Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: mjehw4JsU+vRzMFOEx6EIJQfxCNNlfeNvB5f9FpZFj0=
Subject key identifier: 73:38:3B:9E:DB:7F:3A:7A:34:3A:C6:F5:86:42:8C:D3:EA:7F:B4:02
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019F8E6BBCB9F50A4840E2290C1F3CBADA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0A0A
Signing time: Thu 23 Jul 2026 10:00:53 +0000
Manifest this update: Thu 23 Jul 2026 10:00:53 +0000
Manifest next update: Fri 24 Jul 2026 10:00:53 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: CDJWT/3s6Z+l0Hr0KtOw9HTq0j1bD7+RboBemSEzAE8=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: p1ccrCra_00L6gD8dPHnVWnovDk.asa (hash: Tkz+LG7gpA+z7CdE6VRu1V3RZMUT7S6Od/VEYzShauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:bc:b9:f5:0a:48:40:e2:29:0c:1f:3c:ba:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jul 23 10:00:53 2026 GMT
Not After : Jul 24 10:00:53 2026 GMT
Subject: CN=73383b9edb7f3a7a343ac6f586428cd3ea7fb402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:b7:54:a0:9c:6e:8d:de:84:e9:9d:21:3f:
0d:02:9c:fe:fa:5f:43:e9:30:9f:fc:6d:cb:e1:70:
3c:69:bb:67:de:af:d9:77:2e:31:86:09:e4:1c:f4:
b6:b2:e1:9e:29:10:d9:d7:54:09:93:69:aa:66:35:
07:98:9f:4f:6f:d6:24:ba:3b:bd:ec:55:2b:69:cd:
81:b9:8d:59:24:88:78:3f:b5:ce:8b:94:d6:6a:6e:
f7:db:04:99:4f:35:e8:19:29:37:b2:52:88:f1:e7:
19:8f:8e:ea:67:ea:8f:24:99:8f:8e:ce:80:c8:40:
19:57:77:b4:36:35:4f:8e:be:c4:b6:b2:19:94:7c:
f2:eb:a1:f3:03:93:1d:7a:ae:fb:2b:7e:a2:27:5e:
af:a5:46:dd:4a:bc:2b:47:a0:2b:f1:0f:5d:e6:17:
1b:02:4e:fc:b4:ed:cd:1c:d5:6a:67:46:1a:28:ff:
bb:da:12:20:25:ee:ec:1a:b3:1e:e4:d9:a6:56:c9:
61:41:e7:21:61:20:eb:58:ea:91:a6:4b:65:c1:a3:
b9:83:23:be:4d:0e:60:4b:09:d1:b4:6b:ce:33:a4:
0c:c4:76:46:d4:94:c3:2b:e1:09:7e:08:31:d3:7e:
43:07:20:fd:f4:0e:85:29:83:26:c3:0d:7a:28:4c:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:3B:9E:DB:7F:3A:7A:34:3A:C6:F5:86:42:8C:D3:EA:7F:B4:02
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4d:f4:93:7c:00:78:18:cd:c8:a4:61:d8:ec:af:53:e8:ce:
91:a6:b4:75:58:44:b5:a4:ab:53:58:74:f5:b3:18:ac:90:09:
f6:ba:99:ae:d8:25:54:b8:8e:50:c6:ac:d7:75:f3:f2:29:8a:
08:8a:c8:19:95:30:b9:65:13:d9:45:43:b7:88:44:ef:60:2b:
08:47:75:20:f8:eb:fa:b2:db:a2:4d:e3:a2:72:b8:9b:f4:15:
41:6e:3d:4c:35:4b:4b:c2:72:ba:5f:8e:7d:35:ba:31:2b:c1:
97:dd:65:b2:42:d3:c8:0b:38:92:5b:38:d9:71:11:54:a0:d2:
c1:db:c8:15:e9:de:41:9b:b8:f2:4e:a6:59:f2:37:98:4d:8c:
5e:34:13:6e:0a:0e:82:63:d5:32:8b:97:a4:b1:e1:8a:b5:ac:
ca:43:8d:00:a4:c2:15:ee:a8:f8:a0:2f:10:61:89:1c:2a:2c:
31:2c:71:5c:b7:38:a7:17:f5:0c:51:62:17:9d:90:bc:58:c8:
fc:7e:5e:06:83:fe:61:7b:63:ee:77:e3:a6:3c:28:01:8b:bd:
28:d9:36:20:a4:70:84:83:a2:71:74:1f:af:bb:14:92:0d:6c:
2f:17:f4:57:2b:56:b0:f8:3e:74:8b:8e:b8:ec:56:c2:fc:58:
6c:58:60:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oa7y59QpIQOIpDB88utp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx
M2I5OWEwHhcNMjYwNzIzMTAwMDUzWhcNMjYwNzI0MTAwMDUzWjAzMTEwLwYDVQQD
Eyg3MzM4M2I5ZWRiN2YzYTdhMzQzYWM2ZjU4NjQyOGNkM2VhN2ZiNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolW3VKCcbo3ehOmdIT8NApz++l9D
6TCf/G3L4XA8abtn3q/Zdy4xhgnkHPS2suGeKRDZ11QJk2mqZjUHmJ9Pb9Ykuju9
7FUrac2BuY1ZJIh4P7XOi5TWam732wSZTzXoGSk3slKI8ecZj47qZ+qPJJmPjs6A
yEAZV3e0NjVPjr7EtrIZlHzy66HzA5Mdeq77K36iJ16vpUbdSrwrR6Ar8Q9d5hcb
Ak78tO3NHNVqZ0YaKP+72hIgJe7sGrMe5NmmVslhQechYSDrWOqRpktlwaO5gyO+
TQ5gSwnRtGvOM6QMxHZG1JTDK+EJfggx035DByD99A6FKYMmww16KEygTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM4O57bfzp6NDrG9YZCjNPqf7QCMB8GA1UdIwQY
MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt
NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj
LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU30k3wA
eBjNyKRh2OyvU+jOkaa0dVhEtaSrU1h09bMYrJAJ9rqZrtglVLiOUMas13Xz8imK
CIrIGZUwuWUT2UVDt4hE72ArCEd1IPjr+rLbok3jonK4m/QVQW49TDVLS8Jyul+O
fTW6MSvBl91lskLTyAs4kls42XERVKDSwdvIFeneQZu48k6mWfI3mE2MXjQTbgoO
gmPVMouXpLHhirWsykONAKTCFe6o+KAvEGGJHCosMSxxXLc4pxf1DFFiF52QvFjI
/H5eBoP+YXtj7nfjpjwoAYu9KNk2IKRwhIOicXQfr7sUkg1sLxf0VytWsPg+dIuO
uOxWwvxYbFhgMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:39 2026 by rpki-client