Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: fstt9i4aB05nPLvAcRW8hAJq5bCDH9caUvEhoF2nQ6U=
Subject key identifier: 60:CF:82:E8:1E:41:B4:6F:2C:3B:2E:EF:84:45:CA:84:0B:94:94:D9
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 019F94A4D97CA93E0DB8E5CFCC9B432BCE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1990
Signing time: Fri 24 Jul 2026 15:00:59 +0000
Manifest this update: Fri 24 Jul 2026 15:00:59 +0000
Manifest next update: Sat 25 Jul 2026 15:00:59 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: 4P039dvGHuJbNOmhtQIMdfD+GrUiupfzZ2uIKJ3Z/WA=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:d9:7c:a9:3e:0d:b8:e5:cf:cc:9b:43:2b:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jul 24 15:00:59 2026 GMT
Not After : Jul 25 15:00:59 2026 GMT
Subject: CN=60cf82e81e41b46f2c3b2eef8445ca840b9494d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:39:91:f9:a6:8c:4a:87:7a:4d:d9:4f:71:
cb:53:6a:14:d6:e3:5c:79:36:cc:3c:6a:30:f8:42:
6c:1d:fd:36:5b:47:ca:7d:45:5a:67:e1:f8:dc:ce:
15:55:1a:12:15:e5:df:18:98:97:3b:6e:d8:02:62:
f1:be:e5:13:fe:eb:94:45:7f:0c:cb:1b:0f:91:17:
9c:e4:29:20:1c:8e:eb:81:0e:cc:6a:df:13:75:65:
dc:f0:74:ad:d4:83:8a:e9:3e:f7:74:ba:07:9a:38:
67:f1:bf:7c:b6:49:0d:fb:c0:31:5d:eb:c2:8b:94:
35:29:be:eb:b2:3d:82:1e:60:c8:8b:91:3f:b9:c4:
11:c3:c1:33:57:9e:de:64:87:a4:bf:f6:d6:41:88:
c0:bd:d7:14:b6:ce:23:1f:67:21:eb:79:ad:be:ac:
ab:e6:86:7a:67:d6:43:95:21:2e:fa:19:ba:13:2a:
d0:ab:70:ea:25:9e:c8:4a:2e:eb:a6:76:6f:7f:28:
a1:2f:f9:07:ff:ee:5b:72:9e:7b:e8:0e:4b:37:23:
e5:87:90:3e:85:bc:34:e7:ce:2f:71:df:25:bf:32:
38:8e:70:a6:72:95:cc:d1:56:54:24:30:3e:a7:e1:
85:35:e8:27:06:62:e5:07:20:99:21:67:87:0b:69:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:82:E8:1E:41:B4:6F:2C:3B:2E:EF:84:45:CA:84:0B:94:94:D9
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:34:45:61:8e:9b:83:f8:1e:3c:59:c1:db:3d:73:f0:d8:9a:
b8:b8:a2:e3:5e:41:9b:3d:6f:71:27:b9:a8:d5:7f:a7:12:ec:
b5:53:1b:ab:07:8d:e2:dd:1c:ed:f9:52:38:62:ef:a0:2d:bb:
c1:9d:29:89:94:b9:8f:af:0c:d1:09:31:42:60:4c:1f:69:08:
fc:50:f2:c2:07:1f:ba:a7:87:a6:6d:56:81:b0:ab:dd:1f:16:
3d:f4:a2:34:5a:67:e9:42:21:dc:b0:73:93:1d:ba:c6:f7:88:
17:a5:c8:36:fd:94:9f:98:dc:c3:eb:43:96:c7:2f:6b:bb:19:
2c:9b:a7:c1:91:bf:7e:6b:67:65:bd:4e:ee:6c:50:17:09:75:
99:da:05:ba:27:3e:fd:6f:20:72:8a:97:ea:65:94:31:78:33:
47:91:f6:9c:9a:d6:04:a2:84:a6:01:83:95:c0:6f:65:0b:2e:
85:8e:f0:ec:cd:7d:c8:6b:50:53:8d:66:d3:c3:37:c0:12:14:
86:dc:34:3e:ff:2a:23:53:b5:c1:ca:46:a8:66:80:fb:63:35:
cc:fd:fd:ea:39:fb:89:52:b6:da:d2:6d:f6:63:27:43:7f:83:
93:80:32:dc:dc:5e:b7:1a:59:09:d9:1b:79:00:3a:bc:39:9e:
c9:8a:d8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpNl8qT4NuOXPzJtDK86AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjYwNzI0MTUwMDU5WhcNMjYwNzI1MTUwMDU5WjAzMTEwLwYDVQQD
Eyg2MGNmODJlODFlNDFiNDZmMmMzYjJlZWY4NDQ1Y2E4NDBiOTQ5NGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgE5kfmmjEqHek3ZT3HLU2oU1uNc
eTbMPGow+EJsHf02W0fKfUVaZ+H43M4VVRoSFeXfGJiXO27YAmLxvuUT/uuURX8M
yxsPkRec5CkgHI7rgQ7Mat8TdWXc8HSt1IOK6T73dLoHmjhn8b98tkkN+8AxXevC
i5Q1Kb7rsj2CHmDIi5E/ucQRw8EzV57eZIekv/bWQYjAvdcUts4jH2ch63mtvqyr
5oZ6Z9ZDlSEu+hm6EyrQq3DqJZ7ISi7rpnZvfyihL/kH/+5bcp576A5LNyPlh5A+
hbw0584vcd8lvzI4jnCmcpXM0VZUJDA+p+GFNegnBmLlByCZIWeHC2n6GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDPgugeQbRvLDsu74RFyoQLlJTZMB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjRFYY6b
g/gePFnB2z1z8NiauLii415Bmz1vcSe5qNV/pxLstVMbqweN4t0c7flSOGLvoC27
wZ0piZS5j68M0QkxQmBMH2kI/FDywgcfuqeHpm1WgbCr3R8WPfSiNFpn6UIh3LBz
kx26xveIF6XINv2Un5jcw+tDlscva7sZLJunwZG/fmtnZb1O7mxQFwl1mdoFuic+
/W8gcoqX6mWUMXgzR5H2nJrWBKKEpgGDlcBvZQsuhY7w7M19yGtQU41m08M3wBIU
htw0Pv8qI1O1wcpGqGaA+2M1zP396jn7iVK22tJt9mMnQ3+Dk4Ay3NxetxpZCdkb
eQA6vDmeyYrYaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:18 2026 by rpki-client