Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier: hOJY/ohyaFv9MGo/IgsbIutUMvmWvAB4xmAirNZ9/7M=
Subject key identifier: 66:1F:91:0A:BB:21:47:EB:C8:69:19:F6:9C:9C:FA:C1:A8:16:D9:C4
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 019F58221536B0856F949D77801EFA428291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number: 17F8
Signing time: Sun 12 Jul 2026 21:00:56 +0000
Manifest this update: Sun 12 Jul 2026 21:00:56 +0000
Manifest next update: Mon 13 Jul 2026 21:00:56 +0000
Files and hashes: 1: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: T6LYPW4TqHFhySWK9YJ4cr9EBpSNp9m45y6ROgUzJw4=)
2: xrChCZKPpUH_V3yyUorXAC7-wuI.roa (hash: mu02wWY4fhbPfdL9W27X+rqqcQR4ghwCDLbVsERFcxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:22:15:36:b0:85:6f:94:9d:77:80:1e:fa:42:82:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Jul 12 21:00:56 2026 GMT
Not After : Jul 13 21:00:56 2026 GMT
Subject: CN=661f910abb2147ebc86919f69c9cfac1a816d9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:4c:db:20:89:b3:1c:eb:ff:05:0a:9d:89:
da:25:c0:56:d2:8d:6c:32:cd:2f:5f:85:51:15:b2:
df:d0:99:95:a5:1e:90:6e:d5:dd:19:f3:48:3f:cb:
8f:41:05:c9:b8:5d:a9:0a:77:ac:9f:9d:37:39:36:
48:07:8c:c0:34:73:4c:20:ee:d2:90:b5:3f:5e:f7:
ea:43:f3:98:b3:6a:a3:5d:39:b0:1b:d0:24:75:56:
4f:e6:76:0c:6c:2e:5f:f7:cd:9b:46:c5:be:c6:e5:
bd:28:95:a4:8f:15:72:46:1b:2e:64:c4:7f:f6:5f:
33:6d:ca:c1:ec:40:b8:7f:05:fc:6a:97:ca:d9:a7:
ad:c8:58:04:9c:06:3a:95:75:50:8a:58:48:1e:46:
4b:d3:b5:f8:2c:c2:99:7f:ee:63:44:ce:b9:a0:c3:
45:a4:40:81:10:4f:4c:29:50:ed:0d:85:51:41:f3:
df:72:4f:94:c3:74:8b:c7:d5:51:25:48:b8:57:ff:
e6:79:a0:6c:f1:90:f1:03:ce:14:67:35:43:17:d0:
5e:0e:99:00:fd:b8:72:d6:34:7c:96:de:7f:7a:7e:
4a:53:c1:65:4d:0e:a3:2c:da:a3:f4:c1:91:86:2e:
62:a1:a4:60:e2:7b:23:79:e1:62:1d:5b:a3:22:9a:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:91:0A:BB:21:47:EB:C8:69:19:F6:9C:9C:FA:C1:A8:16:D9:C4
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:96:82:f8:17:88:e5:d1:39:d2:48:02:7d:b4:c1:64:aa:
8a:9e:4b:03:95:10:a2:62:48:86:74:74:54:25:54:8f:3e:1e:
05:50:a7:a1:9d:e5:a3:96:18:0b:f0:b0:5f:70:99:6e:8e:ae:
6c:ec:43:02:0c:91:ee:68:8a:58:14:48:3f:5c:c7:0b:8e:54:
16:d6:5f:6b:ad:8b:6f:72:de:b8:10:1f:6d:8c:97:75:4d:2b:
af:6d:fe:1f:dd:51:34:73:6f:d2:da:2f:7b:86:ee:f7:65:fc:
df:f1:9c:0d:48:df:45:20:4f:77:4c:a5:0e:60:fc:1e:da:32:
f4:a8:66:55:42:27:ff:6f:b8:22:85:22:d4:c2:b3:3c:d3:9a:
51:21:06:f4:e4:d7:d0:87:38:49:05:ca:2c:97:89:0c:3a:18:
31:d3:54:99:39:11:4b:27:f1:e1:4d:12:69:30:20:fb:ed:20:
89:7f:05:49:63:94:17:08:e2:0f:e5:45:09:10:71:d9:4a:e9:
ed:37:e2:0f:7b:45:f9:d6:bf:dc:04:17:f2:02:45:33:a6:dd:
ba:3a:a9:ab:55:b4:7a:50:2b:60:ba:63:c8:52:26:84:d2:79:
41:fd:84:55:f2:19:5c:77:4a:15:a5:4b:fb:3b:fe:0a:f5:b1:
e8:de:86:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9YIhU2sIVvlJ13gB76QoKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjI1YjcyNzU4ZGE1OGYwZjNlYzBmMDcyNzM1M2ViZDJi
NDQ3NzQwHhcNMjYwNzEyMjEwMDU2WhcNMjYwNzEzMjEwMDU2WjAzMTEwLwYDVQQD
Eyg2NjFmOTEwYWJiMjE0N2ViYzg2OTE5ZjY5YzljZmFjMWE4MTZkOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKFM2yCJsxzr/wUKnYnaJcBW0o1s
Ms0vX4VRFbLf0JmVpR6QbtXdGfNIP8uPQQXJuF2pCnesn503OTZIB4zANHNMIO7S
kLU/XvfqQ/OYs2qjXTmwG9AkdVZP5nYMbC5f982bRsW+xuW9KJWkjxVyRhsuZMR/
9l8zbcrB7EC4fwX8apfK2aetyFgEnAY6lXVQilhIHkZL07X4LMKZf+5jRM65oMNF
pECBEE9MKVDtDYVRQfPfck+Uw3SLx9VRJUi4V//meaBs8ZDxA84UZzVDF9BeDpkA
/bhy1jR8lt5/en5KU8FlTQ6jLNqj9MGRhi5ioaRg4nsjeeFiHVujIpr5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYfkQq7IUfryGkZ9pyc+sGoFtnEMB8GA1UdIwQY
MBaAFJPyW3J1jaWPDz7A8HJzU+vStEd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQt
ODJhMzExMmY0OWM3LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQtODJhMzExMmY0OWM3
LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcCWgvgX
iOXROdJIAn20wWSqip5LA5UQomJIhnR0VCVUjz4eBVCnoZ3lo5YYC/CwX3CZbo6u
bOxDAgyR7miKWBRIP1zHC45UFtZfa62Lb3LeuBAfbYyXdU0rr23+H91RNHNv0tov
e4bu92X83/GcDUjfRSBPd0ylDmD8Htoy9KhmVUIn/2+4IoUi1MKzPNOaUSEG9OTX
0Ic4SQXKLJeJDDoYMdNUmTkRSyfx4U0SaTAg++0giX8FSWOUFwjiD+VFCRBx2Urp
7TfiD3tF+da/3AQX8gJFM6bdujqpq1W0elArYLpjyFImhNJ5Qf2EVfIZXHdKFaVL
+zv+CvWx6N6Ggg==
-----END CERTIFICATE-----
Generated at Mon Jul 13 03:31:02 2026 by rpki-client