Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: U9T1UfRVp/lcdQwUQC36cJAH5iuIGYqVinaQkEEAMpw=
Subject key identifier: CA:68:7C:ED:84:29:0A:65:E0:88:EF:B1:9A:B7:86:B9:D0:45:7C:BD
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019F939267A2A47603F23940E71865542158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 10:01:13 +0000
Manifest this update: Fri 24 Jul 2026 10:01:13 +0000
Manifest next update: Sat 25 Jul 2026 10:01:13 +0000
Files and hashes: 1: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (hash: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=)
2: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
3: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
4: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: CZWDFwl6yRnqoeplaWbrSgMM/oxZkixSV/mrDkKfhC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:67:a2:a4:76:03:f2:39:40:e7:18:65:54:21:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Jul 24 10:01:13 2026 GMT
Not After : Jul 25 10:01:13 2026 GMT
Subject: CN=ca687ced84290a65e088efb19ab786b9d0457cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:14:19:3f:7c:21:72:db:63:1c:0a:61:f3:c9:
74:0e:76:f8:93:94:f9:3b:ff:24:0c:46:1c:19:68:
38:89:1b:3f:bb:cf:6b:7b:fd:e7:c0:cb:60:a4:c5:
47:1f:70:df:14:a2:8b:ff:60:a2:cf:af:78:5e:06:
25:17:ed:6d:d8:9d:99:ee:6b:ed:41:cc:66:6f:ab:
91:43:b3:0e:83:13:10:13:b3:1d:48:5c:81:0e:2e:
88:a7:7d:36:a2:ca:ac:12:a4:61:cd:62:97:b4:17:
41:39:6a:00:8f:bb:d1:c9:1a:71:28:00:6a:0c:4b:
86:e3:b0:48:6f:07:7c:3c:c9:3f:1e:44:41:1d:86:
6d:2e:f2:8c:de:72:93:17:be:b3:70:dd:21:94:9c:
f5:17:f2:24:0e:6b:57:2e:a8:5e:e6:0c:f1:75:e4:
9b:24:31:ce:96:19:28:52:fc:39:71:59:d4:29:77:
47:7c:9b:75:d9:34:4d:f7:c6:c7:1e:47:6a:b7:1b:
1f:5a:ba:82:28:c5:e3:f0:dd:ea:6a:95:be:5a:91:
98:bf:fd:e1:40:a6:e2:f3:a1:2e:64:e6:c9:4e:a9:
cf:ea:aa:7d:00:b9:25:8f:30:18:92:be:0f:47:2b:
ed:b2:13:4f:65:99:7e:eb:f3:52:d8:80:95:eb:dc:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:7C:ED:84:29:0A:65:E0:88:EF:B1:9A:B7:86:B9:D0:45:7C:BD
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9c:35:4a:14:24:45:04:a8:5f:78:f0:83:3d:1d:c2:37:ef:
d9:af:15:cf:8a:5f:50:21:13:04:54:5a:01:7c:a2:ba:d0:61:
c9:05:0a:1a:25:43:00:6a:bf:83:b7:08:85:29:da:bb:1b:23:
b7:ab:68:ca:35:69:85:47:51:da:17:5c:f8:c5:10:5f:d7:79:
b7:72:bd:e2:d5:40:64:21:14:46:fe:f3:f5:28:24:d5:4c:71:
d9:f6:bd:1a:a4:32:b4:92:70:a0:af:ce:75:41:f7:18:4f:5d:
44:f9:cc:2a:71:73:4f:44:0b:6d:38:a5:86:84:90:69:d6:c1:
ea:2b:a3:02:ec:54:67:3a:39:15:10:48:c1:4a:9c:eb:4b:da:
38:42:20:26:69:93:2d:34:15:a9:f2:f8:bc:7f:cb:78:26:27:
98:cf:77:10:48:ba:e5:02:c6:48:79:7c:9b:c3:58:b7:93:76:
1e:29:cc:c8:e3:df:7f:9b:1b:36:6a:25:b4:1c:93:95:15:fb:
06:32:aa:cf:6a:c5:b2:fd:c0:81:93:96:cf:25:c8:ef:16:dc:
90:23:c5:ae:f4:81:03:2e:0c:5b:b0:5e:6d:51:8e:01:e7:5f:
25:ea:2b:f8:6d:e5:bf:c3:8b:1b:01:92:d5:e9:31:b2:e1:e4:
db:7c:f0:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkmeipHYD8jlA5xhlVCFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl
N2Y2MjkwHhcNMjYwNzI0MTAwMTEzWhcNMjYwNzI1MTAwMTEzWjAzMTEwLwYDVQQD
EyhjYTY4N2NlZDg0MjkwYTY1ZTA4OGVmYjE5YWI3ODZiOWQwNDU3Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BQZP3whcttjHAph88l0Dnb4k5T5
O/8kDEYcGWg4iRs/u89re/3nwMtgpMVHH3DfFKKL/2Ciz694XgYlF+1t2J2Z7mvt
Qcxmb6uRQ7MOgxMQE7MdSFyBDi6Ip302osqsEqRhzWKXtBdBOWoAj7vRyRpxKABq
DEuG47BIbwd8PMk/HkRBHYZtLvKM3nKTF76zcN0hlJz1F/IkDmtXLqhe5gzxdeSb
JDHOlhkoUvw5cVnUKXdHfJt12TRN98bHHkdqtxsfWrqCKMXj8N3qapW+WpGYv/3h
QKbi86EuZObJTqnP6qp9ALkljzAYkr4PRyvtshNPZZl+6/NS2ICV69wQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpofO2EKQpl4IjvsZq3hrnQRXy9MB8GA1UdIwQY
MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt
MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh
LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5w1ShQk
RQSoX3jwgz0dwjfv2a8Vz4pfUCETBFRaAXyiutBhyQUKGiVDAGq/g7cIhSnauxsj
t6toyjVphUdR2hdc+MUQX9d5t3K94tVAZCEURv7z9Sgk1Uxx2fa9GqQytJJwoK/O
dUH3GE9dRPnMKnFzT0QLbTilhoSQadbB6iujAuxUZzo5FRBIwUqc60vaOEIgJmmT
LTQVqfL4vH/LeCYnmM93EEi65QLGSHl8m8NYt5N2HinMyOPff5sbNmoltByTlRX7
BjKqz2rFsv3AgZOWzyXI7xbckCPFrvSBAy4MW7BebVGOAedfJeor+G3lv8OLGwGS
1ekxsuHk23zwnw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:49 2026 by rpki-client