Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
File: kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft (raw, json)
Hash identifier: Xd6du3pqw4CR7LyLMn5tdNNDEs4d32tEJ7cRozIT+Ow=
Subject key identifier: 59:99:73:F0:5A:82:70:72:DC:49:EA:32:11:68:B2:90:23:0F:4A:50
Authority key identifier: 91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
Certificate issuer: /CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Certificate serial: 019FA0E03720CD569953549629C712808DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:16 +0000
Manifest this update: Mon 27 Jul 2026 00:01:16 +0000
Manifest next update: Tue 28 Jul 2026 00:01:16 +0000
Files and hashes: 1: JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa (hash: qBCZAB7xvXxou+T2GdjhZxyRoHv6x5IT+u6DzlaMiOg=)
2: cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa (hash: 0shjjAec7Cb9aPFwygq8U/0Lwh0QCfxBtCpb+tdZIdk=)
3: kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl (hash: LoS4YVwdGmORv2Pydci0cVeAoiurCXXaKDx0uYWH7k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:37:20:cd:56:99:53:54:96:29:c7:12:80:8d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Validity
Not Before: Jul 27 00:01:16 2026 GMT
Not After : Jul 28 00:01:16 2026 GMT
Subject: CN=599973f05a827072dc49ea321168b290230f4a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:8a:03:e6:53:5c:24:75:1c:f5:ce:25:5e:
42:b0:58:ba:2e:dc:24:19:96:87:62:1d:67:9c:96:
be:21:97:aa:47:98:98:ff:15:82:a0:1e:5f:e4:f4:
55:70:3f:69:3e:34:52:8c:88:f4:93:be:b7:85:e5:
69:42:c0:8d:6a:4b:98:cf:d0:2b:6a:e8:89:e3:d8:
a5:2b:dd:53:ae:d7:a7:d3:f8:a5:a8:86:18:56:e7:
1b:0a:b7:69:c3:f2:a3:7a:bb:d7:35:21:92:3c:59:
cc:66:fb:5f:a8:e5:83:54:3d:4b:70:3f:4f:4c:3f:
d5:17:fd:b7:80:22:35:f6:ac:37:2e:84:e2:8e:b6:
67:c9:25:8c:b6:8c:d3:a3:ba:e4:0b:d0:75:dc:42:
00:87:0c:b4:bd:96:29:3c:7d:3a:61:15:9b:9e:37:
85:f8:14:ee:5e:6a:d7:e3:af:49:59:c2:b0:59:0c:
a9:4f:72:f2:42:00:4d:e1:ab:d4:da:e9:c8:4d:e7:
78:1a:e5:b2:60:a4:26:6a:8a:37:6b:3c:6a:07:ed:
b0:8d:1c:44:a2:91:d2:64:24:1a:e0:9c:d1:c4:41:
51:4c:8c:46:1c:92:37:91:0f:fc:f3:0c:ef:23:3e:
df:e0:f8:6f:89:93:b6:cd:83:f6:79:91:72:70:6d:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:73:F0:5A:82:70:72:DC:49:EA:32:11:68:B2:90:23:0F:4A:50
X509v3 Authority Key Identifier:
keyid:91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:53:9f:1a:73:98:17:41:b4:8b:c4:c1:73:30:5f:a9:a1:b3:
ef:4f:63:59:90:5b:81:f0:1d:81:f0:ba:43:a2:3e:54:0f:0d:
80:c1:bb:74:35:35:c9:af:6e:dc:db:2a:9a:45:30:58:f7:7b:
85:7d:3d:0c:c8:67:35:46:1a:12:ad:9b:f9:6f:2e:c6:91:36:
38:03:9d:43:47:dc:fa:1d:6d:f9:a4:0e:5b:89:10:2c:1f:6c:
fa:91:cb:50:ad:cb:d4:d6:20:06:6b:8c:70:25:c4:db:cf:27:
5d:19:26:03:9b:86:c4:6d:4e:a9:51:80:dd:99:fc:74:62:69:
c5:b9:7c:ab:cc:32:20:ad:54:78:3f:12:fc:aa:47:ed:c3:d9:
d5:3a:78:b2:a2:7d:d8:ef:d0:8b:74:e6:23:0c:44:d6:69:15:
bf:ed:da:61:95:a8:3e:c9:e1:f6:42:4d:85:18:60:1d:43:97:
fa:6c:99:5e:67:25:2e:16:b9:dd:66:8e:c8:cb:2f:9e:68:f3:
64:59:f3:cc:e6:2b:5f:d8:7a:dd:14:a3:63:eb:45:4d:81:fb:
9a:78:cf:08:86:3e:36:8d:ab:ab:a1:91:bd:51:a1:b4:a2:77:
5e:94:78:52:0d:a8:52:c5:19:0f:f7:db:50:ec:16:f9:00:04:
28:19:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:32:08 2026 by rpki-client