Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: 5FDbdHjlWhv57YjbHXGulcT+olQyNBO1E0H90KP9T0g=
Subject key identifier: A4:73:82:2F:A0:30:4E:96:07:D1:8B:D0:C3:C8:AF:E1:9F:9F:3A:81
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 019FA33C7B044A8C966D0A41F7B2F19984CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 11:01:17 +0000
Manifest this update: Mon 27 Jul 2026 11:01:17 +0000
Manifest next update: Tue 28 Jul 2026 11:01:17 +0000
Files and hashes: 1: FUNd3J3jGNkL1bhepptoxLuws5g.roa (hash: 63Tr+CGndchW/6WwI48KC12WlHse5iUN8Ha4sdZypxE=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: V6OLtldo0x8WthLc5+XegR3N1q00cRGbBCVR5ysz8XA=)
3: dA2kQy1CEpRjG-WpcIPDo0fNj_U.roa (hash: 34qC0ba+jHJ0/HlrlkGPxR8gsGyNsT6joxkYh8yI9wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:7b:04:4a:8c:96:6d:0a:41:f7:b2:f1:99:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jul 27 11:01:17 2026 GMT
Not After : Jul 28 11:01:17 2026 GMT
Subject: CN=a473822fa0304e9607d18bd0c3c8afe19f9f3a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:21:d3:1e:94:49:da:63:f0:6d:ca:35:28:
2c:67:ca:b7:91:b4:e5:7c:b9:d4:d2:92:af:93:69:
af:66:8b:3c:92:7e:5f:a8:e5:48:09:a9:47:80:c0:
1f:6d:59:f3:6f:b9:61:ba:68:8e:de:24:61:d5:1a:
5d:95:d1:ed:cd:8e:fc:05:37:a1:bf:5d:ec:2b:7c:
04:6b:de:ce:c5:7a:fc:ab:03:2e:a0:76:9e:6a:f6:
13:03:b0:7d:a9:2a:1f:26:42:50:6d:23:09:2d:89:
a4:14:bd:f7:88:a3:90:19:9c:a5:21:c8:f1:3e:ae:
d0:48:1a:cc:d4:62:05:ce:f4:b2:d0:b0:6e:52:22:
de:60:06:66:0d:57:7f:20:3b:a4:2d:0b:a4:20:d1:
28:df:b4:3b:b3:d2:3a:f5:ab:08:e7:78:68:9b:bb:
39:38:b0:11:c5:9c:06:6d:47:c5:b5:b0:92:66:01:
3d:2c:f4:26:29:13:ac:66:7b:9c:f5:39:f6:80:35:
3c:e0:4b:0a:84:9c:ac:85:f9:85:a7:79:97:20:3b:
05:6c:89:cf:3e:c6:65:d9:c7:6a:70:8d:e9:4b:e7:
64:9f:18:90:45:21:03:b7:15:99:6b:34:43:4f:a6:
39:fd:58:ab:00:fd:38:7c:4d:fe:aa:38:d5:d2:9f:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:73:82:2F:A0:30:4E:96:07:D1:8B:D0:C3:C8:AF:E1:9F:9F:3A:81
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4d:4b:12:9b:2e:0c:7e:e5:61:99:3a:a3:7c:df:8b:22:4c:
22:c8:59:e7:ca:c8:9b:b8:37:e5:55:c0:b7:7b:97:af:61:97:
db:6e:08:9b:d4:68:f7:ef:a6:81:6c:31:13:b8:60:ee:14:ad:
7e:60:7a:4a:48:3e:96:c4:fb:b7:0a:d3:91:09:31:ad:ca:d2:
f8:cd:53:c0:c3:03:44:ff:50:42:02:85:71:44:15:cc:52:37:
20:fd:d2:fd:91:f2:fe:d3:d1:06:dd:d0:0a:dd:4c:22:c2:f0:
73:bf:cb:bf:35:3c:78:89:4a:3a:f5:b2:47:58:20:8b:ae:c2:
d1:bd:e0:c1:50:4e:1c:89:5d:69:9c:8d:db:5a:16:53:d3:36:
78:97:f4:77:85:31:9b:9d:79:67:f4:0e:28:a9:0c:d4:65:3b:
90:56:b7:7e:c9:58:84:b4:89:a6:5b:52:ad:be:04:fc:e7:e6:
0f:99:0c:e9:4b:c5:9e:59:98:bb:3c:21:58:90:18:c0:f2:06:
7e:b8:74:88:fd:2a:5c:83:ce:7e:5e:3a:3b:d4:84:c1:5f:b0:
09:d9:1d:e6:43:87:f9:45:71:b3:99:17:a6:c1:c6:47:f3:1f:
6e:74:39:31:fa:67:9d:23:ea:5d:6c:a8:18:e2:3f:2e:50:07:
ae:56:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:44:10 2026 by rpki-client