Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: nbzn9cZsiU8Eeqzi/a1rUBMZfInIOiyg/Uw3UP9/NO4=
Subject key identifier: D1:D1:40:6C:08:74:6B:18:5E:38:45:C4:21:E7:DF:96:E2:22:E5:1B
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 019F92B5FA23063457DE24268D3F929AA628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 1453
Signing time: Fri 24 Jul 2026 06:00:27 +0000
Manifest this update: Fri 24 Jul 2026 06:00:27 +0000
Manifest next update: Sat 25 Jul 2026 06:00:27 +0000
Files and hashes: 1: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: fNt4mqg5AJYIhQ+97Q+HTY+3JbOfAEu/wam/D9We9GY=)
2: KjOmuxG94Xm5JcaoG5LkIX4wqRM.roa (hash: figV7Vwu7+lWHqzMVdR1BOg/1W1wp1AGa+sIzcCr7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:fa:23:06:34:57:de:24:26:8d:3f:92:9a:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Jul 24 06:00:27 2026 GMT
Not After : Jul 25 06:00:27 2026 GMT
Subject: CN=d1d1406c08746b185e3845c421e7df96e222e51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:cf:0e:45:bd:12:70:4f:c3:b8:7e:5b:37:
4f:3c:42:fd:1e:a6:aa:e9:3e:6e:42:ea:f3:16:1f:
93:7a:8c:98:f6:90:a7:8d:3b:60:96:67:b8:cd:a9:
b9:d8:40:59:85:3b:79:83:f7:54:d8:a4:b5:51:9c:
54:8f:93:ef:29:ec:ed:a7:04:fa:a3:80:da:0a:5a:
ca:05:47:03:09:42:d1:29:7a:19:9a:21:08:04:fb:
34:b5:b5:fc:ed:91:a2:94:68:57:9b:b8:d4:9d:a0:
1b:fb:b9:8f:60:6d:c8:d3:0c:4c:63:85:fd:da:77:
93:b5:84:65:a2:3a:e7:62:f1:69:94:b4:ec:b2:ab:
eb:68:8f:2d:48:8b:99:c2:ea:b3:96:5d:e5:e2:83:
83:13:37:cc:24:a3:b7:69:37:ed:60:40:2f:21:21:
8f:c6:27:a3:7b:7d:66:0c:85:be:d7:26:ab:53:fc:
b3:70:c0:f1:1b:b5:59:85:8c:b9:86:39:ee:35:69:
e1:77:8e:7a:ab:cf:92:0a:67:e6:e6:57:e1:53:75:
47:8b:aa:72:1c:3a:77:a0:4a:88:69:da:13:36:1a:
ec:ab:d9:04:ab:f2:92:53:b4:50:08:15:23:20:7a:
a5:05:83:6b:c2:ae:de:69:59:84:c0:84:e6:55:12:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:40:6C:08:74:6B:18:5E:38:45:C4:21:E7:DF:96:E2:22:E5:1B
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:15:19:8f:81:db:8a:b8:4b:6f:9c:e9:53:c2:7e:55:1d:a2:
e9:b9:7d:e7:a5:86:dd:5d:2c:f8:33:f6:5b:e5:25:e2:25:13:
c6:2a:88:1a:aa:e1:9a:1e:94:ce:38:74:91:09:31:6e:45:84:
36:62:9e:b8:38:ab:5f:0a:32:ee:aa:d3:e3:83:88:39:01:c1:
5e:cf:c6:d2:f1:ed:61:59:ef:44:5c:2c:e8:6f:72:4c:bf:64:
14:f6:af:c4:8d:64:c4:12:db:10:0d:cd:51:30:d7:0c:06:68:
75:9e:8d:9d:97:b9:57:10:7f:d1:9d:c2:bb:b5:13:88:40:b2:
cf:24:40:98:23:78:4f:6e:2a:fc:cc:51:31:d3:40:d0:03:47:
12:12:d6:63:79:7e:76:a3:e1:07:15:10:5e:18:25:fe:1c:71:
c3:86:58:6f:a3:22:a3:5b:fe:2a:4b:a0:93:d6:68:82:36:25:
b1:75:d3:99:77:d2:23:4a:90:62:1b:84:2a:11:cb:79:99:1c:
81:5c:0d:71:3a:56:8d:e3:12:8e:0a:fb:92:d9:30:0d:43:e1:
26:1b:8c:47:6c:a9:2d:1c:92:e1:c9:01:eb:c6:05:df:6a:e4:
91:25:83:3d:d8:47:54:91:1a:74:30:ab:6b:a4:f4:7b:50:1c:
c7:3a:b5:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StfojBjRX3iQmjT+SmqYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MTk0NjE4NDQ1NDk4MjQ1MDBiN2NkMWM0NTFkODI0YmE2
ZTU2NzcwHhcNMjYwNzI0MDYwMDI3WhcNMjYwNzI1MDYwMDI3WjAzMTEwLwYDVQQD
EyhkMWQxNDA2YzA4NzQ2YjE4NWUzODQ1YzQyMWU3ZGY5NmUyMjJlNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhTPDkW9EnBPw7h+WzdPPEL9Hqaq
6T5uQurzFh+TeoyY9pCnjTtglme4zam52EBZhTt5g/dU2KS1UZxUj5PvKeztpwT6
o4DaClrKBUcDCULRKXoZmiEIBPs0tbX87ZGilGhXm7jUnaAb+7mPYG3I0wxMY4X9
2neTtYRlojrnYvFplLTssqvraI8tSIuZwuqzll3l4oODEzfMJKO3aTftYEAvISGP
xieje31mDIW+1yarU/yzcMDxG7VZhYy5hjnuNWnhd456q8+SCmfm5lfhU3VHi6py
HDp3oEqIadoTNhrsq9kEq/KSU7RQCBUjIHqlBYNrwq7eaVmEwITmVRJ64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHRQGwIdGsYXjhFxCHn35biIuUbMB8GA1UdIwQY
MBaAFCkZRhhEVJgkUAt80cRR2CS6blZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYt
YjZlYTgyZjE5MjIwLzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kOGM2ZjItNDE5MS00NmU2LThkYjYtYjZlYTgyZjE5MjIw
LzEvS1JsR0dFUlVtQ1JRQzN6UnhGSFlKTHB1Vm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRUZj4Hb
irhLb5zpU8J+VR2i6bl956WG3V0s+DP2W+Ul4iUTxiqIGqrhmh6Uzjh0kQkxbkWE
NmKeuDirXwoy7qrT44OIOQHBXs/G0vHtYVnvRFws6G9yTL9kFPavxI1kxBLbEA3N
UTDXDAZodZ6NnZe5VxB/0Z3Cu7UTiECyzyRAmCN4T24q/MxRMdNA0ANHEhLWY3l+
dqPhBxUQXhgl/hxxw4ZYb6Mio1v+Kkugk9ZogjYlsXXTmXfSI0qQYhuEKhHLeZkc
gVwNcTpWjeMSjgr7ktkwDUPhJhuMR2ypLRyS4ckB68YF32rkkSWDPdhHVJEadDCr
a6T0e1Acxzq1kQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:28:03 2026 by rpki-client