Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: GPntqJpts90VBneWgzOTWys8C74v2yo/is74fVW9iEc=
Subject key identifier: 06:AD:76:56:DD:0D:C7:AE:63:EA:73:82:BF:84:53:B4:EF:56:04:CD
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019F9323F6011308D087D99DD7AD45544E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 139A
Signing time: Fri 24 Jul 2026 08:00:35 +0000
Manifest this update: Fri 24 Jul 2026 08:00:35 +0000
Manifest next update: Sat 25 Jul 2026 08:00:35 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: omWvdQimeKKJ3If7D57ap30uPgCcAxXjgWIYSQQqRXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f6:01:13:08:d0:87:d9:9d:d7:ad:45:54:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jul 24 08:00:35 2026 GMT
Not After : Jul 25 08:00:35 2026 GMT
Subject: CN=06ad7656dd0dc7ae63ea7382bf8453b4ef5604cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:ef:d2:0b:5d:45:f6:e7:39:18:e8:ce:f2:
3a:e2:30:c9:d4:69:54:3b:0f:e1:8c:86:cb:7a:d5:
79:f0:d8:df:76:18:5c:ec:5c:d9:85:9e:db:54:63:
ea:ce:16:f8:90:4e:35:33:77:c7:b3:11:b4:19:b2:
c7:c7:05:4b:21:07:61:e6:8c:d4:ac:87:fb:f0:18:
bf:df:88:b8:b5:69:9f:c1:b9:72:db:41:bb:37:c3:
9e:32:dd:41:ec:55:70:e3:e4:0c:82:ef:87:c8:92:
dd:69:ce:ac:9f:6f:a3:6b:7b:63:b1:eb:8a:00:5e:
d9:ae:a4:7f:56:0b:20:25:c9:d8:f9:94:25:79:c8:
53:a3:18:f6:28:c8:66:7b:a1:95:97:77:ea:7f:9e:
f3:bc:0d:79:26:9c:d2:34:55:db:b0:5c:6b:aa:f1:
01:d3:6a:63:28:e9:06:36:46:a5:d9:71:e1:bf:f1:
07:c3:a9:f3:27:7e:a2:a9:1f:6a:c1:fb:33:e6:be:
46:1f:22:d5:56:15:be:db:86:2e:f8:c1:93:d8:0e:
8f:28:81:9a:8f:34:9f:8e:48:f4:e6:15:fb:e4:14:
79:c4:21:83:1c:56:3e:7b:4f:b7:72:8b:0d:6b:45:
e4:39:b2:56:08:7b:15:9b:62:f7:c3:b1:c7:cd:62:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:76:56:DD:0D:C7:AE:63:EA:73:82:BF:84:53:B4:EF:56:04:CD
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:71:c7:a0:18:ee:fe:8f:64:13:0f:fa:b9:9a:43:0a:b1:
cd:1a:35:e6:8b:44:c7:1d:99:6a:9a:91:5e:a3:08:78:a5:86:
0a:2e:ef:fe:e4:f2:0e:d0:9b:ec:7d:c6:a1:e6:71:72:69:4c:
7b:e2:07:1e:67:95:cd:86:37:87:47:87:a9:d3:7d:d8:6e:45:
d5:51:58:22:f6:b4:de:af:65:2b:bc:99:c0:8a:ba:ce:d3:a2:
ec:21:bb:31:2b:e5:71:71:4d:56:3b:87:86:d1:51:40:ca:9f:
81:b7:29:4f:f2:a2:61:31:3a:4f:1c:e5:a2:02:7f:68:53:08:
95:85:1b:a2:38:d2:cc:ee:b8:c0:e0:1a:89:c8:a0:7c:74:60:
46:ec:6d:9b:b2:5d:b4:d5:e7:f1:41:b0:38:e3:5d:fa:f9:ff:
c8:82:9f:f9:41:c8:95:8d:c4:ad:27:32:33:60:75:80:f3:ac:
d7:08:ce:a2:2f:6f:01:f4:30:74:d6:fd:d5:54:8d:0a:b5:ca:
49:10:f9:94:d3:dc:d9:42:72:63:68:57:3e:2c:d1:25:e8:fa:
a3:c0:7c:90:f2:08:d8:89:a4:db:51:ec:e7:d3:b3:51:37:4e:
a5:7f:31:71:4e:fc:ef:04:c2:bf:c8:14:a0:31:2f:a5:34:4d:
e8:0d:ee:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/YBEwjQh9md161FVE4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj
ZWZjNzYwHhcNMjYwNzI0MDgwMDM1WhcNMjYwNzI1MDgwMDM1WjAzMTEwLwYDVQQD
EygwNmFkNzY1NmRkMGRjN2FlNjNlYTczODJiZjg0NTNiNGVmNTYwNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y/v0gtdRfbnORjozvI64jDJ1GlU
Ow/hjIbLetV58Njfdhhc7FzZhZ7bVGPqzhb4kE41M3fHsxG0GbLHxwVLIQdh5ozU
rIf78Bi/34i4tWmfwbly20G7N8OeMt1B7FVw4+QMgu+HyJLdac6sn2+ja3tjseuK
AF7ZrqR/VgsgJcnY+ZQlechToxj2KMhme6GVl3fqf57zvA15JpzSNFXbsFxrqvEB
02pjKOkGNkal2XHhv/EHw6nzJ36iqR9qwfsz5r5GHyLVVhW+24Yu+MGT2A6PKIGa
jzSfjkj05hX75BR5xCGDHFY+e0+3cosNa0XkObJWCHsVm2L3w7HHzWI3SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAatdlbdDceuY+pzgr+EU7TvVgTNMB8GA1UdIwQY
MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct
MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx
LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLZxx6AY
7v6PZBMP+rmaQwqxzRo15otExx2ZapqRXqMIeKWGCi7v/uTyDtCb7H3GoeZxcmlM
e+IHHmeVzYY3h0eHqdN92G5F1VFYIva03q9lK7yZwIq6ztOi7CG7MSvlcXFNVjuH
htFRQMqfgbcpT/KiYTE6TxzlogJ/aFMIlYUbojjSzO64wOAaicigfHRgRuxtm7Jd
tNXn8UGwOONd+vn/yIKf+UHIlY3ErScyM2B1gPOs1wjOoi9vAfQwdNb91VSNCrXK
SRD5lNPc2UJyY2hXPizRJej6o8B8kPII2Imk21Hs59OzUTdOpX8xcU787wTCv8gU
oDEvpTRN6A3u+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:08 2026 by rpki-client