Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: M6hBkDZCzTIynzI2zMJYpQQMI0Cuio8xZ2Fr7edo9HM=
Subject key identifier: F8:6F:2D:40:4B:4E:CA:76:2F:7A:F7:09:C1:2E:55:0F:C2:6C:67:01
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019F8EA285B96BC75386136C37622AB17912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 11:00:43 +0000
Manifest this update: Thu 23 Jul 2026 11:00:43 +0000
Manifest next update: Fri 24 Jul 2026 11:00:43 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: YxY1BNqNntb9_rMbUTeJ_0YPx2Y.asa (hash: 9EJbKH7qVFxDEjq7ju1hKcNKpr3FzmvX6YfOfaFcrXE=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: 86KtlB06OE/PZenJIQxHRW3Y1rntE5Nj+HuChNCvzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:85:b9:6b:c7:53:86:13:6c:37:62:2a:b1:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jul 23 11:00:43 2026 GMT
Not After : Jul 24 11:00:43 2026 GMT
Subject: CN=f86f2d404b4eca762f7af709c12e550fc26c6701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:16:1b:7e:6d:c3:16:ff:d4:34:bf:95:6c:
e9:85:6f:47:ef:21:a3:e8:3b:82:c2:31:8b:3b:6d:
89:41:9c:f1:79:aa:0e:bb:68:22:65:ae:86:22:94:
cd:03:d4:22:12:d6:a8:48:8e:05:5c:24:1f:0c:e3:
1d:6a:68:b2:a3:4d:d8:b5:bf:af:c3:07:c1:8e:12:
4a:00:e7:70:5f:02:c8:0d:ac:65:f4:02:ff:92:2c:
37:b8:67:44:2f:35:14:d9:83:e9:93:e4:df:56:68:
b3:cd:03:73:1e:c2:6f:37:0b:04:1a:42:6e:72:25:
e4:d6:d3:29:4f:b9:6b:21:a0:c2:54:54:c7:fd:d5:
fd:3d:51:3f:ae:78:9b:2d:dc:5a:13:a8:5d:4c:4c:
53:68:5c:06:9f:d0:61:a1:dd:50:33:d6:46:57:17:
6d:58:71:8b:f5:75:53:2a:56:7e:b0:03:01:23:5f:
03:a1:5e:a6:6a:60:97:59:ed:b6:f9:c3:3f:ba:4c:
48:7c:01:6a:ec:d7:0a:23:59:dd:ad:fe:b9:d3:25:
20:27:2e:2b:c9:ca:b0:37:3a:54:96:b3:79:07:ef:
d1:a7:8c:e3:25:99:7a:af:82:bb:d5:9c:fe:d5:b3:
33:46:3b:95:06:2f:20:c7:ac:f6:55:1e:a1:b5:91:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:2D:40:4B:4E:CA:76:2F:7A:F7:09:C1:2E:55:0F:C2:6C:67:01
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:e8:5f:bb:4c:b1:eb:09:76:8b:81:9c:67:83:eb:6e:d7:
e1:43:51:50:b0:2a:7c:29:06:fa:8f:59:48:41:ed:aa:20:67:
b4:aa:24:34:45:38:45:fc:9b:02:05:88:8e:27:ca:66:6a:e3:
d7:14:01:30:92:27:fc:4b:d9:b1:98:0c:57:29:28:56:ed:ad:
90:c8:b0:25:6b:4c:82:ac:05:a2:6e:9d:98:c9:49:ba:98:e5:
94:c1:98:1b:89:7d:c2:8e:90:7a:e7:98:49:6c:df:af:e8:93:
c9:cb:0c:b2:ec:39:7e:3e:15:79:76:f2:37:fa:a1:35:ca:7e:
2c:e9:c1:17:e8:fd:83:bf:b0:2f:45:6e:05:27:22:71:01:6d:
98:7c:93:e9:ca:f0:3e:63:82:94:67:9b:6e:15:ec:23:e2:af:
e8:b6:66:ff:91:27:49:7a:17:90:cf:fb:51:b4:c9:65:da:91:
7b:ee:66:df:f9:22:d0:28:20:f3:1e:3a:2d:21:37:86:29:59:
a3:89:1f:d3:16:e9:46:7d:c8:b8:c1:20:ca:af:29:d0:77:3d:
a1:ba:d5:13:b0:c0:aa:48:e6:45:a9:8b:ca:9e:57:19:bc:77:
85:24:dd:61:9c:5f:af:c2:9b:2e:78:23:a8:9e:c1:96:54:a6:
89:34:d1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OooW5a8dThhNsN2IqsXkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj
OTc2MDEwHhcNMjYwNzIzMTEwMDQzWhcNMjYwNzI0MTEwMDQzWjAzMTEwLwYDVQQD
EyhmODZmMmQ0MDRiNGVjYTc2MmY3YWY3MDljMTJlNTUwZmMyNmM2NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EQWG35twxb/1DS/lWzphW9H7yGj
6DuCwjGLO22JQZzxeaoOu2giZa6GIpTNA9QiEtaoSI4FXCQfDOMdamiyo03Ytb+v
wwfBjhJKAOdwXwLIDaxl9AL/kiw3uGdELzUU2YPpk+TfVmizzQNzHsJvNwsEGkJu
ciXk1tMpT7lrIaDCVFTH/dX9PVE/rnibLdxaE6hdTExTaFwGn9Bhod1QM9ZGVxdt
WHGL9XVTKlZ+sAMBI18DoV6mamCXWe22+cM/ukxIfAFq7NcKI1ndrf650yUgJy4r
ycqwNzpUlrN5B+/Rp4zjJZl6r4K71Zz+1bMzRjuVBi8gx6z2VR6htZG+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhvLUBLTsp2L3r3CcEuVQ/CbGcBMB8GA1UdIwQY
MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt
MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx
LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVjoX7tM
sesJdouBnGeD627X4UNRULAqfCkG+o9ZSEHtqiBntKokNEU4RfybAgWIjifKZmrj
1xQBMJIn/EvZsZgMVykoVu2tkMiwJWtMgqwFom6dmMlJupjllMGYG4l9wo6QeueY
SWzfr+iTycsMsuw5fj4VeXbyN/qhNcp+LOnBF+j9g7+wL0VuBScicQFtmHyT6crw
PmOClGebbhXsI+Kv6LZm/5EnSXoXkM/7UbTJZdqRe+5m3/ki0Cgg8x46LSE3hilZ
o4kf0xbpRn3IuMEgyq8p0Hc9obrVE7DAqkjmRamLyp5XGbx3hSTdYZxfr8KbLngj
qJ7BllSmiTTRXQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:49 2026 by rpki-client