Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: zYmn+V8yZNT4ZZI0Sh6YdycTwBv56aVcj6Wo74ff3F0=
Subject key identifier: E1:05:D3:10:98:3C:F0:7E:0F:67:15:75:2F:63:15:57:34:80:73:AE
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019F9E15BAF3B8CF0002EEB832E411EDFF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 121E
Signing time: Sun 26 Jul 2026 11:00:51 +0000
Manifest this update: Sun 26 Jul 2026 11:00:51 +0000
Manifest next update: Mon 27 Jul 2026 11:00:51 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: ML4bkOzx0jFAA13R9e+4KHZPE47pWh/nKPN7GMiBLjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:ba:f3:b8:cf:00:02:ee:b8:32:e4:11:ed:ff:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jul 26 11:00:51 2026 GMT
Not After : Jul 27 11:00:51 2026 GMT
Subject: CN=e105d310983cf07e0f6715752f631557348073ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:fc:a6:59:8d:e3:0d:ac:9a:f0:f8:5d:7c:
10:a4:84:67:fc:ab:82:c2:69:71:76:c3:27:8d:54:
6f:48:fc:00:2d:06:eb:a7:02:da:e2:42:7d:83:84:
af:e8:63:51:f5:e5:ad:3a:37:b8:c8:8a:f1:ca:3e:
26:72:77:cf:56:42:a5:c1:e1:2c:92:15:c5:74:ed:
90:a6:31:bd:2e:22:2e:07:56:4a:a8:44:9c:30:7b:
ba:f1:95:71:65:87:da:cb:28:84:1e:f4:04:63:33:
f7:41:dc:42:1f:b2:8b:d0:02:fa:9d:31:c9:32:e6:
fe:e8:38:03:4d:ea:96:94:95:bc:6e:6c:63:05:cd:
aa:18:f5:1f:a2:07:a6:49:d7:c9:48:17:87:a2:bd:
f8:f5:ff:ff:c3:b5:aa:5b:5e:f6:47:ce:5f:b0:b8:
cb:81:10:8c:55:65:17:91:fd:8a:8f:a6:4a:ea:1b:
ff:36:45:ae:8d:c8:50:55:26:22:7e:c8:29:a6:49:
74:ef:bf:3e:f7:3d:d4:b5:24:62:5c:19:19:54:82:
92:87:f2:8d:b7:03:92:9e:f0:6b:0b:e4:a3:29:bc:
7c:d7:af:61:0d:1f:82:bc:f8:89:a0:40:be:b5:75:
ec:0a:f0:54:f7:94:2e:d0:23:49:99:f4:ee:da:7d:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:D3:10:98:3C:F0:7E:0F:67:15:75:2F:63:15:57:34:80:73:AE
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:29:b0:51:41:3a:2c:e4:47:29:30:6a:f1:9d:90:6a:75:
20:9e:02:06:6f:75:87:09:30:cb:f8:1f:ec:b1:5e:12:8c:52:
b4:af:46:19:40:af:0a:aa:a3:8a:ee:a4:6b:f9:69:06:a4:bb:
79:32:09:06:3d:1c:c9:38:c2:e2:cf:ac:95:31:54:58:eb:e1:
0d:d0:0a:fe:6a:eb:2d:48:68:00:3e:53:04:12:57:e7:b2:ff:
6b:42:db:d9:a3:4d:7e:bd:10:9c:32:2f:45:25:8a:25:df:a8:
d3:07:30:19:2d:6b:9f:a8:86:7e:ac:67:47:f9:d9:55:3d:8a:
8d:91:2f:17:27:be:e1:23:9d:d3:9b:7b:85:01:2a:19:cf:71:
64:81:4c:66:40:3a:d6:ef:81:85:b0:65:96:7f:1a:b7:cb:db:
f4:2e:b2:df:06:13:2f:37:09:4e:d6:e3:dd:8e:d6:4d:dc:c0:
88:55:e9:c5:03:06:2e:56:d1:77:b6:2b:9c:53:5b:4c:e0:0c:
5c:47:e6:49:18:49:4d:31:4e:cc:31:b2:cf:12:06:2d:4c:3a:
a4:1d:63:76:24:b2:4f:21:44:a1:e0:41:eb:2d:5d:e2:4e:3b:
c3:cf:33:f4:e5:45:89:ae:61:bf:d2:b1:9c:43:0e:60:b4:06:
8a:c3:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:15 2026 by rpki-client