Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: otGKT7BG+gEmMI+U99htbkjUix0coupwKvQTW6ZAYl0=
Subject key identifier: 65:CA:0E:E0:5E:0D:C2:D4:3F:EC:6C:A6:07:3C:4B:6D:1E:F5:4D:C6
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019FA003FCE9078F7AFC17EE965A4FE9FE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 121F
Signing time: Sun 26 Jul 2026 20:00:43 +0000
Manifest this update: Sun 26 Jul 2026 20:00:43 +0000
Manifest next update: Mon 27 Jul 2026 20:00:43 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: +C2vI8gz+F/49AWQj18xFRfJQuGKjGFnE+FJ3Z1I90U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:fc:e9:07:8f:7a:fc:17:ee:96:5a:4f:e9:fe:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jul 26 20:00:43 2026 GMT
Not After : Jul 27 20:00:43 2026 GMT
Subject: CN=65ca0ee05e0dc2d43fec6ca6073c4b6d1ef54dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:c4:8c:a2:1b:1e:10:06:62:1c:81:30:d2:
4e:aa:fd:5e:38:18:07:18:36:15:94:7b:53:1d:df:
b2:69:6b:3c:fc:c4:a5:8f:00:84:6c:66:5a:eb:fe:
d3:df:a5:e2:98:a3:51:ce:14:6e:d8:41:05:dd:3e:
2b:f4:22:98:f2:7b:5c:a5:74:0e:35:00:ea:01:d0:
17:9f:54:0e:41:c1:6c:b5:fa:67:66:58:f3:f5:9e:
73:e7:3b:2f:0b:f2:20:d3:7a:80:c4:a3:0c:fb:13:
34:ee:22:88:c7:3f:f5:23:e9:f0:ae:59:f4:91:d2:
53:2e:fd:13:3a:ed:15:40:db:a6:0f:fb:51:21:8b:
fb:29:21:19:11:c1:00:30:80:b8:39:8b:6e:1f:53:
fb:41:bc:19:3c:f9:fa:b2:6c:16:2a:52:fd:ba:ee:
12:79:8a:e0:22:76:9b:10:54:dc:78:03:1f:af:34:
34:6b:61:57:25:f9:9b:e8:f1:75:e2:de:cf:c0:c7:
52:0f:c4:eb:ec:9d:50:c2:3f:9a:53:43:21:44:14:
ff:5c:99:d6:da:74:77:ab:e1:05:da:1e:94:ee:db:
75:d1:56:db:19:19:46:64:6b:71:eb:fb:14:20:26:
a7:4e:df:93:1e:af:d0:9f:c8:90:f3:83:e2:74:6c:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:0E:E0:5E:0D:C2:D4:3F:EC:6C:A6:07:3C:4B:6D:1E:F5:4D:C6
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d2:ac:d3:4f:38:e7:11:c6:0f:06:e6:a9:06:f9:71:e0:2a:
fe:23:a9:b1:a3:72:be:5f:c7:84:c2:25:31:a6:3e:cd:56:7f:
9e:12:37:3f:17:01:0a:ac:2c:73:9b:5f:ee:90:ac:47:94:ca:
e3:9c:9a:87:4d:f2:7f:75:55:26:cc:26:14:5d:93:1a:4f:e6:
df:61:9b:f3:12:32:74:e1:33:92:4c:87:e3:78:dc:99:d3:1d:
ce:bf:0c:77:72:b2:ef:ea:dc:91:dc:13:26:7e:ed:61:3c:af:
02:51:db:f1:9a:86:05:96:fc:bb:22:e4:5b:47:be:ab:f1:86:
ce:bf:6e:4d:8d:17:a2:84:c4:f1:65:31:68:47:12:76:7e:52:
8e:99:ce:de:94:4a:f8:34:93:43:e1:da:90:39:b3:09:fc:f7:
a8:cf:da:08:4d:b4:77:43:8e:a3:d0:35:66:0f:61:b2:8e:64:
a6:9f:03:2a:08:33:86:38:fe:bf:30:cb:5c:0a:9f:58:71:a8:
55:1e:d5:66:10:e2:0f:4e:8e:71:bc:b8:99:52:52:ee:bc:48:
26:5f:38:f6:c1:87:10:b0:a3:97:34:04:d8:aa:82:78:06:e3:
86:b0:76:bf:d3:b5:5a:b7:32:4c:d5:63:34:b3:c1:ce:6d:82:
45:c3:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:32:11 2026 by rpki-client