Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: kdugLjAgSXyKSLmkntvppJDstcVzoPxxc8T9JIiL3wQ=
Subject key identifier: 78:9A:74:93:87:99:A8:8D:25:CF:3D:43:B0:CD:54:A9:F6:14:E8:53
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019FA1846E0565F39D075CA2DE6FE7A7C1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 03:00:38 +0000
Manifest this update: Mon 27 Jul 2026 03:00:38 +0000
Manifest next update: Tue 28 Jul 2026 03:00:38 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: kH59K3WbmnS6bsVerwBMdpdxDaZvKhRM+Yl51ermUvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:6e:05:65:f3:9d:07:5c:a2:de:6f:e7:a7:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jul 27 03:00:38 2026 GMT
Not After : Jul 28 03:00:38 2026 GMT
Subject: CN=789a74938799a88d25cf3d43b0cd54a9f614e853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c9:7e:b3:d7:0d:f1:2c:35:65:0b:bb:4d:f5:
bb:4c:bb:4f:76:61:5b:60:c4:79:e8:61:26:7e:60:
5e:71:25:02:bb:ea:d5:c1:a7:9c:9c:43:09:7b:30:
b8:c2:22:e2:1a:32:71:67:7e:02:ef:ff:70:97:1e:
e6:5d:de:38:3c:88:3c:a2:46:85:c5:8b:90:6b:61:
3b:7c:92:8f:96:14:a2:3f:96:4c:52:bc:1f:5c:cd:
05:7d:67:d9:eb:08:34:e0:5e:42:fa:ca:37:f5:50:
3e:69:1b:4f:df:62:be:fe:9b:e5:9a:8e:94:32:39:
7b:5f:6d:bd:6b:0a:01:e6:c4:45:50:22:78:ec:f8:
9e:9a:f8:eb:66:8f:a4:1e:29:ee:a9:37:42:19:1b:
de:23:ed:f1:f3:dc:38:fc:b2:09:48:eb:b9:96:f7:
fc:0a:2c:73:e5:5a:b4:b5:f9:a9:1d:07:3a:b0:f7:
bf:60:6e:87:da:4f:eb:f8:3e:85:72:02:ce:2f:32:
69:87:a3:60:83:5d:2e:0e:b7:4e:a0:3b:1d:be:e4:
cf:eb:a4:17:af:af:d9:d9:c2:da:5d:39:87:fa:68:
27:dd:b1:f5:0e:ec:bb:1d:73:fd:72:79:53:ef:b2:
3e:72:e1:67:96:f1:48:c5:05:fb:7e:5c:6f:c2:0d:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:74:93:87:99:A8:8D:25:CF:3D:43:B0:CD:54:A9:F6:14:E8:53
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4d:c0:32:fd:d7:c5:87:41:7e:66:cb:1c:17:a5:41:d3:1e:
14:bb:64:8c:35:30:95:4e:21:2e:db:cd:31:fb:cd:2c:24:bb:
11:3d:08:98:c0:24:99:b1:cf:97:c6:aa:43:d9:d6:0b:54:9c:
f7:86:ce:cd:93:e3:05:a8:24:a9:e4:3e:54:29:2b:98:e5:c4:
5c:e3:d1:84:c4:c0:01:12:27:ea:92:54:2b:15:05:c9:3a:72:
00:69:ab:94:68:2b:7f:20:fe:ab:28:eb:23:d7:15:58:8d:68:
98:0b:98:54:7e:66:74:f5:37:6f:c7:8c:23:45:c1:7c:f6:ee:
cf:7e:92:8d:3d:bd:c1:28:26:e0:ce:e3:72:c7:3d:06:55:7a:
ac:fb:67:c9:a1:5b:58:c9:e4:15:2f:34:5c:2b:39:4b:e4:7d:
ac:2b:ba:78:a3:d3:d7:37:95:13:60:6c:b0:53:d0:50:f2:fd:
4e:c0:fd:50:a8:c6:ef:ee:a8:99:c7:b7:6d:ed:6e:a3:38:4c:
87:d5:97:a1:65:0f:43:70:06:50:da:6c:5c:cf:34:3b:6b:f4:
6f:69:d4:98:01:ab:6f:36:b6:cc:22:78:a6:a3:f9:59:51:11:
45:5a:88:a5:41:38:b0:56:46:87:0c:ad:7c:5f:fc:b7:e7:43:
87:09:61:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:56:45 2026 by rpki-client