Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: yE6KbgBux4u1bojJ3dih29RU29vgcVgxyhdYpaPVXJk=
Subject key identifier: B4:DA:96:9A:9D:9C:26:3E:EE:22:A7:4F:7E:7B:C3:48:93:45:00:FA
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019F8E6B9F4C81B10430786A556509C02E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 10:00:45 +0000
Manifest this update: Thu 23 Jul 2026 10:00:45 +0000
Manifest next update: Fri 24 Jul 2026 10:00:45 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: HrQvqX8nVqqujl7E5SlH+jZMQQHKDl5CREUpO+XC6bo=)
3: tB6SdtPeaNHkXKdCFOrT0cZRLQo.asa (hash: hEt0QePrXimypD2t1C7kRdRaY7tLoSp85y3ztSay7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:9f:4c:81:b1:04:30:78:6a:55:65:09:c0:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Jul 23 10:00:45 2026 GMT
Not After : Jul 24 10:00:45 2026 GMT
Subject: CN=b4da969a9d9c263eee22a74f7e7bc348934500fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:48:59:75:c8:4d:c6:0b:95:42:70:3b:47:
58:1e:92:9d:e9:7c:39:68:96:af:04:fe:3b:73:1b:
1b:16:7d:8d:18:ec:80:ce:41:09:dd:11:98:30:3d:
66:f0:d6:c6:bc:e6:68:59:2f:3d:cd:40:bf:9e:79:
c3:97:0d:41:d9:c2:7e:1d:54:b1:aa:a5:4d:07:f6:
07:0b:b8:4a:34:98:a8:ff:91:7c:01:36:78:ce:49:
0f:a0:eb:af:d0:3a:e7:81:39:ce:3e:70:40:99:87:
fd:93:af:48:d4:38:b5:de:a1:41:b9:20:18:82:55:
ca:ea:23:13:75:4a:a7:f7:35:1e:3b:47:5d:aa:ac:
e6:ac:00:63:fb:5f:0f:55:51:e4:16:f0:2e:d4:bf:
a5:be:7c:46:b7:4e:58:e3:0c:bf:c2:2b:3e:83:f9:
81:3b:46:b4:9b:c2:d0:8c:87:07:65:d0:8b:71:3b:
71:e0:0c:b1:5b:bb:61:2b:d3:d7:6d:7d:f5:3d:19:
5b:56:d3:b0:80:1d:f2:45:70:57:4f:dc:66:90:c8:
33:b2:09:23:5a:19:cf:f4:68:95:0e:9f:f1:85:7c:
50:aa:b2:43:d9:92:90:2e:94:9c:0d:97:ec:ef:2b:
5b:8e:10:2f:36:81:8e:ff:37:ba:de:aa:5c:95:76:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:96:9A:9D:9C:26:3E:EE:22:A7:4F:7E:7B:C3:48:93:45:00:FA
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:19:eb:8f:58:a6:04:60:87:aa:59:5a:22:93:f2:ca:ec:d6:
93:88:8b:c8:09:7d:55:23:e1:6a:23:d8:00:db:c1:90:3c:16:
de:80:4a:4b:76:be:90:cb:f7:84:fc:df:45:52:7d:52:2c:4e:
52:2f:60:49:4b:f8:81:6a:e7:82:9e:75:0e:37:9c:26:5e:ed:
ff:7d:ef:0a:f0:b2:fb:97:b7:ef:54:87:4f:59:2f:8e:c2:e3:
2d:6c:c3:04:62:38:e9:40:a1:7a:aa:d0:9c:af:d1:96:7d:95:
6e:6f:c4:47:3b:b2:4b:58:d0:fa:fa:0c:cc:25:96:e8:39:09:
3b:a5:b1:1c:16:d0:89:0d:86:cd:28:69:c2:7a:eb:b5:43:e2:
f3:d8:78:d9:41:b1:97:f9:a7:62:72:b4:22:66:2d:06:b6:3b:
7d:24:43:3a:4c:0c:16:be:21:dd:4b:d2:f8:fd:93:be:cf:4e:
42:eb:b9:49:03:18:e3:6f:f0:46:e9:4f:26:64:ef:cc:75:a7:
00:fd:c8:71:f9:38:97:ef:54:47:53:cb:cb:4f:b9:32:de:30:
b8:1d:ff:c0:11:f9:11:40:36:49:90:3a:4a:f7:8d:39:29:b0:
0d:60:e1:28:d1:19:78:0a:b4:d0:75:4e:57:46:06:85:b6:b0:
ae:f9:49:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oa59MgbEEMHhqVWUJwC4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDRlYmEyYTk3YTA5YzliM2IwOGNmZjgzZGZiNDc3MTQx
YmMxY2IwHhcNMjYwNzIzMTAwMDQ1WhcNMjYwNzI0MTAwMDQ1WjAzMTEwLwYDVQQD
EyhiNGRhOTY5YTlkOWMyNjNlZWUyMmE3NGY3ZTdiYzM0ODkzNDUwMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWlIWXXITcYLlUJwO0dYHpKd6Xw5
aJavBP47cxsbFn2NGOyAzkEJ3RGYMD1m8NbGvOZoWS89zUC/nnnDlw1B2cJ+HVSx
qqVNB/YHC7hKNJio/5F8ATZ4zkkPoOuv0DrngTnOPnBAmYf9k69I1Di13qFBuSAY
glXK6iMTdUqn9zUeO0ddqqzmrABj+18PVVHkFvAu1L+lvnxGt05Y4wy/wis+g/mB
O0a0m8LQjIcHZdCLcTtx4AyxW7thK9PXbX31PRlbVtOwgB3yRXBXT9xmkMgzsgkj
WhnP9GiVDp/xhXxQqrJD2ZKQLpScDZfs7ytbjhAvNoGO/ze63qpclXbSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTalpqdnCY+7iKnT357w0iTRQD6MB8GA1UdIwQY
MBaAFJME66KpegnJs7CM/4PftHcUG8HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTIt
OWFmOTkzYjAzNDNlLzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hYjIzZmYtZTUzYi00ZDA4LTgzOTItOWFmOTkzYjAzNDNl
LzEva3dUcm9xbDZDY216c0l6X2c5LTBkeFFid2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBnrj1im
BGCHqllaIpPyyuzWk4iLyAl9VSPhaiPYANvBkDwW3oBKS3a+kMv3hPzfRVJ9UixO
Ui9gSUv4gWrngp51DjecJl7t/33vCvCy+5e371SHT1kvjsLjLWzDBGI46UCheqrQ
nK/Rln2Vbm/ERzuyS1jQ+voMzCWW6DkJO6WxHBbQiQ2GzShpwnrrtUPi89h42UGx
l/mnYnK0ImYtBrY7fSRDOkwMFr4h3UvS+P2Tvs9OQuu5SQMY42/wRulPJmTvzHWn
AP3Icfk4l+9UR1PLy0+5Mt4wuB3/wBH5EUA2SZA6SveNOSmwDWDhKNEZeAq00HVO
V0YGhbawrvlJ/Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:39 2026 by rpki-client