Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: Mvtr7llArtILpsZxFsSphKIJi6PL9xWgnKfcwa1RvHY=
Subject key identifier: EF:9C:6C:FB:94:C6:2A:8B:07:4A:73:25:24:67:2A:1A:1C:33:C9:9C
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019E1E6CA973698275E00F2819DCFB3266B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 12D9
Signing time: Tue 12 May 2026 23:01:38 +0000
Manifest this update: Tue 12 May 2026 23:01:38 +0000
Manifest next update: Wed 13 May 2026 23:01:38 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: Xup4/6VINB8nvfnVRvKmffdgrgpHai4qrBVWxsWrdBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a9:73:69:82:75:e0:0f:28:19:dc:fb:32:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: May 12 23:01:38 2026 GMT
Not After : May 13 23:01:38 2026 GMT
Subject: CN=ef9c6cfb94c62a8b074a732524672a1a1c33c99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:97:7e:68:61:c4:e6:4f:4f:14:a3:91:29:
d2:34:87:10:5a:c9:0d:b6:c9:df:3d:8f:e9:15:a4:
3d:be:c1:c9:4d:2e:e5:31:96:91:aa:8c:cb:2c:dc:
b9:c7:b3:e6:5a:37:97:1c:bb:d8:fe:89:3e:4a:46:
7e:b7:a4:1d:a8:9e:d9:d9:6a:88:1c:3b:6a:3f:54:
b1:24:b5:0f:19:2f:29:8f:08:26:0e:a0:06:91:47:
6c:67:17:8f:cd:12:fc:eb:88:75:f9:1b:3c:23:09:
b9:cd:c0:f9:f0:81:27:4e:d1:e4:81:cd:05:e5:3e:
6b:27:38:cc:5b:4e:cf:75:3c:a9:8b:3d:19:77:81:
3d:ee:59:9e:ef:4c:d8:e6:cf:a4:10:d5:88:dc:2f:
25:f7:c9:93:a2:99:79:d3:47:6e:f6:67:ac:7f:26:
29:c5:3d:e1:f8:1d:93:ea:57:2b:3e:0a:cc:2b:52:
34:4e:a0:f3:9d:e9:ba:ae:37:a4:09:4b:96:b3:72:
2d:52:52:72:37:5b:77:eb:35:95:c0:20:04:b4:cd:
12:16:ed:5c:8b:f5:16:b6:20:47:d1:59:71:cc:c1:
28:6a:a2:7d:ce:e2:28:ab:8c:53:d4:0e:55:53:cb:
f7:b0:40:cb:fc:c2:77:6c:93:63:c9:54:8b:8e:02:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:6C:FB:94:C6:2A:8B:07:4A:73:25:24:67:2A:1A:1C:33:C9:9C
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:37:bc:ef:23:7e:60:99:07:08:8d:cd:aa:e2:1c:3e:4d:2f:
fc:55:df:5d:ac:09:5f:da:f7:bd:b2:ec:43:15:b9:52:1a:92:
46:f3:68:9c:b4:4e:86:c5:36:b8:9b:13:da:1c:57:d2:b2:71:
77:8d:fb:97:8b:a0:ee:7f:8b:ef:2a:52:6d:16:2d:aa:4a:52:
82:4e:97:9c:d4:ed:a1:aa:23:85:2a:5a:ab:b8:f4:fc:95:1a:
8b:b7:e6:22:fa:c0:ef:d4:62:ff:3c:f5:36:92:ad:e6:53:fd:
0f:cb:e0:f9:2f:f7:54:ff:fa:f5:23:59:35:6d:33:d9:d8:50:
69:7e:44:38:c3:c7:82:66:5f:97:f9:12:c7:5f:48:ed:b7:2c:
e0:4c:d5:3b:9e:50:f7:32:be:a1:3e:7f:34:86:4d:ac:97:d4:
1a:e8:21:d0:ad:04:b6:4a:d0:59:c8:3c:d0:6b:d7:a1:87:bc:
fc:f2:06:2b:9f:ee:9d:1a:3e:26:59:30:36:e7:ef:56:f9:49:
14:4e:fb:3d:45:05:49:4d:60:66:bb:6d:72:3b:0e:4c:79:30:
18:17:8f:d7:62:b4:b2:8e:1b:f6:4e:84:3f:76:ed:81:46:d5:
83:21:36:df:4a:ef:41:3a:1f:da:ba:ac:32:7e:8e:2f:da:66:
af:22:25:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebKlzaYJ14A8oGdz7Mma1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj
ZWZjNzYwHhcNMjYwNTEyMjMwMTM4WhcNMjYwNTEzMjMwMTM4WjAzMTEwLwYDVQQD
EyhlZjljNmNmYjk0YzYyYThiMDc0YTczMjUyNDY3MmExYTFjMzNjOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgKXfmhhxOZPTxSjkSnSNIcQWskN
tsnfPY/pFaQ9vsHJTS7lMZaRqozLLNy5x7PmWjeXHLvY/ok+SkZ+t6QdqJ7Z2WqI
HDtqP1SxJLUPGS8pjwgmDqAGkUdsZxePzRL864h1+Rs8Iwm5zcD58IEnTtHkgc0F
5T5rJzjMW07PdTypiz0Zd4E97lme70zY5s+kENWI3C8l98mTopl500du9mesfyYp
xT3h+B2T6lcrPgrMK1I0TqDznem6rjekCUuWs3ItUlJyN1t36zWVwCAEtM0SFu1c
i/UWtiBH0VlxzMEoaqJ9zuIoq4xT1A5VU8v3sEDL/MJ3bJNjyVSLjgJPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+cbPuUxiqLB0pzJSRnKhocM8mcMB8GA1UdIwQY
MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct
MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx
LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAize87yN+
YJkHCI3NquIcPk0v/FXfXawJX9r3vbLsQxW5UhqSRvNonLROhsU2uJsT2hxX0rJx
d437l4ug7n+L7ypSbRYtqkpSgk6XnNTtoaojhSpaq7j0/JUai7fmIvrA79Ri/zz1
NpKt5lP9D8vg+S/3VP/69SNZNW0z2dhQaX5EOMPHgmZfl/kSx19I7bcs4EzVO55Q
9zK+oT5/NIZNrJfUGugh0K0EtkrQWcg80GvXoYe8/PIGK5/unRo+JlkwNufvVvlJ
FE77PUUFSU1gZrttcjsOTHkwGBeP12K0so4b9k6EP3btgUbVgyE230rvQTof2rqs
Mn6OL9pmryIlew==
-----END CERTIFICATE-----
Generated at Wed May 13 06:28:51 2026 by rpki-client