Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: +U7pRUJaL4tXCyKASPBu9bqgy0qfJxb17oPFc+d31Is=
Subject key identifier: 25:3C:1F:25:95:1F:A3:FE:0D:36:01:11:76:50:E4:0C:EC:96:23:79
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019F92483BD42398B761982F1DCE6420856C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 16BF
Signing time: Fri 24 Jul 2026 04:00:35 +0000
Manifest this update: Fri 24 Jul 2026 04:00:35 +0000
Manifest next update: Sat 25 Jul 2026 04:00:35 +0000
Files and hashes: 1: Iria4wIw1fU8cA4sqt1elN464-4.roa (hash: ISbIWO425ImSYvAJvg4vsV9/XdUj9FmYfNuddwC0P7Y=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: Ryi09diBybQuLh+/NowwY/Mn9VH4ha1f3fVTSFF21xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:3b:d4:23:98:b7:61:98:2f:1d:ce:64:20:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Jul 24 04:00:35 2026 GMT
Not After : Jul 25 04:00:35 2026 GMT
Subject: CN=253c1f25951fa3fe0d3601117650e40cec962379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:17:cd:b2:0c:55:07:db:53:2a:d5:80:ae:
39:1a:2e:af:cf:5f:a6:82:6c:83:98:76:93:80:97:
42:0c:0d:da:61:fa:ca:b1:4b:5f:86:46:c6:14:f5:
40:5b:f9:31:74:c4:6e:ff:e9:1a:77:08:c9:bc:42:
dd:aa:98:70:80:ea:f5:78:0b:af:b6:b9:e9:84:0c:
21:f8:59:46:11:7b:c7:c0:da:28:8e:31:d3:78:23:
d7:6a:74:e4:38:af:77:96:4e:05:34:2d:42:b7:ae:
ee:b4:a6:40:62:33:38:61:87:90:c1:e8:ba:9b:d0:
40:6c:3d:ca:5e:82:e5:7c:ed:6c:09:34:1a:33:72:
09:0b:c2:1c:11:51:b8:4c:52:11:a4:05:65:7e:f4:
de:d8:82:9b:15:8c:ba:4b:4e:6c:5b:d8:64:0a:5e:
fc:f8:39:83:15:f4:6a:dd:33:82:2e:86:a0:68:06:
d3:33:ac:14:95:43:d7:3b:0c:36:e3:ad:3a:3a:81:
21:c2:90:47:8e:f6:3c:a0:31:6f:1a:e0:52:b1:cb:
62:5c:9a:79:bc:26:1a:47:72:bc:6a:c1:7f:36:85:
38:7d:4d:8f:ad:17:f9:f5:c5:06:a8:96:ba:99:b0:
4b:dd:15:c1:2d:28:a6:2b:24:74:ee:69:99:e6:d7:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:1F:25:95:1F:A3:FE:0D:36:01:11:76:50:E4:0C:EC:96:23:79
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:19:cb:0c:e3:47:0c:40:c6:f0:86:e8:d8:17:23:2c:e8:
fb:8a:09:db:1d:cc:9b:76:f5:05:85:28:78:89:96:60:75:94:
00:8d:9e:4c:6f:88:a5:d9:cf:e0:e4:d9:87:ff:04:c3:f9:68:
16:5e:0a:c2:c1:da:3b:e6:f2:7c:65:7f:fd:83:49:6e:ad:fc:
84:c1:1a:c3:c1:2c:9a:08:c5:5e:a5:05:8c:c9:0a:5c:1c:3c:
b3:a6:22:cc:6d:ed:e2:1d:d2:8b:5a:28:a4:2a:aa:78:93:bd:
9f:54:48:25:6b:35:21:73:21:37:46:ae:b9:cc:9a:d2:ee:f2:
b6:1c:c9:00:65:ae:a3:09:59:02:e0:be:5c:3d:ca:97:fd:98:
c7:d9:e6:5d:94:80:33:af:83:62:96:85:8f:cd:1f:7b:32:51:
bf:8b:18:64:77:74:86:a3:e4:39:23:3d:e9:ea:4f:97:50:7e:
06:cd:3d:a1:42:9a:73:77:42:29:2d:54:e0:47:51:61:f9:94:
22:27:20:94:73:94:31:9e:b8:7a:1b:29:4b:94:8f:91:67:dc:
bc:3b:45:b2:31:05:3e:2d:03:63:3c:25:99:63:8b:70:18:ee:
2b:71:98:30:c7:e9:78:03:fe:80:2d:9d:6c:6f:6c:cf:f7:74:
75:c7:86:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSDvUI5i3YZgvHc5kIIVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk
NjhiY2YwHhcNMjYwNzI0MDQwMDM1WhcNMjYwNzI1MDQwMDM1WjAzMTEwLwYDVQQD
EygyNTNjMWYyNTk1MWZhM2ZlMGQzNjAxMTE3NjUwZTQwY2VjOTYyMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkAXzbIMVQfbUyrVgK45Gi6vz1+m
gmyDmHaTgJdCDA3aYfrKsUtfhkbGFPVAW/kxdMRu/+kadwjJvELdqphwgOr1eAuv
trnphAwh+FlGEXvHwNoojjHTeCPXanTkOK93lk4FNC1Ct67utKZAYjM4YYeQwei6
m9BAbD3KXoLlfO1sCTQaM3IJC8IcEVG4TFIRpAVlfvTe2IKbFYy6S05sW9hkCl78
+DmDFfRq3TOCLoagaAbTM6wUlUPXOww24606OoEhwpBHjvY8oDFvGuBSsctiXJp5
vCYaR3K8asF/NoU4fU2PrRf59cUGqJa6mbBL3RXBLSimKyR07mmZ5tej0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU8HyWVH6P+DTYBEXZQ5AzsliN5MB8GA1UdIwQY
MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct
MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw
LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2oZywzj
RwxAxvCG6NgXIyzo+4oJ2x3Mm3b1BYUoeImWYHWUAI2eTG+IpdnP4OTZh/8Ew/lo
Fl4KwsHaO+byfGV//YNJbq38hMEaw8EsmgjFXqUFjMkKXBw8s6YizG3t4h3Si1oo
pCqqeJO9n1RIJWs1IXMhN0auucya0u7ythzJAGWuowlZAuC+XD3Kl/2Yx9nmXZSA
M6+DYpaFj80fezJRv4sYZHd0hqPkOSM96epPl1B+Bs09oUKac3dCKS1U4EdRYfmU
IicglHOUMZ64ehspS5SPkWfcvDtFsjEFPi0DYzwlmWOLcBjuK3GYMMfpeAP+gC2d
bG9sz/d0dceGfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:03 2026 by rpki-client