Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: e+KR4RDyWB3+hRY1rokcxrRMM0u9hK5ve9y6Cy1x54k=
Subject key identifier: FA:F8:8C:47:08:27:E9:0D:1E:A2:BF:1C:67:AB:11:8E:F4:9F:00:7D
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019F94A4B5978E71E118784D810A81ED1E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 1358
Signing time: Fri 24 Jul 2026 15:00:49 +0000
Manifest this update: Fri 24 Jul 2026 15:00:49 +0000
Manifest next update: Sat 25 Jul 2026 15:00:49 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: UCuWZPcRgok0rmwa272txHB9Q9wNewAt/LYjWOwPiJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:b5:97:8e:71:e1:18:78:4d:81:0a:81:ed:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Jul 24 15:00:49 2026 GMT
Not After : Jul 25 15:00:49 2026 GMT
Subject: CN=faf88c470827e90d1ea2bf1c67ab118ef49f007d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:61:ed:e0:48:aa:0c:fe:cf:73:d2:a3:b8:
eb:98:ae:4f:96:ff:04:a4:9d:47:f6:a2:09:ba:da:
d4:4b:cf:14:c6:d6:f4:32:6a:78:7b:0b:46:de:a5:
d9:44:5b:65:ce:9d:37:3c:de:cd:a0:8e:b2:f6:02:
2b:d9:35:54:57:13:58:01:8b:2e:5c:fb:28:fb:65:
9a:8f:fc:72:7b:d8:e3:24:4c:ed:4a:b5:56:d9:4c:
2f:43:a5:25:3a:84:ad:93:73:f5:6b:1f:84:a3:96:
76:95:19:9e:57:d7:d6:34:69:68:f0:36:18:df:3d:
75:94:bc:02:ae:b8:89:bc:c0:b3:ac:58:1a:d5:0c:
47:ca:c0:6a:58:28:16:70:4e:a9:41:5b:8e:6b:87:
f2:5b:47:bb:b5:e0:cf:61:dc:53:82:50:8e:7b:ff:
f5:bf:2d:5f:bb:09:a3:96:0b:ac:b9:c8:78:9e:cb:
09:60:e0:c9:cc:14:df:9a:29:67:be:73:51:03:79:
f1:a5:8a:af:73:c1:28:81:c4:54:79:dc:39:c7:b4:
f0:39:12:00:86:e4:d1:54:1a:59:82:70:97:ce:d5:
b8:69:97:71:c1:3c:c0:6a:5b:cd:93:7c:a7:23:0d:
c4:50:ad:15:b2:17:37:33:b5:d9:76:3b:10:23:a6:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:8C:47:08:27:E9:0D:1E:A2:BF:1C:67:AB:11:8E:F4:9F:00:7D
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:15:f0:4d:31:d7:f3:57:6a:4d:da:df:30:c5:b0:7b:b6:a8:
64:1e:55:09:a3:3e:b6:6e:65:d9:79:17:3d:10:34:63:75:94:
1e:b0:07:85:a3:c7:2b:4a:5d:b9:8a:56:77:b5:d7:8f:1e:d2:
b1:c4:a5:29:03:59:ba:6b:df:d0:45:c0:fe:30:f2:2a:75:60:
33:12:32:9c:2c:ab:6a:23:bf:24:5f:84:3c:56:c3:d8:ff:34:
3c:41:3c:3d:af:fe:23:82:99:ab:fd:69:2b:c2:b3:05:c1:65:
f6:ae:1d:85:2a:a4:b4:07:a5:bf:de:38:27:62:e0:85:9d:55:
f5:05:48:e9:1e:07:d6:bd:06:6f:4d:1e:80:46:ab:fc:df:bf:
d8:c1:a2:8c:41:48:50:d6:fe:6b:0b:9f:44:48:90:92:4f:af:
58:3e:08:d4:9e:a6:71:1f:62:91:fa:7f:64:2a:76:41:bb:42:
55:3b:6a:c1:6b:ba:aa:a7:24:56:6a:3d:20:d0:9f:88:e6:ad:
2a:5d:d1:c7:15:5a:ca:a3:f3:54:6f:8d:dc:76:fc:94:42:7e:
c9:1c:4a:7c:a8:51:91:28:38:10:62:17:a1:89:ac:d5:21:46:
fb:02:af:fd:19:79:ce:00:ee:b6:8a:4f:82:e2:1e:b0:14:68:
de:63:66:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpLWXjnHhGHhNgQqB7R5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNzZmNzdkYTg0MWI3Yjk0MjE1YjZmYWMyZDQxYTcxYzIx
NTE2MDEwHhcNMjYwNzI0MTUwMDQ5WhcNMjYwNzI1MTUwMDQ5WjAzMTEwLwYDVQQD
EyhmYWY4OGM0NzA4MjdlOTBkMWVhMmJmMWM2N2FiMTE4ZWY0OWYwMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U5h7eBIqgz+z3PSo7jrmK5Plv8E
pJ1H9qIJutrUS88Uxtb0Mmp4ewtG3qXZRFtlzp03PN7NoI6y9gIr2TVUVxNYAYsu
XPso+2Waj/xye9jjJEztSrVW2UwvQ6UlOoStk3P1ax+Eo5Z2lRmeV9fWNGlo8DYY
3z11lLwCrriJvMCzrFga1QxHysBqWCgWcE6pQVuOa4fyW0e7teDPYdxTglCOe//1
vy1fuwmjlgusuch4nssJYODJzBTfmilnvnNRA3nxpYqvc8EogcRUedw5x7TwORIA
huTRVBpZgnCXztW4aZdxwTzAalvNk3ynIw3EUK0Vshc3M7XZdjsQI6btFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr4jEcIJ+kNHqK/HGerEY70nwB9MB8GA1UdIwQY
MBaAFJB2932oQbe5QhW2+sLUGnHCFRYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEt
ZTYzY2U1NTM3MGViLzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lMWQ2YjctNTU1Yy00ZDliLWFmZTEtZTYzY2U1NTM3MGVi
LzEva0hiM2ZhaEJ0N2xDRmJiNnd0UWFjY0lWRmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhXwTTHX
81dqTdrfMMWwe7aoZB5VCaM+tm5l2XkXPRA0Y3WUHrAHhaPHK0pduYpWd7XXjx7S
scSlKQNZumvf0EXA/jDyKnVgMxIynCyraiO/JF+EPFbD2P80PEE8Pa/+I4KZq/1p
K8KzBcFl9q4dhSqktAelv944J2LghZ1V9QVI6R4H1r0Gb00egEar/N+/2MGijEFI
UNb+awufREiQkk+vWD4I1J6mcR9ikfp/ZCp2QbtCVTtqwWu6qqckVmo9INCfiOat
Kl3RxxVayqPzVG+N3Hb8lEJ+yRxKfKhRkSg4EGIXoYms1SFG+wKv/Rl5zgDutopP
guIesBRo3mNm5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:29 2026 by rpki-client