00:45 2026 GMT
Not After : Jul 28 06:00:45 2026 GMT
Subject: CN=0d2de02bd43cf9e68aa0a28e54fdcb911720a230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:45:0c:8f:cc:c2:cd:32:b1:66:3e:0e:b3:
b3:8d:e9:59:a1:86:84:fa:9f:fc:b2:98:cb:16:a2:
87:bc:10:d7:eb:a4:d3:69:4e:ae:11:51:b6:cc:5d:
22:6c:a2:bb:d4:94:ad:b3:56:f4:3f:44:f9:c7:03:
c8:e7:e2:25:e8:83:8f:7a:fd:e9:8e:bb:a0:13:2b:
30:e5:10:7a:3b:2e:31:40:4b:6b:9f:33:a0:9e:7a:
32:eb:0b:3a:8c:ed:bc:87:10:d3:89:b3:e6:f5:e7:
37:ac:eb:51:ee:85:14:01:21:c3:81:da:b2:6f:06:
b5:34:74:a2:3d:12:b4:86:30:9d:09:7e:25:9f:27:
12:59:2f:2f:24:42:01:80:e8:d2:93:b5:e4:22:63:
45:04:67:6c:7d:8b:74:a9:98:88:fa:05:24:58:4b:
ff:a8:5f:9a:e7:ef:10:df:7e:ec:5b:6c:3d:dc:5c:
e2:f4:fa:52:0d:9b:90:dd:7b:85:9e:36:5c:aa:a9:
7d:9c:e8:a7:75:40:07:25:f7:90:6a:7f:4d:d3:eb:
a9:2b:6e:b1:63:bd:44:1d:fd:ad:b1:d0:d0:48:09:
0b:dc:99:3c:86:61:a1:8a:08:e9:69:60:2d:0a:d3:
55:c5:48:69:f0:87:4a:23:d9:c7:de:7a:1f:2b:2e:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:E0:2B:D4:3C:F9:E6:8A:A0:A2:8E:54:FD:CB:91:17:20:A2:30
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bf:6f:a0:33:57:1a:40:5d:8c:bc:73:ce:a3:99:67:94:1f:
02:c0:cd:6c:fc:f5:e1:9f:b0:38:30:ad:86:bd:d5:0c:93:fb:
1d:a1:b1:68:27:3f:65:72:a6:d8:ea:ad:89:95:b5:b3:0a:9f:
93:b0:85:78:0f:4c:03:6c:91:25:b0:39:28:4f:06:85:43:1e:
9f:c5:1d:28:46:3a:85:7d:eb:85:a6:11:fb:6e:27:f1:fc:e2:
4e:fe:d2:d0:40:bc:44:0e:a2:65:06:4f:a1:dc:30:52:d5:86:
d0:39:49:7c:23:f0:9e:ef:50:9f:93:c0:ab:dc:c4:0b:84:06:
59:60:2c:a7:25:f6:2b:c4:0b:ba:b2:ab:1e:9f:85:6d:74:d5:
5e:90:fe:c0:17:c9:01:9a:41:1d:d4:21:9c:ca:2b:10:73:6e:
71:98:10:18:8d:a1:a8:3c:53:9b:97:75:c3:6e:d4:da:b8:c1:
71:7d:96:56:c7:59:33:fa:4b:dc:da:43:a6:30:42:8c:20:8b:
f8:4e:9f:f8:99:19:41:6a:bd:64:b7:d5:21:ff:d6:c7:80:bf:
c8:5f:ef:d7:96:1e:94:75:7c:7a:3e:c9:2e:11:cb:c1:d8:2b:
cd:16:85:5d:87:73:b4:41:da:3e:d0:2c:76:9e:c1:73:6d:c7:
79:d1:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:08:21 2026 by rpki-client