Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: oDNzWZnSSZSkeWjLdzZN33VFPIGpF9sj/3jUKkYpyLE=
Subject key identifier: 1E:A7:04:94:12:29:2C:E2:23:2B:BE:BC:68:D7:77:D6:C8:EB:17:84
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019F946D75172AFDE6711972257213C764A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 0823
Signing time: Fri 24 Jul 2026 14:00:28 +0000
Manifest this update: Fri 24 Jul 2026 14:00:28 +0000
Manifest next update: Sat 25 Jul 2026 14:00:28 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: QO1/6vzLjS3Zo+eNBGr1Is0Ek6pySalCQbjy+pQDOxQ=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:75:17:2a:fd:e6:71:19:72:25:72:13:c7:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jul 24 14:00:28 2026 GMT
Not After : Jul 25 14:00:28 2026 GMT
Subject: CN=1ea7049412292ce2232bbebc68d777d6c8eb1784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:49:04:b3:05:b0:67:47:87:58:27:a6:c9:
f9:ce:68:57:52:d4:47:36:aa:7f:a5:f6:51:84:e8:
a4:29:82:92:1c:34:f9:2c:4f:94:87:38:08:b0:31:
4c:0a:56:a4:d2:35:7b:2f:b0:1c:ca:19:ca:68:66:
42:67:3b:a3:ed:18:11:26:17:cd:79:8f:11:d5:a0:
cb:c8:6f:76:d3:37:43:5f:45:b4:96:09:68:cd:6d:
24:ce:27:20:e1:37:56:de:6b:8f:24:b4:e2:c4:97:
66:8b:e9:f0:f7:d4:2d:2e:e8:0a:5b:af:db:9c:1b:
a1:f2:2e:ed:29:38:c7:93:33:5d:c0:62:65:ac:33:
37:04:12:19:b5:a2:39:f3:d7:73:18:2f:3c:65:9b:
d9:c8:71:c8:f6:92:98:42:aa:2b:c2:93:88:0e:07:
0a:b0:d3:a9:45:07:36:32:1c:7a:31:22:0f:44:bc:
c5:f1:35:a2:75:1b:14:06:e6:b2:dc:bc:b8:86:2e:
2c:49:10:2a:78:54:31:86:cd:e8:4a:ad:e9:02:52:
23:f0:ca:8b:93:81:b7:a4:73:87:58:84:ca:cd:ff:
43:cf:11:8c:f7:66:01:a1:0d:b5:15:6c:f8:ec:fa:
ff:52:21:bf:f8:8c:f4:d8:3a:8d:2d:70:03:38:47:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:04:94:12:29:2C:E2:23:2B:BE:BC:68:D7:77:D6:C8:EB:17:84
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:93:3a:0c:a7:20:e4:5b:af:e2:10:cf:b9:67:6f:57:bd:
e7:05:e3:5f:6a:f4:64:5b:33:2e:42:bc:97:bb:91:23:66:c6:
14:25:60:59:8e:f1:28:cc:a6:1b:40:65:00:28:bd:fa:66:66:
c0:88:59:45:7d:89:2b:03:aa:3e:a4:9d:08:81:bd:5b:69:dc:
61:67:27:e7:d0:56:ec:e2:44:b1:9a:10:2b:16:58:ef:fc:01:
ba:ab:e9:ce:14:01:a0:e8:30:f6:91:84:61:c3:12:79:6f:84:
0e:fa:9c:c2:21:b2:21:1a:9a:25:8a:72:e4:30:b0:73:5d:7b:
4f:5e:d1:97:b9:6f:76:c9:e5:ae:13:53:72:38:ed:59:67:82:
e3:62:91:83:29:14:75:e8:7b:70:17:7b:fd:9f:53:9c:0f:e6:
7a:a9:8f:3b:c9:62:9a:13:71:00:ac:c8:66:cc:14:a6:16:e9:
44:ab:5b:05:e2:c6:b0:ff:75:64:bc:87:c0:1a:52:de:af:bb:
9f:8a:f4:b1:e0:78:63:f0:e6:c4:04:f5:be:11:a4:7a:1e:48:
43:e4:12:88:03:13:00:fd:93:62:45:fc:5f:26:d6:c9:3c:48:
78:10:24:4c:1e:46:a6:78:ec:58:93:4b:2b:71:ec:ff:f7:5c:
2b:e4:2c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbXUXKv3mcRlyJXITx2SkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl
YTZkN2QwHhcNMjYwNzI0MTQwMDI4WhcNMjYwNzI1MTQwMDI4WjAzMTEwLwYDVQQD
EygxZWE3MDQ5NDEyMjkyY2UyMjMyYmJlYmM2OGQ3NzdkNmM4ZWIxNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKVJBLMFsGdHh1gnpsn5zmhXUtRH
Nqp/pfZRhOikKYKSHDT5LE+UhzgIsDFMClak0jV7L7AcyhnKaGZCZzuj7RgRJhfN
eY8R1aDLyG920zdDX0W0lglozW0kzicg4TdW3muPJLTixJdmi+nw99QtLugKW6/b
nBuh8i7tKTjHkzNdwGJlrDM3BBIZtaI589dzGC88ZZvZyHHI9pKYQqorwpOIDgcK
sNOpRQc2Mhx6MSIPRLzF8TWidRsUBuay3Ly4hi4sSRAqeFQxhs3oSq3pAlIj8MqL
k4G3pHOHWITKzf9DzxGM92YBoQ21FWz47Pr/UiG/+Iz02DqNLXADOEecrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6nBJQSKSziIyu+vGjXd9bI6xeEMB8GA1UdIwQY
MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt
MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0
LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYyTOgyn
IORbr+IQz7lnb1e95wXjX2r0ZFszLkK8l7uRI2bGFCVgWY7xKMymG0BlACi9+mZm
wIhZRX2JKwOqPqSdCIG9W2ncYWcn59BW7OJEsZoQKxZY7/wBuqvpzhQBoOgw9pGE
YcMSeW+EDvqcwiGyIRqaJYpy5DCwc117T17Rl7lvdsnlrhNTcjjtWWeC42KRgykU
deh7cBd7/Z9TnA/meqmPO8limhNxAKzIZswUphbpRKtbBeLGsP91ZLyHwBpS3q+7
n4r0seB4Y/DmxAT1vhGkeh5IQ+QSiAMTAP2TYkX8XybWyTxIeBAkTB5GpnjsWJNL
K3Hs//dcK+Qs0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:20:50 2026 by rpki-client