Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: ogUu4M3tcXlNVMzYd3+8xhK3WsiKmAkpABTHHgcwB5o=
Subject key identifier: C7:49:0E:67:4B:FB:44:BE:88:10:E4:0E:1A:EA:EA:44:36:56:C8:B3
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019F9FCCFD1120AB702B7FD7CBCBFB6F62A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 19:00:39 +0000
Manifest this update: Sun 26 Jul 2026 19:00:39 +0000
Manifest next update: Mon 27 Jul 2026 19:00:39 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: lB5wRdaIEqHpoCp5K/Ma3Iig/q1Z0EQ4V2C+KoVXQok=)
3: tB6SdtPeaNHkXKdCFOrT0cZRLQo.asa (hash: hEt0QePrXimypD2t1C7kRdRaY7tLoSp85y3ztSay7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:fd:11:20:ab:70:2b:7f:d7:cb:cb:fb:6f:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jul 26 19:00:39 2026 GMT
Not After : Jul 27 19:00:39 2026 GMT
Subject: CN=c7490e674bfb44be8810e40e1aeaea443656c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:7b:f6:54:36:97:bf:7d:82:b7:3c:cd:ae:
56:1f:63:a2:d7:8b:04:1e:8c:a4:60:35:dd:39:1e:
a5:d3:9f:28:6a:b9:f5:77:c1:1c:77:c3:42:e5:1c:
cd:9c:00:bf:94:a7:d9:86:a9:b9:ae:fe:98:c2:22:
90:90:5f:22:a3:20:8f:e0:18:56:a9:3e:45:a3:13:
a9:7a:f5:3c:a0:fa:1e:e6:4e:e1:41:98:1d:1d:13:
16:9c:0a:9b:ee:94:80:8c:d5:40:f5:00:28:a6:1e:
1c:24:da:0c:34:07:66:09:73:af:22:4a:5c:4a:b5:
1f:9e:65:63:aa:2e:8f:2d:f8:ea:58:55:e8:58:3d:
83:7a:8e:31:4e:5c:06:11:05:e3:81:0a:73:b5:24:
5e:dc:c0:04:7d:a0:87:66:69:2b:69:be:3b:37:10:
cf:e1:e2:47:72:60:02:55:cc:fe:57:0a:e8:ad:5b:
6e:3b:7c:53:8d:f6:1e:1e:14:44:09:ac:5a:93:c8:
cb:9e:7c:66:67:e5:1b:a4:a4:9d:57:60:8e:cc:54:
34:5c:04:1d:17:0f:13:aa:d7:01:99:65:e9:43:b0:
76:ea:20:dd:d4:61:5e:3b:77:93:be:10:0b:75:9b:
c2:f5:29:05:b4:30:bb:dd:4e:d9:0f:1c:db:b6:2c:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:49:0E:67:4B:FB:44:BE:88:10:E4:0E:1A:EA:EA:44:36:56:C8:B3
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:16:c7:5e:92:9c:85:33:35:a3:82:79:86:9a:56:c2:34:f3:
3b:de:38:3f:b5:80:eb:45:5e:e9:ae:1a:6f:3b:05:4f:a3:de:
1b:76:81:71:1d:41:d0:8a:e5:f9:e7:6f:03:a4:22:25:64:d7:
40:a8:33:cd:25:a9:44:80:bc:dd:fb:ce:44:e7:c3:e7:84:ef:
36:e7:69:89:06:6f:13:b7:5f:6c:b7:bd:a0:39:66:89:81:60:
a6:ac:94:99:dc:8b:13:75:18:3f:0a:77:ac:fd:2d:92:a8:73:
73:61:42:2c:01:3f:bd:13:6b:cb:d1:22:92:3a:37:1b:5f:25:
ff:d4:f0:60:20:5c:d7:d9:6b:3b:70:e7:33:34:bd:a4:48:42:
14:54:9c:74:78:25:cd:4e:f0:b8:0e:81:84:f8:44:45:b7:ba:
19:8b:89:17:dd:43:32:e3:0b:2e:b8:00:f9:b9:f3:b6:ed:3e:
ff:4c:5c:98:a3:93:1a:ee:46:56:50:4b:ce:09:9d:ac:0a:84:
29:be:8b:89:91:36:79:a2:53:d9:f2:71:98:53:38:6b:ed:71:
49:8f:d6:d9:04:b8:48:c7:e8:ba:0c:f5:99:44:6f:9a:51:3e:
89:78:fc:73:d6:27:f2:41:0c:d4:dc:fe:1e:c7:b5:e9:f4:0f:
b2:8d:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:35 2026 by rpki-client