Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: x9t5dTF3aogIXZlxRHXH28j1I9O7C6OOOTl4MIhmWu8=
Subject key identifier: D6:92:F5:3A:97:10:C4:3B:F0:45:3E:A2:66:D7:54:45:0F:19:39:B1
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019F92112064512419338745783D99219F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 03:00:23 +0000
Manifest this update: Fri 24 Jul 2026 03:00:23 +0000
Manifest next update: Sat 25 Jul 2026 03:00:23 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: SR8GbYtgQFnq0UVKblPkuoxgifdT2dmhR+3a/4fvAOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:20:64:51:24:19:33:87:45:78:3d:99:21:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jul 24 03:00:23 2026 GMT
Not After : Jul 25 03:00:23 2026 GMT
Subject: CN=d692f53a9710c43bf0453ea266d754450f1939b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:5e:2f:95:9e:78:28:b7:a0:e4:5c:ae:bd:
1a:53:56:d5:4f:f0:c8:bb:cd:8a:18:62:51:97:97:
75:52:5e:97:f9:a8:5b:b8:63:d9:85:3f:85:25:c5:
eb:b1:dc:bd:48:89:53:94:35:3d:e3:d6:e8:1e:11:
03:83:27:2a:b3:72:12:08:42:91:64:bb:a7:9d:2a:
c0:e6:7d:df:46:cf:c3:0a:d4:86:8b:27:46:4f:fe:
42:37:e2:79:42:f4:b1:99:11:95:4e:cb:6c:d1:85:
02:06:59:cf:99:72:c0:f0:14:c9:37:1e:06:90:38:
83:68:24:63:11:12:a4:51:0b:4f:e4:e5:10:a5:59:
33:19:da:89:12:f1:b1:55:4f:26:d4:8d:07:a1:fa:
f3:2d:86:c2:1d:ae:20:e7:d5:a1:8c:d6:bf:dc:ce:
85:66:84:5b:37:23:4b:3d:cc:a8:39:90:43:88:19:
39:40:e0:f7:d6:67:df:08:99:84:fb:b5:a9:7c:5f:
71:e2:b0:f5:91:0c:b7:0b:9c:c7:4f:02:cc:e5:7a:
ec:63:b3:99:38:29:60:72:da:fc:5b:99:fd:88:c2:
70:13:8b:2e:98:af:99:ab:67:6b:43:a9:db:45:8b:
df:be:75:6f:17:78:99:be:ee:bf:ec:81:b8:4f:d7:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:F5:3A:97:10:C4:3B:F0:45:3E:A2:66:D7:54:45:0F:19:39:B1
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:12:e0:dd:91:cd:d9:7b:60:55:3b:be:95:ed:54:8d:c1:42:
4c:5a:f7:53:01:55:f7:2f:c5:1d:61:ef:0c:0b:4e:8a:2b:f2:
86:51:71:93:0a:88:22:f7:d6:fe:5d:0c:b6:ca:db:85:10:c4:
bb:d1:8b:2e:21:0f:2f:ae:cd:97:38:c9:fb:ca:c0:11:dd:5a:
1f:4f:9e:24:f1:89:5d:1c:2d:c2:d1:dd:a2:59:32:41:64:2b:
a1:ef:bb:69:c0:db:8c:8f:24:f9:7f:5f:5f:02:dc:24:ed:5c:
49:65:14:52:b6:17:bc:7e:d1:51:3c:e9:ae:aa:6c:05:4c:e0:
03:15:26:7c:7e:c0:00:c0:f5:de:14:c4:52:a8:19:04:06:39:
ab:02:9b:01:68:eb:c3:86:49:a1:fa:6b:a9:df:14:68:6a:d4:
13:23:da:3d:60:c0:24:03:a6:f9:b0:cc:a4:46:35:14:8f:9d:
2b:ff:c0:9f:c6:01:6d:4f:43:90:5b:36:0e:2e:25:03:55:b8:
21:26:17:5f:a9:bb:c1:c2:8f:c0:60:63:6e:17:97:c9:4c:f0:
30:e0:c0:ff:a2:77:77:99:7c:ed:49:b1:65:36:12:8b:51:3d:
66:70:e7:02:7e:f4:c7:ba:02:5d:51:32:06:52:c7:f2:b0:38:
7f:37:de:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SESBkUSQZM4dFeD2ZIZ9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz
ZmU0ZjIwHhcNMjYwNzI0MDMwMDIzWhcNMjYwNzI1MDMwMDIzWjAzMTEwLwYDVQQD
EyhkNjkyZjUzYTk3MTBjNDNiZjA0NTNlYTI2NmQ3NTQ0NTBmMTkzOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOFeL5WeeCi3oORcrr0aU1bVT/DI
u82KGGJRl5d1Ul6X+ahbuGPZhT+FJcXrsdy9SIlTlDU949boHhEDgycqs3ISCEKR
ZLunnSrA5n3fRs/DCtSGiydGT/5CN+J5QvSxmRGVTsts0YUCBlnPmXLA8BTJNx4G
kDiDaCRjERKkUQtP5OUQpVkzGdqJEvGxVU8m1I0HofrzLYbCHa4g59WhjNa/3M6F
ZoRbNyNLPcyoOZBDiBk5QOD31mffCJmE+7WpfF9x4rD1kQy3C5zHTwLM5XrsY7OZ
OClgctr8W5n9iMJwE4sumK+Zq2drQ6nbRYvfvnVvF3iZvu6/7IG4T9dN+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaS9TqXEMQ78EU+ombXVEUPGTmxMB8GA1UdIwQY
MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt
NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm
LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexLg3ZHN
2XtgVTu+le1UjcFCTFr3UwFV9y/FHWHvDAtOiivyhlFxkwqIIvfW/l0MtsrbhRDE
u9GLLiEPL67NlzjJ+8rAEd1aH0+eJPGJXRwtwtHdolkyQWQroe+7acDbjI8k+X9f
XwLcJO1cSWUUUrYXvH7RUTzprqpsBUzgAxUmfH7AAMD13hTEUqgZBAY5qwKbAWjr
w4ZJofprqd8UaGrUEyPaPWDAJAOm+bDMpEY1FI+dK//An8YBbU9DkFs2Di4lA1W4
ISYXX6m7wcKPwGBjbheXyUzwMODA/6J3d5l87UmxZTYSi1E9ZnDnAn70x7oCXVEy
BlLH8rA4fzfeeQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:01 2026 by rpki-client