Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: 2vyb+S+eCNQCXXfdeBhuQQQ9+efplspBsPXK11VnRu0=
Subject key identifier: 97:F2:87:AF:2C:80:FB:6D:DF:19:DC:FD:73:F8:2D:1F:08:AB:EE:23
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 01A0D15BDD3E07989C0F00330543A73E9D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 122C
Signing time: Thu 24 Sep 2026 03:00:53 +0000
Manifest this update: Thu 24 Sep 2026 03:00:53 +0000
Manifest next update: Fri 25 Sep 2026 03:00:53 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: i4+J53CHGN7VKyjayr/AWzgJmR9Idswe3FeSYwoKPwU=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:dd:3e:07:98:9c:0f:00:33:05:43:a7:3e:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Sep 24 03:00:53 2026 GMT
Not After : Sep 25 03:00:53 2026 GMT
Subject: CN=97f287af2c80fb6ddf19dcfd73f82d1f08abee23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:46:4f:b5:54:5f:dd:88:10:d0:46:d1:83:
92:12:b9:d9:fd:a3:c0:8a:a5:9e:30:9f:4d:e6:d1:
b7:00:7f:9e:d9:2c:d8:67:dd:18:70:74:f5:be:8d:
10:4a:31:4f:05:c5:32:0f:37:fe:9c:8e:bd:e0:ab:
bc:f2:b1:73:b1:5d:0c:ff:2c:ac:1d:96:ad:c7:46:
1d:2c:a4:9c:9e:b0:d7:d7:5b:6e:b5:6b:4b:61:fa:
7d:c4:da:f6:fd:9b:72:78:2f:5d:d4:d2:c8:4f:9a:
47:69:04:cb:76:18:7f:f0:0e:2f:01:bd:01:9d:a4:
39:95:de:4d:80:e5:9e:98:cb:fe:e3:fb:a8:60:3d:
52:45:ba:61:af:66:e4:3c:53:9f:2a:6b:11:d2:aa:
a2:97:d0:08:af:f2:92:c7:f9:08:b2:85:13:59:db:
ff:a9:2b:ea:5d:32:14:0e:0f:ec:f6:48:c2:68:10:
20:ed:f9:3c:38:13:f6:08:15:2f:24:4b:82:d9:8b:
09:36:1e:a0:4c:c8:2c:7a:f9:6a:fc:52:78:39:74:
fd:71:7e:f6:a0:9e:89:27:f8:a4:a9:00:88:b6:b4:
f1:e5:91:ea:b2:4d:22:71:04:be:ad:71:05:b1:25:
79:15:5e:64:e5:2a:8e:a1:0d:4b:08:1f:63:bb:a6:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F2:87:AF:2C:80:FB:6D:DF:19:DC:FD:73:F8:2D:1F:08:AB:EE:23
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:73:dc:cc:27:f7:4c:7d:47:35:5f:7c:cc:d6:d7:ee:c3:c4:
7c:50:e1:1d:d0:ff:62:29:2c:79:07:71:ca:95:4a:32:8b:58:
0e:a8:5d:c8:c8:3c:45:56:20:0a:9b:5b:78:6b:eb:18:58:04:
85:cf:32:77:1d:20:da:e1:38:fb:dc:64:a1:78:df:7d:73:42:
c0:7d:c9:ee:56:8f:35:0f:65:56:31:5f:9a:03:71:fd:3c:01:
dd:3a:03:f7:24:e3:a0:e9:c3:46:46:0b:55:38:f3:a7:ee:19:
d9:b5:cb:90:51:27:47:2e:63:05:65:e7:1d:c0:24:8d:f4:c8:
59:c4:b9:05:41:94:aa:65:64:ff:f4:88:9e:b3:04:5f:90:ef:
a0:81:c5:fa:bc:3d:d0:67:bd:8a:8e:b0:49:40:b9:f8:d8:96:
82:12:88:d5:e6:8d:d9:00:76:ac:2f:e3:fa:29:7e:39:d9:3c:
19:ff:26:d5:fe:91:d0:34:4f:75:5c:22:c3:ef:1f:bb:0b:e3:
f8:3f:af:e4:6e:7c:0d:92:bf:1c:09:28:ea:db:8b:8e:e7:4a:
ee:bb:4e:d9:63:4d:de:3f:68:68:97:63:a9:ef:6b:98:8f:69:
52:f4:9c:52:55:4b:98:3e:e1:b8:27:ff:1f:cf:9e:cc:a9:05:
7b:ec:0a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW90+B5icDwAzBUOnPp0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjYwOTI0MDMwMDUzWhcNMjYwOTI1MDMwMDUzWjAzMTEwLwYDVQQD
Eyg5N2YyODdhZjJjODBmYjZkZGYxOWRjZmQ3M2Y4MmQxZjA4YWJlZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOdGT7VUX92IENBG0YOSErnZ/aPA
iqWeMJ9N5tG3AH+e2SzYZ90YcHT1vo0QSjFPBcUyDzf+nI694Ku88rFzsV0M/yys
HZatx0YdLKScnrDX11tutWtLYfp9xNr2/ZtyeC9d1NLIT5pHaQTLdhh/8A4vAb0B
naQ5ld5NgOWemMv+4/uoYD1SRbphr2bkPFOfKmsR0qqil9AIr/KSx/kIsoUTWdv/
qSvqXTIUDg/s9kjCaBAg7fk8OBP2CBUvJEuC2YsJNh6gTMgsevlq/FJ4OXT9cX72
oJ6JJ/ikqQCItrTx5ZHqsk0icQS+rXEFsSV5FV5k5SqOoQ1LCB9ju6a3FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfyh68sgPtt3xnc/XP4LR8Iq+4jMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXPczCf3
TH1HNV98zNbX7sPEfFDhHdD/YikseQdxypVKMotYDqhdyMg8RVYgCptbeGvrGFgE
hc8ydx0g2uE4+9xkoXjffXNCwH3J7laPNQ9lVjFfmgNx/TwB3ToD9yTjoOnDRkYL
VTjzp+4Z2bXLkFEnRy5jBWXnHcAkjfTIWcS5BUGUqmVk//SInrMEX5DvoIHF+rw9
0Ge9io6wSUC5+NiWghKI1eaN2QB2rC/j+il+Odk8Gf8m1f6R0DRPdVwiw+8fuwvj
+D+v5G58DZK/HAko6tuLjudK7rtO2WNN3j9oaJdjqe9rmI9pUvScUlVLmD7huCf/
H8+ezKkFe+wKbA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:48:15 2026 by rpki-client