Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: p/Uzyq0lVybVwuAMrZ2tAOfudEYD95sgFU2Zg+1tlYo=
Subject key identifier: F6:1C:4D:ED:72:C0:74:C0:3F:06:CC:01:AD:4C:CA:A3:0A:DC:57:DD
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019F92B66C47B177796FAD2A33A6CB7F5CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:56 +0000
Manifest this update: Fri 24 Jul 2026 06:00:56 +0000
Manifest next update: Sat 25 Jul 2026 06:00:56 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: 19BPWXgxSw+JALsYBSWurhYiJr2LQnmELrY4QxBrahM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:6c:47:b1:77:79:6f:ad:2a:33:a6:cb:7f:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jul 24 06:00:56 2026 GMT
Not After : Jul 25 06:00:56 2026 GMT
Subject: CN=f61c4ded72c074c03f06cc01ad4ccaa30adc57dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:ad:1e:a4:73:64:cc:69:35:32:5b:52:b6:
55:7d:a7:22:8b:9b:d1:36:b3:bc:c6:44:73:c6:70:
b9:b3:4d:e7:c0:a0:fc:b2:b9:2a:b4:89:7a:fe:a3:
68:24:f1:87:9f:93:c5:05:9e:88:24:8b:4b:69:13:
7a:da:03:1e:7f:15:25:fe:7c:49:f7:9f:11:1a:30:
3c:d0:6f:16:7d:59:ef:0d:cb:db:d0:0f:de:0a:32:
78:1b:8f:26:c0:51:9a:8a:30:f3:5e:9f:69:82:3c:
f4:26:b8:01:cc:a9:05:b7:bc:01:08:4e:2c:3f:ba:
e0:34:9e:f8:18:cf:74:c3:4c:a5:c5:df:87:3f:ff:
0f:71:9f:64:6d:29:a9:f8:0c:47:27:04:a6:e1:ea:
55:85:7f:6e:48:4f:d1:61:f7:90:7c:a8:31:03:33:
ec:7f:4d:e9:50:10:d5:fd:55:56:27:4d:2b:8d:59:
3d:34:43:c0:22:3d:3f:b4:c3:1d:0f:6d:98:5f:f9:
bc:f7:60:a0:4a:55:db:2e:d1:c7:b2:b1:30:9e:29:
0d:67:12:5b:b3:b0:71:9f:16:1e:e9:38:ee:ce:29:
29:05:ca:63:4c:59:20:f3:ca:45:4e:57:83:97:3f:
3d:5b:19:12:01:4b:10:b3:64:8a:5b:da:f6:9c:63:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:4D:ED:72:C0:74:C0:3F:06:CC:01:AD:4C:CA:A3:0A:DC:57:DD
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:54:20:1b:ad:f8:91:80:4e:e3:a3:4f:96:70:18:d2:07:
a2:71:36:a4:3e:49:98:a3:5d:87:71:7f:ff:80:df:bb:c1:e0:
2d:7b:20:b7:fa:12:74:7c:a5:31:ad:4c:58:02:81:38:48:78:
3b:fc:4e:1b:f0:0d:15:50:47:35:e6:b1:c6:d2:79:35:83:ce:
b2:48:a0:12:21:b5:90:3c:03:28:b9:9d:d3:cd:3d:be:9f:ab:
1b:0c:2b:f2:04:dd:b4:ca:f1:0d:1a:c2:8c:3b:63:ad:a1:75:
49:2d:7a:fb:2b:b7:ec:71:6c:0e:d0:b3:f7:3b:1c:35:cc:dc:
4e:77:3d:26:df:a6:d8:3c:4d:0c:16:8d:ab:04:21:c6:9b:ee:
3f:6e:6e:35:d0:82:65:27:85:06:fb:ae:03:4a:81:55:f2:d6:
e7:ae:3f:eb:1f:b8:d7:3b:0f:93:6e:b6:2f:23:d3:ca:6a:67:
4b:fe:3a:6b:b0:88:de:c9:88:36:ab:82:8e:b4:8c:d2:80:89:
15:4d:7b:2d:9c:8a:a4:4b:8f:31:23:af:e3:a3:9b:74:23:3c:
c0:ec:35:a3:85:64:ec:1e:d4:35:11:ca:4b:93:d1:21:f3:87:
5a:7b:d8:dd:90:ab:fa:a5:6a:23:43:f3:80:fd:cd:52:2b:42:
bc:04:fe:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StmxHsXd5b60qM6bLf1z4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2
NzU1NzUwHhcNMjYwNzI0MDYwMDU2WhcNMjYwNzI1MDYwMDU2WjAzMTEwLwYDVQQD
EyhmNjFjNGRlZDcyYzA3NGMwM2YwNmNjMDFhZDRjY2FhMzBhZGM1N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsytHqRzZMxpNTJbUrZVfacii5vR
NrO8xkRzxnC5s03nwKD8srkqtIl6/qNoJPGHn5PFBZ6IJItLaRN62gMefxUl/nxJ
958RGjA80G8WfVnvDcvb0A/eCjJ4G48mwFGaijDzXp9pgjz0JrgBzKkFt7wBCE4s
P7rgNJ74GM90w0ylxd+HP/8PcZ9kbSmp+AxHJwSm4epVhX9uSE/RYfeQfKgxAzPs
f03pUBDV/VVWJ00rjVk9NEPAIj0/tMMdD22YX/m892CgSlXbLtHHsrEwnikNZxJb
s7BxnxYe6TjuzikpBcpjTFkg88pFTleDlz89WxkSAUsQs2SKW9r2nGP+gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYcTe1ywHTAPwbMAa1MyqMK3FfdMB8GA1UdIwQY
MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt
M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk
LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZk9UIBut
+JGATuOjT5ZwGNIHonE2pD5JmKNdh3F//4Dfu8HgLXsgt/oSdHylMa1MWAKBOEh4
O/xOG/ANFVBHNeaxxtJ5NYPOskigEiG1kDwDKLmd0809vp+rGwwr8gTdtMrxDRrC
jDtjraF1SS16+yu37HFsDtCz9zscNczcTnc9Jt+m2DxNDBaNqwQhxpvuP25uNdCC
ZSeFBvuuA0qBVfLW564/6x+41zsPk262LyPTympnS/46a7CI3smINquCjrSM0oCJ
FU17LZyKpEuPMSOv46ObdCM8wOw1o4Vk7B7UNRHKS5PRIfOHWnvY3ZCr+qVqI0Pz
gP3NUitCvAT+WA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:57 2026 by rpki-client