Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: +6aGCooZeQDKfsbjlH4Koerk9pBw4m4tUVkRqURb5Ug=
Subject key identifier: 01:F7:BD:AB:6B:5D:D9:01:7C:4E:D1:9F:C3:F6:D7:F3:D0:7A:CF:EF
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019E20C841D2B1FF1BA6CBB9DFE07507AD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 11F7
Signing time: Wed 13 May 2026 10:00:55 +0000
Manifest this update: Wed 13 May 2026 10:00:55 +0000
Manifest next update: Thu 14 May 2026 10:00:55 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: lhvyc7Su0NDYGuTXfWpUKV0iDcshFf1HVvq1/Z/mxgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:41:d2:b1:ff:1b:a6:cb:b9:df:e0:75:07:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: May 13 10:00:55 2026 GMT
Not After : May 14 10:00:55 2026 GMT
Subject: CN=01f7bdab6b5dd9017c4ed19fc3f6d7f3d07acfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:3e:f6:1c:10:44:9e:3e:91:81:7d:ab:11:
b0:8c:16:5d:0d:23:ff:f1:e4:08:98:cf:f3:17:66:
de:da:cd:78:4f:b8:d0:9e:73:be:79:8c:21:e0:e6:
1c:59:1b:2d:50:f0:28:ab:3a:a2:5d:7b:38:c1:42:
1a:60:bd:8c:af:78:e6:23:82:02:29:1a:90:a7:6b:
0d:2b:20:84:a7:9a:f8:e8:dc:52:10:96:6a:54:39:
f9:12:80:47:e8:60:aa:2a:01:89:06:70:e8:8c:6e:
9d:54:7f:be:6d:68:58:f3:79:7f:63:e6:10:95:b5:
a4:9e:4c:be:14:76:3a:67:56:84:91:58:0a:e9:9e:
78:45:1c:4f:80:81:2c:05:2a:ba:54:ec:a8:c6:2b:
47:25:d6:ee:ac:ac:44:82:05:db:d9:f0:a6:d3:27:
4e:c1:23:9d:02:fc:65:89:1f:4f:45:58:2c:de:f1:
21:c9:aa:94:4e:3e:4c:88:73:65:6e:7e:dd:54:f1:
0b:22:a0:25:f2:e9:e5:b2:14:6a:f5:ae:bf:01:dd:
0b:97:d4:67:db:34:80:3b:3f:94:46:ad:59:e0:1f:
f1:69:d9:86:85:d3:b1:67:06:38:1c:4c:ca:39:b5:
e1:11:e3:81:02:67:c6:53:a1:c1:2a:d5:1f:64:9f:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:BD:AB:6B:5D:D9:01:7C:4E:D1:9F:C3:F6:D7:F3:D0:7A:CF:EF
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9a:19:2e:d0:41:1b:83:6b:83:97:b7:15:43:71:81:66:fc:
14:7a:ec:8f:2a:6d:9c:64:c8:4d:f8:b1:48:aa:9d:5a:4f:6a:
ea:6b:de:3d:f7:d5:c9:e5:9e:66:ba:52:0c:22:a0:eb:5a:19:
9f:89:9c:43:43:75:f8:00:75:1d:2a:bb:7b:3b:d1:19:a1:9e:
cc:44:f7:74:a9:9e:c3:e2:5b:6c:53:a5:73:cf:26:9d:38:3d:
56:7b:68:b3:0b:16:06:18:43:c9:25:16:23:ca:be:03:f8:a2:
0c:6b:bb:a5:51:08:a9:ba:ba:52:d2:1c:0c:88:9c:60:75:40:
61:32:93:f3:cb:0f:ac:a6:6c:f6:d8:c3:96:60:5c:11:e7:1b:
f4:02:ae:4f:70:c0:8c:01:a5:ac:f9:c5:b8:65:a2:1f:31:a7:
a2:78:0a:63:1c:15:b2:9d:8d:13:fb:2f:44:8a:d2:ff:dc:32:
4d:ea:fa:6c:d1:a9:aa:7b:bf:88:4a:8b:f4:b9:9d:73:09:50:
ab:84:5f:87:c5:a4:d3:c1:5c:04:b1:58:a2:4a:d2:d5:d6:c0:
b3:03:e3:8c:8d:6b:b7:a5:9d:a9:6c:bf:b3:a1:1f:d7:16:b3:
f9:8f:89:cb:b2:79:0e:c7:9f:fe:ef:93:ca:21:84:2e:6f:fd:
1a:2c:87:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyEHSsf8bpsu53+B1B60ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjYwNTEzMTAwMDU1WhcNMjYwNTE0MTAwMDU1WjAzMTEwLwYDVQQD
EygwMWY3YmRhYjZiNWRkOTAxN2M0ZWQxOWZjM2Y2ZDdmM2QwN2FjZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ts+9hwQRJ4+kYF9qxGwjBZdDSP/
8eQImM/zF2be2s14T7jQnnO+eYwh4OYcWRstUPAoqzqiXXs4wUIaYL2Mr3jmI4IC
KRqQp2sNKyCEp5r46NxSEJZqVDn5EoBH6GCqKgGJBnDojG6dVH++bWhY83l/Y+YQ
lbWknky+FHY6Z1aEkVgK6Z54RRxPgIEsBSq6VOyoxitHJdburKxEggXb2fCm0ydO
wSOdAvxliR9PRVgs3vEhyaqUTj5MiHNlbn7dVPELIqAl8unlshRq9a6/Ad0Ll9Rn
2zSAOz+URq1Z4B/xadmGhdOxZwY4HEzKObXhEeOBAmfGU6HBKtUfZJ9JAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH3vatrXdkBfE7Rn8P21/PQes/vMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJoZLtBB
G4Nrg5e3FUNxgWb8FHrsjyptnGTITfixSKqdWk9q6mvePffVyeWeZrpSDCKg61oZ
n4mcQ0N1+AB1HSq7ezvRGaGezET3dKmew+JbbFOlc88mnTg9VntoswsWBhhDySUW
I8q+A/iiDGu7pVEIqbq6UtIcDIicYHVAYTKT88sPrKZs9tjDlmBcEecb9AKuT3DA
jAGlrPnFuGWiHzGnongKYxwVsp2NE/svRIrS/9wyTer6bNGpqnu/iEqL9LmdcwlQ
q4Rfh8Wk08FcBLFYokrS1dbAswPjjI1rt6WdqWy/s6Ef1xaz+Y+Jy7J5Dsef/u+T
yiGELm/9GiyH6g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:59:03 2026 by rpki-client