Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: hM340GbitAmB/yp7JxnGxKiMDN9IWQuTRFYhfJzgXTY=
Subject key identifier: 32:6F:63:51:1E:39:15:B7:DE:B3:AF:80:55:96:3F:B7:84:3A:D8:31
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 019F9392114DF7F4CB74A98BCBFBC6908E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:00:51 +0000
Manifest this update: Fri 24 Jul 2026 10:00:51 +0000
Manifest next update: Sat 25 Jul 2026 10:00:51 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: aiHb4a/H+yOL8/2d50vnT5WGAU2T6R12hMPf4zpGq3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:11:4d:f7:f4:cb:74:a9:8b:cb:fb:c6:90:8e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Jul 24 10:00:51 2026 GMT
Not After : Jul 25 10:00:51 2026 GMT
Subject: CN=326f63511e3915b7deb3af8055963fb7843ad831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:56:2e:38:0a:c0:79:df:56:49:a3:ab:ca:
7f:e8:b5:cc:d5:46:d5:6a:bb:23:aa:a6:57:2f:aa:
77:af:c1:89:03:8e:42:36:e8:8b:53:3b:ae:d0:bd:
cb:71:0f:d9:b3:a4:16:9e:e3:de:fc:dd:86:03:59:
f9:b0:5b:74:97:ff:39:42:f8:06:09:5c:17:b1:a8:
d3:4b:f5:79:ea:f3:8c:fc:41:6e:59:9f:7a:35:b6:
f2:1a:9d:67:aa:67:da:5b:52:3d:dc:a7:82:14:cb:
36:43:0f:69:bc:fb:d3:ab:42:be:5e:64:33:97:f5:
b8:c7:74:9f:c6:fc:53:84:d6:2c:bd:de:24:d9:26:
63:fd:30:97:ab:1c:67:e9:2e:ad:ce:08:05:92:58:
fd:e7:ed:0c:fd:07:17:ae:60:fd:0c:79:09:76:71:
c7:42:25:72:54:35:76:36:eb:a7:a2:ca:ac:d5:f2:
73:9b:ca:6f:7f:38:67:c5:19:f3:f7:e3:44:6e:fa:
38:7a:5b:c5:0e:95:32:4e:d5:92:8b:6b:39:a2:62:
e9:f8:34:4e:9f:18:c6:ba:0f:80:3b:dc:33:23:2b:
c0:28:12:c6:ed:b2:a9:7e:cd:6a:d3:ac:9f:5d:ee:
b1:8d:ec:8f:0c:cc:c9:ff:79:c4:eb:e1:95:04:8c:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:63:51:1E:39:15:B7:DE:B3:AF:80:55:96:3F:B7:84:3A:D8:31
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:f7:45:55:36:e0:40:a7:93:f2:af:2b:82:88:c9:2e:43:
fe:3d:bd:3a:01:1a:ca:1e:c0:6f:b9:0a:83:db:3a:a8:52:0d:
93:49:3c:0a:15:e0:fe:a8:94:09:07:26:88:83:07:ad:f1:b4:
61:37:1e:93:e5:92:00:fe:3e:31:0d:f8:e9:66:f0:51:10:ca:
92:d8:50:ae:ed:6f:17:2a:82:72:4c:80:ea:47:6d:4f:36:4f:
5d:ee:6f:3b:48:fb:d5:c8:4a:95:93:07:22:7b:08:1a:88:fe:
6d:02:a6:32:f0:cc:25:4b:01:06:55:f1:7f:65:2a:3e:33:fc:
12:1c:26:86:aa:63:38:2e:ce:ac:68:34:0c:ac:b5:91:d1:10:
49:c0:d4:17:6a:da:7f:1c:c8:31:4c:1c:36:ce:04:e4:84:cb:
09:02:5a:79:c7:4a:b6:20:c8:b4:0e:a2:a8:17:2e:f2:09:6e:
a3:b9:11:47:f5:78:29:6c:35:de:b6:d0:6b:89:48:36:a8:13:
63:ac:1f:c1:8f:e1:44:b4:04:67:16:ea:15:ba:91:c1:bc:06:
5f:dd:f1:14:1e:c2:b8:d4:fb:0e:f2:d6:98:a2:e7:13:cb:3c:
28:76:f7:f6:1f:d5:80:07:c8:99:d0:09:1c:02:cf:f2:05:a8:
9a:27:01:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkhFN9/TLdKmLy/vGkI6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5
OWM4ZTEwHhcNMjYwNzI0MTAwMDUxWhcNMjYwNzI1MTAwMDUxWjAzMTEwLwYDVQQD
EygzMjZmNjM1MTFlMzkxNWI3ZGViM2FmODA1NTk2M2ZiNzg0M2FkODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv9WLjgKwHnfVkmjq8p/6LXM1UbV
arsjqqZXL6p3r8GJA45CNuiLUzuu0L3LcQ/Zs6QWnuPe/N2GA1n5sFt0l/85QvgG
CVwXsajTS/V56vOM/EFuWZ96NbbyGp1nqmfaW1I93KeCFMs2Qw9pvPvTq0K+XmQz
l/W4x3SfxvxThNYsvd4k2SZj/TCXqxxn6S6tzggFklj95+0M/QcXrmD9DHkJdnHH
QiVyVDV2Nuunosqs1fJzm8pvfzhnxRnz9+NEbvo4elvFDpUyTtWSi2s5omLp+DRO
nxjGug+AO9wzIyvAKBLG7bKpfs1q06yfXe6xjeyPDMzJ/3nE6+GVBIxrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJvY1EeORW33rOvgFWWP7eEOtgxMB8GA1UdIwQY
MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt
NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz
LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeb3RVU2
4ECnk/KvK4KIyS5D/j29OgEayh7Ab7kKg9s6qFINk0k8ChXg/qiUCQcmiIMHrfG0
YTcek+WSAP4+MQ346WbwURDKkthQru1vFyqCckyA6kdtTzZPXe5vO0j71chKlZMH
InsIGoj+bQKmMvDMJUsBBlXxf2UqPjP8EhwmhqpjOC7OrGg0DKy1kdEQScDUF2ra
fxzIMUwcNs4E5ITLCQJaecdKtiDItA6iqBcu8gluo7kRR/V4KWw13rbQa4lINqgT
Y6wfwY/hRLQEZxbqFbqRwbwGX93xFB7CuNT7DvLWmKLnE8s8KHb39h/VgAfImdAJ
HALP8gWomicBRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:06 2026 by rpki-client