Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
File: kqOPWtZym-9NSerlHAFGmCIewUY.mft (raw, json)
Hash identifier: 75VbtA2KMv6jUB1UAHyFz4bk+wf97kVTg3dKxTIbLNg=
Subject key identifier: 28:7A:DF:AE:46:AC:E2:77:D2:FD:07:0B:B9:8A:27:22:9A:AD:A1:1A
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 019F916CEA8F8EB38B79D0954E43CDD6C638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:01 +0000
Manifest this update: Fri 24 Jul 2026 00:01:01 +0000
Manifest next update: Sat 25 Jul 2026 00:01:01 +0000
Files and hashes: 1: 3M3gfxZWTlxlBNR3tYw4_tebKeM.roa (hash: xsykozyPFY5/0PUbC/XmVsKSACxFGy1rLASCnELrsxA=)
2: EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa (hash: XyhhD+tamYBfloB02aI97R1OMdqo6L/U/hCCCp5CY44=)
3: kqOPWtZym-9NSerlHAFGmCIewUY.crl (hash: GvGByHYolnrZMB5cgbuhZwt+JsI0d3OKcxkdwWoOwGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ea:8f:8e:b3:8b:79:d0:95:4e:43:cd:d6:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Jul 24 00:01:01 2026 GMT
Not After : Jul 25 00:01:01 2026 GMT
Subject: CN=287adfae46ace277d2fd070bb98a27229aada11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:a8:7d:85:aa:0d:ad:43:bf:7a:eb:3d:10:
75:84:dd:82:9a:47:19:83:dc:ed:c8:7e:50:f4:08:
da:e0:1f:21:39:09:16:c1:4c:4d:86:5f:43:21:f8:
b9:b6:dc:fe:8f:53:18:6f:e2:e8:6f:6f:d5:f0:9c:
d8:b9:7f:94:b2:6c:78:11:26:b4:a0:38:7a:b9:ee:
aa:66:f1:4f:e7:aa:9a:41:00:54:0a:72:f9:04:90:
51:1c:1f:60:46:58:55:7d:8f:c7:3b:6a:b6:93:39:
83:20:b9:de:ff:1a:65:46:c5:50:e3:4b:71:a6:8a:
44:f0:7e:d2:17:9b:06:0a:03:5f:b7:28:ca:1e:3d:
9d:60:f3:35:f5:64:0c:b6:b9:33:91:77:bb:a9:7d:
87:15:a0:f3:82:5a:c9:07:62:2e:1b:13:bf:ce:07:
60:e6:3f:07:d9:9f:cf:32:12:d8:08:2d:50:64:14:
7d:1a:94:ec:92:03:d5:93:57:ed:b3:00:d5:a9:57:
d1:71:70:f3:80:c6:31:5f:c3:f7:dc:5e:da:08:53:
18:77:8c:dc:73:f6:dd:5d:96:dc:f5:a9:57:7b:38:
30:5c:4f:ff:6e:d4:30:24:1f:f5:9a:24:5b:ae:c2:
aa:4c:aa:24:56:ed:dd:9d:88:92:de:72:4e:5d:ae:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:DF:AE:46:AC:E2:77:D2:FD:07:0B:B9:8A:27:22:9A:AD:A1:1A
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:33:d8:76:5d:71:d7:99:00:2a:35:cd:6b:a2:6c:ec:8a:
ed:37:5e:6b:e2:15:29:7d:68:5d:85:bc:bf:8d:1a:ad:e4:13:
5e:52:e7:92:53:f2:01:ff:41:72:b4:dd:10:cc:0b:91:1b:bf:
5c:54:73:a5:02:1d:30:92:1d:59:6b:f9:6f:20:3d:9f:b8:03:
43:85:b8:4b:13:ca:1b:6a:d5:a3:87:ad:8c:2d:c0:1e:25:a4:
56:f6:96:3e:26:5d:06:19:6f:2d:a8:d4:82:6e:68:98:ad:80:
a8:78:40:7f:7d:19:59:49:e2:c7:e0:ec:de:03:77:57:2f:fd:
ee:24:d4:93:9e:1a:d9:08:a7:63:7b:c7:60:ae:6e:8a:f2:36:
89:f4:5d:08:14:89:9c:3f:bc:94:cd:a5:b1:42:be:e1:55:c5:
e0:6b:f6:e7:95:8e:c7:c2:c4:94:e8:9e:b4:1b:5f:06:08:05:
8a:55:32:84:a3:c2:74:19:a3:9d:75:80:bc:b8:e8:83:df:d1:
43:5d:0f:13:0c:c0:db:68:58:ec:27:71:c5:59:46:03:81:5e:
9f:51:15:e6:8f:27:0d:bd:75:27:1b:a2:76:8b:67:35:31:e0:
32:a1:e3:f2:c5:32:2f:ed:7c:72:df:cc:2c:48:9a:57:15:9b:
9c:08:1a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbOqPjrOLedCVTkPN1sY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYTM4ZjVhZDY3MjliZWY0ZDQ5ZWFlNTFjMDE0Njk4MjIx
ZWMxNDYwHhcNMjYwNzI0MDAwMTAxWhcNMjYwNzI1MDAwMTAxWjAzMTEwLwYDVQQD
EygyODdhZGZhZTQ2YWNlMjc3ZDJmZDA3MGJiOThhMjcyMjlhYWRhMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D2ofYWqDa1Dv3rrPRB1hN2CmkcZ
g9ztyH5Q9Aja4B8hOQkWwUxNhl9DIfi5ttz+j1MYb+Lob2/V8JzYuX+Usmx4ESa0
oDh6ue6qZvFP56qaQQBUCnL5BJBRHB9gRlhVfY/HO2q2kzmDILne/xplRsVQ40tx
popE8H7SF5sGCgNftyjKHj2dYPM19WQMtrkzkXe7qX2HFaDzglrJB2IuGxO/zgdg
5j8H2Z/PMhLYCC1QZBR9GpTskgPVk1ftswDVqVfRcXDzgMYxX8P33F7aCFMYd4zc
c/bdXZbc9alXezgwXE//btQwJB/1miRbrsKqTKokVu3dnYiS3nJOXa5gIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh6365GrOJ30v0HC7mKJyKaraEaMB8GA1UdIwQY
MBaAFJKjj1rWcpvvTUnq5RwBRpgiHsFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3FPUFd0WnltLTlOU2VybEhBRkdtQ0lld1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut
NmQyZTExZmUwOGNkLzEva3FPUFd0WnltLTlOU2VybEhBRkdtQ0lld1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk
LzEva3FPUFd0WnltLTlOU2VybEhBRkdtQ0lld1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7wz2HZd
cdeZACo1zWuibOyK7Tdea+IVKX1oXYW8v40areQTXlLnklPyAf9BcrTdEMwLkRu/
XFRzpQIdMJIdWWv5byA9n7gDQ4W4SxPKG2rVo4etjC3AHiWkVvaWPiZdBhlvLajU
gm5omK2AqHhAf30ZWUnix+Ds3gN3Vy/97iTUk54a2QinY3vHYK5uivI2ifRdCBSJ
nD+8lM2lsUK+4VXF4Gv255WOx8LElOietBtfBggFilUyhKPCdBmjnXWAvLjog9/R
Q10PEwzA22hY7CdxxVlGA4Fen1EV5o8nDb11JxuidotnNTHgMqHj8sUyL+18ct/M
LEiaVxWbnAgawQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:27 2026 by rpki-client