Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: C4asAILfibVjYg8SQh2eJljEKVIkzY0UvVVhqW0X3FU=
Subject key identifier: 2C:6D:7C:B6:8E:8E:1E:C5:B1:B3:68:61:2D:E4:68:ED:24:31:FD:FF
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 019F92ED525A700F5FF92E935B5ECAA66264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 059D
Signing time: Fri 24 Jul 2026 07:00:54 +0000
Manifest this update: Fri 24 Jul 2026 07:00:54 +0000
Manifest next update: Sat 25 Jul 2026 07:00:54 +0000
Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: UCGzZziD8gOuAdM9okA1/tiB30mT31vCVLGh/lW6Gr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:52:5a:70:0f:5f:f9:2e:93:5b:5e:ca:a6:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Jul 24 07:00:54 2026 GMT
Not After : Jul 25 07:00:54 2026 GMT
Subject: CN=2c6d7cb68e8e1ec5b1b368612de468ed2431fdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:43:4c:5b:25:d6:a4:8b:73:88:12:b4:dd:
51:d4:d9:5b:a8:18:9b:9b:bb:e1:90:68:30:2d:21:
89:30:92:66:e5:ba:f5:85:31:ea:0b:63:af:38:fc:
10:72:e8:3c:6c:e5:ac:f5:b5:0d:d6:54:3b:b5:f0:
bb:ec:3b:11:b8:7e:4a:b4:db:2f:08:a8:a9:45:b3:
50:27:b1:5e:7b:49:3e:37:83:9d:74:b7:3d:36:00:
fb:1b:db:1c:a1:d5:3d:13:c3:58:3d:c7:e7:a0:b9:
c9:ab:85:d6:f1:21:c9:14:f6:a1:b7:a0:95:35:90:
08:68:15:7c:15:0b:f6:7f:b1:a5:ca:52:5a:58:ba:
90:37:c0:f4:ed:0f:1a:0b:6b:19:02:31:ef:91:6d:
3f:6f:ed:50:a9:01:1d:f6:9d:1c:0f:eb:15:50:94:
32:86:de:de:d6:4e:a1:b0:81:7f:13:06:8f:ec:41:
41:8e:af:51:41:c7:51:7a:86:c6:1d:7b:61:17:84:
96:90:ff:52:e2:6e:3f:c2:63:a3:69:64:ce:d8:9b:
59:06:f9:ef:df:5b:83:49:b2:fd:34:a4:fa:6d:fa:
b9:1e:6c:20:0a:8d:74:16:14:41:77:a7:41:c8:6c:
f5:4e:1b:21:3d:23:21:48:19:66:d6:44:fe:2e:24:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:7C:B6:8E:8E:1E:C5:B1:B3:68:61:2D:E4:68:ED:24:31:FD:FF
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:46:4c:08:49:7b:90:f1:19:11:c2:ba:c5:87:98:aa:70:
99:0e:c6:16:af:26:db:08:f3:81:93:dd:69:5f:e6:66:7c:16:
d1:ec:ff:a3:0a:be:97:fd:e5:a4:c2:d9:d7:71:25:8e:49:9b:
58:ce:50:8a:28:87:f5:57:4c:ee:96:24:fb:fa:8f:7f:19:6c:
c9:b8:75:87:e7:bd:43:84:76:4d:c6:37:15:49:20:21:b0:93:
51:6b:dd:6e:b1:3c:26:84:b4:ca:db:fb:9c:91:5b:70:f2:14:
ab:0c:7d:fe:da:41:6a:a8:ac:e2:ab:31:05:f7:85:43:34:79:
bf:1f:bb:27:db:e1:0d:2f:84:54:a0:13:81:cb:6c:13:e8:7d:
33:e8:78:30:ef:79:85:7c:db:1d:5f:84:14:74:0c:f0:f6:5d:
e3:3a:d9:d8:70:4b:b0:ec:6c:ba:19:e6:8d:53:26:5e:68:ad:
66:57:54:a3:fe:45:f2:68:8a:9f:82:46:4b:c6:5b:aa:c7:b2:
ed:e2:28:36:50:5e:3b:88:f3:78:5a:08:04:8e:0d:0c:58:f0:
55:11:f6:6e:f2:25:7f:de:04:96:ba:9f:77:98:e4:78:e1:9f:
2f:cf:86:5f:a1:94:31:8b:c7:8b:81:5c:ac:eb:72:f1:22:f3:
63:02:a5:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7VJacA9f+S6TW17KpmJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTZjZDY4NTMxODQ3ZTNiMGJlMGQ5M2M2NWNjMWZiNjRl
Y2QyMWEwHhcNMjYwNzI0MDcwMDU0WhcNMjYwNzI1MDcwMDU0WjAzMTEwLwYDVQQD
EygyYzZkN2NiNjhlOGUxZWM1YjFiMzY4NjEyZGU0NjhlZDI0MzFmZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P1DTFsl1qSLc4gStN1R1NlbqBib
m7vhkGgwLSGJMJJm5br1hTHqC2OvOPwQcug8bOWs9bUN1lQ7tfC77DsRuH5KtNsv
CKipRbNQJ7Fee0k+N4OddLc9NgD7G9scodU9E8NYPcfnoLnJq4XW8SHJFPaht6CV
NZAIaBV8FQv2f7GlylJaWLqQN8D07Q8aC2sZAjHvkW0/b+1QqQEd9p0cD+sVUJQy
ht7e1k6hsIF/EwaP7EFBjq9RQcdReobGHXthF4SWkP9S4m4/wmOjaWTO2JtZBvnv
31uDSbL9NKT6bfq5HmwgCo10FhRBd6dByGz1ThshPSMhSBlm1kT+LiReLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxtfLaOjh7FsbNoYS3kaO0kMf3/MB8GA1UdIwQY
MBaAFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYt
NzJlY2JhMTMxYWY4LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYtNzJlY2JhMTMxYWY4
LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLNGTAhJ
e5DxGRHCusWHmKpwmQ7GFq8m2wjzgZPdaV/mZnwW0ez/owq+l/3lpMLZ13Eljkmb
WM5QiiiH9VdM7pYk+/qPfxlsybh1h+e9Q4R2TcY3FUkgIbCTUWvdbrE8JoS0ytv7
nJFbcPIUqwx9/tpBaqis4qsxBfeFQzR5vx+7J9vhDS+EVKATgctsE+h9M+h4MO95
hXzbHV+EFHQM8PZd4zrZ2HBLsOxsuhnmjVMmXmitZldUo/5F8miKn4JGS8Zbqsey
7eIoNlBeO4jzeFoIBI4NDFjwVRH2bvIlf94Elrqfd5jkeOGfL8+GX6GUMYvHi4Fc
rOty8SLzYwKlPw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:21 2026 by rpki-client