Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: zdpAH0f2F8Hmw++GzJht+LSYxS1mmsq4J/oL1OZPioM=
Subject key identifier: 21:B8:6B:1B:2E:1D:D0:93:98:05:62:86:30:7F:CE:24:C2:92:E0:A9
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019F10E4E7A49ADEFBCED1A9EAD2E137C467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 01:01:04 +0000
Manifest this update: Mon 29 Jun 2026 01:01:04 +0000
Manifest next update: Tue 30 Jun 2026 01:01:04 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 27EyZoR2vJMPVM9FRG6gamGnOtxBWDYgjCaeM1nWnqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:e7:a4:9a:de:fb:ce:d1:a9:ea:d2:e1:37:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jun 29 01:01:04 2026 GMT
Not After : Jun 30 01:01:04 2026 GMT
Subject: CN=21b86b1b2e1dd09398056286307fce24c292e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:9f:5f:a2:fd:31:67:cc:80:61:a4:3e:d5:
f4:c1:b1:49:e2:15:55:0b:21:bf:2b:f1:a5:b6:8a:
6f:20:22:2e:1a:c0:c1:1b:45:96:0e:cb:59:6c:6b:
11:b2:16:8e:30:34:98:f3:0c:d0:b2:5f:6a:86:73:
1b:f0:09:f6:03:f0:4b:98:70:26:1c:b9:02:96:7b:
5a:89:30:26:6f:89:e6:1f:7c:45:ba:5e:39:9d:0b:
4e:8b:4c:20:15:85:83:87:65:a9:89:dc:e9:81:cc:
3f:c4:d9:b5:96:14:f4:5e:5c:4a:dc:6f:9c:44:84:
8b:a5:78:1c:5e:aa:6f:76:c9:29:0b:36:6f:64:44:
ea:d9:e5:8a:0e:2c:b1:b1:c8:72:e6:56:91:61:31:
d2:83:cf:a1:02:25:37:76:3c:82:3a:93:d4:d4:b1:
50:fd:10:78:fd:c2:64:e8:61:f7:ed:f3:d0:ad:42:
eb:42:5a:7a:a8:d6:08:83:46:54:4f:27:75:b7:ed:
a0:8c:59:f1:98:79:13:b9:bd:a1:64:70:69:bb:3e:
f0:b0:3d:c6:9f:99:24:de:87:89:f0:1b:e3:88:77:
bd:a6:13:3a:d8:6b:67:4d:71:21:fe:80:82:4f:bf:
cd:b6:fd:b1:c0:b9:90:c6:b5:d7:c0:20:64:6e:5a:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:6B:1B:2E:1D:D0:93:98:05:62:86:30:7F:CE:24:C2:92:E0:A9
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ba:f6:ca:ef:9a:3f:51:88:84:d0:d5:6d:d3:0a:41:2f:c8:
99:df:d2:06:75:72:9f:00:cd:d3:86:98:74:24:70:28:7d:26:
a4:43:37:48:a4:53:f2:cc:bd:97:be:7b:00:aa:74:3c:a7:d1:
37:12:7a:33:24:ef:14:dd:df:e3:ee:fc:be:9d:7f:77:ca:c3:
ab:cd:5c:f8:9d:67:f5:bb:cd:b1:50:22:88:88:ea:f4:b8:00:
26:c7:2d:25:b1:41:b5:15:41:53:29:bc:f9:af:29:d2:95:08:
fb:2d:f0:e5:de:43:eb:7b:2e:ce:23:e8:a9:97:ed:78:28:6f:
2e:e1:44:cd:32:26:9e:33:60:99:81:0d:f0:c3:f1:e1:d2:30:
42:a3:52:1e:68:42:97:b1:e2:9f:76:26:22:49:af:e0:d5:a5:
07:1c:55:63:e4:5a:4c:ae:f1:48:f3:8e:78:43:17:82:bb:26:
22:fb:9f:73:0e:95:02:80:98:40:11:50:c9:05:57:5a:71:64:
90:5f:22:da:c3:4f:1c:90:e2:38:7e:14:c6:ef:e5:6e:9b:aa:
0c:53:4c:33:8d:96:2f:06:33:ab:46:49:e0:5d:ce:5d:13:7b:
03:c4:15:fe:f4:3d:f0:f8:c9:de:0c:5c:88:8a:c3:17:f2:eb:
08:82:57:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5Oekmt77ztGp6tLhN8RnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjYwNjI5MDEwMTA0WhcNMjYwNjMwMDEwMTA0WjAzMTEwLwYDVQQD
EygyMWI4NmIxYjJlMWRkMDkzOTgwNTYyODYzMDdmY2UyNGMyOTJlMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7mfX6L9MWfMgGGkPtX0wbFJ4hVV
CyG/K/GltopvICIuGsDBG0WWDstZbGsRshaOMDSY8wzQsl9qhnMb8An2A/BLmHAm
HLkClntaiTAmb4nmH3xFul45nQtOi0wgFYWDh2Wpidzpgcw/xNm1lhT0XlxK3G+c
RISLpXgcXqpvdskpCzZvZETq2eWKDiyxschy5laRYTHSg8+hAiU3djyCOpPU1LFQ
/RB4/cJk6GH37fPQrULrQlp6qNYIg0ZUTyd1t+2gjFnxmHkTub2hZHBpuz7wsD3G
n5kk3oeJ8BvjiHe9phM62GtnTXEh/oCCT7/Ntv2xwLmQxrXXwCBkblrq8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG4axsuHdCTmAVihjB/ziTCkuCpMB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7r2yu+a
P1GIhNDVbdMKQS/Imd/SBnVynwDN04aYdCRwKH0mpEM3SKRT8sy9l757AKp0PKfR
NxJ6MyTvFN3f4+78vp1/d8rDq81c+J1n9bvNsVAiiIjq9LgAJsctJbFBtRVBUym8
+a8p0pUI+y3w5d5D63suziPoqZfteChvLuFEzTImnjNgmYEN8MPx4dIwQqNSHmhC
l7Hin3YmIkmv4NWlBxxVY+RaTK7xSPOOeEMXgrsmIvufcw6VAoCYQBFQyQVXWnFk
kF8i2sNPHJDiOH4Uxu/lbpuqDFNMM42WLwYzq0ZJ4F3OXRN7A8QV/vQ98PjJ3gxc
iIrDF/LrCIJXVA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:38 2026 by rpki-client