Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: cNIN0CLuOUzd5TwLK8UXpVTXz2+woR7MhssRyM2TuHc=
Subject key identifier: A4:E9:68:56:84:C6:10:43:34:19:73:1D:C8:66:D1:7A:96:3A:38:34
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019F90C7661F1E52A4383864BAB76F2B37CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1A62
Signing time: Thu 23 Jul 2026 21:00:14 +0000
Manifest this update: Thu 23 Jul 2026 21:00:14 +0000
Manifest next update: Fri 24 Jul 2026 21:00:14 +0000
Files and hashes: 1: BZbjJl33wtC5Kx6I29mOqiiRHZA.roa (hash: UwvFEfahmlGM3+zeVy05GqUYOrXQjKRZoc15GwQat18=)
2: E6q6eSrLi268w1uPKMft6UdzObk.roa (hash: S1oys4ak/3DgjByILcVQEYtOAEhLnSHTS9hR+3ZaKKA=)
3: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
4: MLJTDLF6ov2d8CfzpAjbs1bI62A.roa (hash: +MihOq2rYGVN7ggNp0KRd6/6WeF44oBwxXDejz3+p68=)
5: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
6: cXLvsHvbg46dXys6tsFGlStaivg.roa (hash: xZAflEOGoHPXdRw1KqKL76cGPns+HOuukJvybKU+IFM=)
7: n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa (hash: FSpOuQ2nrISxfoUe3fSxdbkQG7z+i/gLxzEWx9TRdDM=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: 3z3WaY5RPwHR8O9h4cVn/U4Sq6WtQU7K18jex0Cyqbc=)
9: whZDnVbA7DTq6XCQtpnwVv571yY.roa (hash: jaXDYTJdd7AC0EYJLuwjwpmbHTLmmIjlV4gnm9WnvPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:66:1f:1e:52:a4:38:38:64:ba:b7:6f:2b:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jul 23 21:00:14 2026 GMT
Not After : Jul 24 21:00:14 2026 GMT
Subject: CN=a4e9685684c610433419731dc866d17a963a3834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:c1:9e:bb:f0:25:49:3d:b4:bb:2d:20:62:
0b:c5:00:4d:1f:5b:3f:0c:52:70:17:66:b2:3f:00:
16:16:72:b7:b9:30:f7:4f:38:39:4c:e8:7a:a4:07:
73:ca:8b:68:84:37:9e:bf:f3:67:17:0d:51:94:0e:
c1:fe:ab:21:85:b3:07:14:78:2b:97:03:f8:df:b0:
f0:f9:d5:5f:ed:29:1c:50:34:bc:9b:16:13:03:9c:
be:af:14:6d:89:6c:2e:da:7e:73:a3:db:2b:f3:a3:
11:e2:d6:33:46:ad:72:73:c6:5a:45:54:2e:68:c2:
f7:dc:a5:b9:e2:88:aa:e7:77:2d:5c:f9:91:24:24:
39:84:b1:06:cc:68:a1:fa:e8:76:3a:c5:5e:e7:f0:
87:be:d2:a2:82:80:57:58:43:5f:83:72:3a:2e:e9:
23:5f:04:9a:f8:9d:4c:d8:44:e6:6a:5e:09:3a:a4:
f0:54:32:88:08:de:55:dc:b1:7b:1f:58:6b:55:57:
67:c9:49:ae:12:62:5d:7e:5b:92:12:d1:09:aa:f3:
89:4a:3a:4e:3f:cd:a1:38:81:30:08:15:fb:b1:88:
c2:11:e8:8a:33:88:51:0e:c7:92:04:80:f7:80:e3:
43:0a:06:37:26:c0:09:b8:4c:f9:02:0c:2f:5d:88:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:68:56:84:C6:10:43:34:19:73:1D:C8:66:D1:7A:96:3A:38:34
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:78:3d:3b:54:cd:bb:25:a7:e0:89:69:1d:92:8b:b6:5d:
a0:6c:e7:58:46:e7:eb:84:e0:ef:7b:c3:6f:ef:ab:bb:c1:62:
26:82:3f:ac:2a:c3:27:91:b9:cd:f0:1c:b3:63:de:ae:db:e4:
d9:c6:4d:28:ab:ca:cf:80:41:eb:5b:67:f5:42:87:ff:76:a0:
a4:6f:5e:92:fa:ae:ec:00:52:6b:00:8d:aa:1b:80:c4:11:a3:
62:5b:ec:c7:6c:a1:06:0c:9b:84:0b:97:80:94:61:df:29:8b:
e3:97:c1:fe:1c:2c:fe:20:bd:d7:d7:ea:f5:7f:07:a1:ab:cb:
6f:a9:c5:41:14:66:ef:6d:f6:3f:c1:88:6f:8c:46:f7:7e:6e:
f1:ac:09:77:f2:b5:60:4e:4d:e0:49:3a:bb:9c:6a:10:8e:3a:
f6:44:dd:0c:45:6e:1d:a7:72:9a:f2:52:f6:db:b4:5a:cd:ba:
e1:ec:5b:dc:21:6b:e3:3a:e0:b7:b8:e3:46:47:7c:05:45:62:
b3:82:c3:08:8d:5d:a5:7c:e2:12:6f:d1:cf:5f:aa:dd:eb:b0:
1f:4d:24:98:30:30:5a:0d:15:fa:be:16:41:e0:a9:35:fc:49:
22:e1:8c:b1:dd:77:0e:cf:95:89:03:3f:5a:a6:10:0f:73:cf:
d6:4b:1f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx2YfHlKkODhkurdvKzfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwNzIzMjEwMDE0WhcNMjYwNzI0MjEwMDE0WjAzMTEwLwYDVQQD
EyhhNGU5Njg1Njg0YzYxMDQzMzQxOTczMWRjODY2ZDE3YTk2M2EzODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMPBnrvwJUk9tLstIGILxQBNH1s/
DFJwF2ayPwAWFnK3uTD3Tzg5TOh6pAdzyotohDeev/NnFw1RlA7B/qshhbMHFHgr
lwP437Dw+dVf7SkcUDS8mxYTA5y+rxRtiWwu2n5zo9sr86MR4tYzRq1yc8ZaRVQu
aML33KW54oiq53ctXPmRJCQ5hLEGzGih+uh2OsVe5/CHvtKigoBXWENfg3I6Lukj
XwSa+J1M2ETmal4JOqTwVDKICN5V3LF7H1hrVVdnyUmuEmJdfluSEtEJqvOJSjpO
P82hOIEwCBX7sYjCEeiKM4hRDseSBID3gONDCgY3JsAJuEz5AgwvXYiI1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTpaFaExhBDNBlzHchm0XqWOjg0MB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUJ4PTtU
zbslp+CJaR2Si7ZdoGznWEbn64Tg73vDb++ru8FiJoI/rCrDJ5G5zfAcs2Pertvk
2cZNKKvKz4BB61tn9UKH/3agpG9ekvqu7ABSawCNqhuAxBGjYlvsx2yhBgybhAuX
gJRh3ymL45fB/hws/iC919fq9X8HoavLb6nFQRRm7232P8GIb4xG935u8awJd/K1
YE5N4Ek6u5xqEI469kTdDEVuHadymvJS9tu0Ws264exb3CFr4zrgt7jjRkd8BUVi
s4LDCI1dpXziEm/Rz1+q3euwH00kmDAwWg0V+r4WQeCpNfxJIuGMsd13Ds+ViQM/
WqYQD3PP1ksfTg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:31 2026 by rpki-client