Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: mpRmiWXpGt96iVNDMN95MbDtupWtDAoLeB4zaHr+zpg=
Subject key identifier: 97:04:9C:F0:BE:8C:73:8A:BA:97:2F:99:FD:E2:FA:46:D9:77:4D:DA
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019F916C4F0643AF2AC380056CF6F7D6C39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0DBC
Signing time: Fri 24 Jul 2026 00:00:22 +0000
Manifest this update: Fri 24 Jul 2026 00:00:22 +0000
Manifest next update: Sat 25 Jul 2026 00:00:22 +0000
Files and hashes: 1: ZAsWuhaFhvmR__Q0aQXj1GfCRnk.roa (hash: DhqcuYQ4zHPXq9RixDGQKhV/M4lScQzHRE9Yz/ZYfyc=)
2: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: +VuNXGLhkg0Sybzt16ob9AAg69hPT5YT02YSX6/GBrk=)
3: o14utqHYZFxhZfVEkq-FP4EOMBc.roa (hash: s9KvSuwsAo53TsaYUbZWoSvNDjlPZyPjIsdZ0Auhgao=)
4: tYmXAiohX3AcRjPUBEAHeBUsE58.roa (hash: FN7T5567tN5nhPmv6bO1Q8VmVLE2iMv0mhNHydh4B2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4f:06:43:af:2a:c3:80:05:6c:f6:f7:d6:c3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jul 24 00:00:22 2026 GMT
Not After : Jul 25 00:00:22 2026 GMT
Subject: CN=97049cf0be8c738aba972f99fde2fa46d9774dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:2a:d6:c2:e3:16:d9:3c:60:5c:e1:bd:75:
7b:04:53:ac:40:32:40:76:2b:c2:b5:ee:89:8a:25:
1e:0f:1f:03:99:5f:3d:de:da:ad:d8:e3:a0:ba:71:
16:87:54:03:47:ad:f8:59:0c:5c:ee:65:c7:62:6e:
f0:8e:94:ae:16:b9:ba:e0:36:fb:2a:3f:0c:9a:48:
45:1a:bf:16:86:16:b3:f4:af:5a:e6:8d:8f:75:e7:
98:a2:bd:56:b6:e4:ed:79:71:75:72:a3:85:41:67:
8f:88:26:89:17:3f:1a:3a:b7:52:30:b4:28:4e:d1:
ee:88:77:72:0f:98:4a:9e:0e:c5:66:4c:a1:79:04:
52:34:2a:a2:5e:9a:b6:52:cf:a8:6a:52:96:1e:a0:
a0:d9:04:0b:30:07:5a:61:56:9a:76:3b:cc:1f:fb:
79:8e:01:8d:5a:48:b7:ed:d6:14:b9:3f:95:93:58:
0a:5c:16:25:46:1e:4a:72:36:37:9a:1e:05:a2:1b:
5c:b1:d0:e9:49:67:6d:4d:b3:1a:f9:59:bb:9b:40:
63:5a:b5:47:47:30:3b:8a:5e:03:3b:e9:33:ec:7e:
29:8e:1e:5c:84:57:c6:91:e1:eb:1d:c5:78:7e:98:
48:60:c7:20:db:74:ff:dd:8d:be:fe:77:d6:48:44:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:9C:F0:BE:8C:73:8A:BA:97:2F:99:FD:E2:FA:46:D9:77:4D:DA
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:95:28:43:6d:ea:66:aa:6c:28:48:30:21:e1:fc:a1:3a:40:
04:34:97:e2:89:e7:0a:d4:86:85:37:c0:11:e7:63:26:91:b7:
94:2b:bb:07:3e:f8:ed:f1:2a:0e:1c:80:2f:0b:34:51:ff:4b:
e5:0e:63:24:3d:8d:13:00:c7:24:30:8c:a8:7f:18:d1:ec:49:
fa:36:8e:cf:59:16:44:61:13:6a:9a:a5:12:1c:f0:a6:b5:f1:
2a:af:07:02:2f:83:07:b6:0b:f5:ab:ba:43:c1:0e:c2:af:b8:
e9:8b:91:6c:1e:74:47:30:91:ca:64:3c:92:df:f4:44:42:f9:
e1:c2:e7:ba:fe:e0:f8:ed:2a:9f:f4:7d:11:fb:af:0d:08:4e:
06:91:a1:dc:bf:c9:3b:64:fc:80:7b:16:84:6c:53:6c:c9:e8:
c0:e7:d6:86:e0:5e:f7:49:41:a2:cb:32:56:b0:33:e4:65:19:
e1:bd:4a:b8:86:7d:a5:d3:73:96:ff:9a:61:b4:e9:79:1b:c7:
02:ef:b8:9b:2d:71:81:5a:2e:4f:7a:7f:2c:1a:88:e0:3f:99:
cf:4d:68:97:53:b6:4a:2f:8f:66:17:01:64:c6:f9:e8:77:e7:
78:62:2a:4a:bd:bc:b5:2d:a2:54:a4:2b:9a:35:79:5f:94:ee:
28:18:51:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbE8GQ68qw4AFbPb31sOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5
ODA1Y2QwHhcNMjYwNzI0MDAwMDIyWhcNMjYwNzI1MDAwMDIyWjAzMTEwLwYDVQQD
Eyg5NzA0OWNmMGJlOGM3MzhhYmE5NzJmOTlmZGUyZmE0NmQ5Nzc0ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/4q1sLjFtk8YFzhvXV7BFOsQDJA
divCte6JiiUeDx8DmV893tqt2OOgunEWh1QDR634WQxc7mXHYm7wjpSuFrm64Db7
Kj8MmkhFGr8Whhaz9K9a5o2PdeeYor1WtuTteXF1cqOFQWePiCaJFz8aOrdSMLQo
TtHuiHdyD5hKng7FZkyheQRSNCqiXpq2Us+oalKWHqCg2QQLMAdaYVaadjvMH/t5
jgGNWki37dYUuT+Vk1gKXBYlRh5KcjY3mh4FohtcsdDpSWdtTbMa+Vm7m0BjWrVH
RzA7il4DO+kz7H4pjh5chFfGkeHrHcV4fphIYMcg23T/3Y2+/nfWSET2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcEnPC+jHOKupcvmf3i+kbZd03aMB8GA1UdIwQY
MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt
MjU2ZGE5NWQxMzQ1LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1
LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZUoQ23q
ZqpsKEgwIeH8oTpABDSX4onnCtSGhTfAEedjJpG3lCu7Bz747fEqDhyALws0Uf9L
5Q5jJD2NEwDHJDCMqH8Y0exJ+jaOz1kWRGETapqlEhzwprXxKq8HAi+DB7YL9au6
Q8EOwq+46YuRbB50RzCRymQ8kt/0REL54cLnuv7g+O0qn/R9EfuvDQhOBpGh3L/J
O2T8gHsWhGxTbMnowOfWhuBe90lBossyVrAz5GUZ4b1KuIZ9pdNzlv+aYbTpeRvH
Au+4my1xgVouT3p/LBqI4D+Zz01ol1O2Si+PZhcBZMb56HfneGIqSr28tS2iVKQr
mjV5X5TuKBhRLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:02 2026 by rpki-client