Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: H8rhnQSw977iATH44Se42Dk+i3qwiHuov96Hg2TgILQ=
Subject key identifier: C7:A4:2D:BB:11:23:F5:00:F2:05:2A:58:0C:68:D4:B8:89:F2:CB:0C
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019F31F0D37E95FF36AB8CDD2C8A2E16941D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 1995
Signing time: Sun 05 Jul 2026 11:01:34 +0000
Manifest this update: Sun 05 Jul 2026 11:01:34 +0000
Manifest next update: Mon 06 Jul 2026 11:01:34 +0000
Files and hashes: 1: iJabTTtAtZd2-Bt3JGr6szkGsok.roa (hash: 0sW3IKzf/8J/9kZJ3JO4MPvHO33GYi073LMRFSBG6BU=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: cvv9Z0F84/9Qy6lx5FwA2RZeXNJxjZLDT2jeKt88V+A=)
3: xbuO7BsG7LbkSSQWawkvzIhK7y0.roa (hash: rlJz6+DJBLMlRi3myws4jEcOw9pVWqZGLHBQLp+0Ork=)
4: y3sbhhs4VAa9_leAXdVqA3jNjH8.roa (hash: Y15UbgY+4x80GYEq/q2RiWXokuPdkLl/xPzz6tjdo0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:f0:d3:7e:95:ff:36:ab:8c:dd:2c:8a:2e:16:94:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Jul 5 11:01:34 2026 GMT
Not After : Jul 6 11:01:34 2026 GMT
Subject: CN=c7a42dbb1123f500f2052a580c68d4b889f2cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:a8:b2:fd:6e:d1:12:c4:b0:1a:00:b1:8c:
30:1a:fd:33:ba:6b:52:ee:6f:bc:a9:16:98:87:c2:
24:87:8f:eb:a8:e3:d1:d1:27:28:c8:1a:c5:80:48:
3f:37:a0:60:d1:af:86:50:bc:79:69:94:88:a8:19:
25:c6:b7:71:e5:3c:07:3a:32:02:07:c0:1e:7d:fc:
b9:2f:d4:9e:e3:96:a7:74:bd:53:3e:7e:f2:89:78:
31:13:da:4a:35:01:9f:39:d7:c9:1a:06:93:6b:98:
15:89:2a:3d:83:d8:73:cc:9c:bf:3e:01:ca:28:34:
9d:c8:ee:6e:f4:35:65:75:fb:e0:1c:82:91:71:03:
57:f9:90:c3:3b:4c:a3:8c:f9:86:ed:f6:1f:dc:35:
3b:aa:91:e6:cd:02:a2:c6:6d:bc:ca:09:ca:f2:8f:
b7:2a:27:b4:13:9b:b8:b6:3d:13:27:e6:9c:6d:ed:
37:ef:b5:67:87:1b:77:32:5e:e7:4c:d0:35:8b:6e:
88:e6:99:37:c9:77:a9:96:84:18:9a:bb:00:d2:28:
bc:6c:97:27:82:94:22:13:e8:e8:60:67:eb:a5:88:
fe:49:b4:8d:73:0a:e4:99:d8:f2:0b:ca:71:5c:9f:
22:cf:d2:1c:fa:5e:8d:82:55:ef:11:0c:26:1e:61:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:2D:BB:11:23:F5:00:F2:05:2A:58:0C:68:D4:B8:89:F2:CB:0C
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:67:86:71:8e:67:43:6e:f3:73:6c:78:c4:4b:e4:d3:d3:48:
55:a0:64:d4:ae:de:39:76:45:3f:64:6f:e1:b1:07:cf:2d:50:
4e:e8:44:76:13:93:f3:49:46:ca:ec:8d:90:3c:d7:f1:8a:63:
05:d2:f8:f8:24:af:d2:af:b3:99:9b:d0:d9:4d:72:74:16:58:
4d:2f:9c:13:2d:ce:32:65:0b:33:7e:56:72:5c:b3:c1:99:c0:
39:e6:d2:4b:0c:d9:82:42:c1:1b:3c:3b:0a:04:db:42:a8:de:
65:b8:24:db:6b:8c:4c:ce:4a:8e:24:74:d7:92:33:c5:8b:09:
e1:90:5b:01:23:3d:6b:d7:13:68:f1:b1:c6:7d:52:fb:f6:6d:
a6:bd:10:09:6d:7e:0a:eb:1e:bf:df:58:6d:58:4a:09:61:9f:
4f:1c:70:6d:2e:d4:54:72:72:6e:58:21:21:d0:9c:6b:9a:24:
4f:11:54:25:4e:10:45:de:49:ca:63:e6:08:74:5d:56:c0:29:
c9:4b:a9:19:38:26:72:11:c5:54:d6:d7:1f:e2:f8:24:7d:e0:
c7:a9:8d:3b:f8:2a:e2:ee:68:55:8d:af:83:e8:11:94:55:61:
e7:92:67:fa:52:54:08:15:52:94:2e:a1:da:25:08:d5:77:ea:
75:dc:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 13:56:31 2026 by rpki-client