Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: ZpFlHFKGR6PMzewTyOxyDqa6oqT8lZw0ETj503Xzrqk=
Subject key identifier: 88:34:A9:0D:59:02:58:66:FE:1F:09:17:FF:0D:17:36:1E:4E:49:DC
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019EFBA86A86C5876245D09F2F571FE3C3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 09BE
Signing time: Wed 24 Jun 2026 22:02:58 +0000
Manifest this update: Wed 24 Jun 2026 22:02:58 +0000
Manifest next update: Thu 25 Jun 2026 22:02:58 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: jYwsfN2LhYB5URrtFAwgWuV4rjVtQiBNn+a3HW/ODss=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: p1ccrCra_00L6gD8dPHnVWnovDk.asa (hash: Tkz+LG7gpA+z7CdE6VRu1V3RZMUT7S6Od/VEYzShauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:6a:86:c5:87:62:45:d0:9f:2f:57:1f:e3:c3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jun 24 22:02:58 2026 GMT
Not After : Jun 25 22:02:58 2026 GMT
Subject: CN=8834a90d59025866fe1f0917ff0d17361e4e49dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:08:48:d0:67:bf:bd:9e:a7:0f:bc:20:5f:
15:fb:c6:ad:09:70:a8:62:03:4e:62:87:62:71:40:
4a:bd:7c:f3:e5:6e:de:00:ef:7f:d8:d8:68:3d:70:
89:ae:13:c3:06:db:6c:f4:7d:a7:0e:f3:51:4c:6e:
6a:27:bd:0e:7d:e6:77:b7:10:80:47:d6:b3:a8:70:
0b:9e:67:20:e8:2e:9f:96:c5:c5:4a:94:b1:d7:ad:
ea:bb:ac:a1:41:98:67:25:8f:6e:fa:d1:37:30:cb:
22:3b:14:20:3c:c1:43:52:04:43:f3:36:1f:61:16:
56:b8:10:e6:e0:3d:64:ef:59:09:d1:b9:c8:a0:a0:
35:56:db:07:c9:94:7c:1a:d4:fa:c9:48:74:b5:10:
26:2c:f7:8a:95:db:a7:fe:60:08:6f:50:51:53:ea:
dd:2d:b6:9d:76:25:e8:7b:29:b4:43:62:de:47:3e:
03:8b:30:7e:6c:2d:a6:c3:2b:9c:20:c3:64:45:45:
22:37:ac:54:a7:81:0e:0f:15:72:77:ce:f1:1e:a4:
1f:c9:a6:2b:bf:ce:61:53:5f:3d:f8:49:2d:8d:d1:
c0:06:e1:70:ad:0b:80:a3:ef:25:c8:6b:11:50:bd:
c0:bc:71:ea:04:13:8b:39:97:47:73:8b:e0:e6:07:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:A9:0D:59:02:58:66:FE:1F:09:17:FF:0D:17:36:1E:4E:49:DC
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:44:c8:42:cf:dd:5e:03:6e:fa:85:39:7b:ba:a1:5c:8d:
97:03:d1:cf:a9:f5:77:5b:a0:5a:71:a6:7e:50:a2:b2:ef:5c:
2c:67:09:58:65:b7:f5:4d:f4:ef:a1:9b:15:14:39:c7:2f:81:
be:6e:34:14:4b:01:e3:7f:70:56:16:56:f7:4a:83:2e:7f:c1:
24:8d:4d:a6:9b:f0:78:5e:85:4b:c2:c5:bf:1f:0f:48:09:28:
4e:b8:8a:ba:72:2f:9b:6c:3b:38:8d:fc:be:19:6e:63:56:42:
30:b3:e4:07:8f:16:9c:eb:35:56:a4:68:09:c7:fd:66:50:56:
10:21:ac:2e:f8:78:6d:08:81:2d:85:ce:14:a6:fd:a7:05:5d:
11:58:80:1e:62:17:e5:9a:38:6b:bc:c2:c0:36:11:15:a7:72:
fa:7f:5a:03:54:41:33:2d:3b:7c:b1:36:10:4d:1d:22:23:a9:
dd:e6:9e:e7:6b:2d:27:3e:ac:5d:5c:f6:ad:80:7e:27:06:a8:
fe:d2:12:28:b8:96:d4:f9:3a:63:03:18:80:64:ed:55:a1:44:
9e:bf:bc:2b:fd:e7:cd:62:ef:27:d9:ca:71:8b:20:dd:ea:d8:
4c:92:34:04:f6:70:4d:46:f0:b6:cf:ac:01:01:0c:2a:b4:98:
86:b2:e3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ77qGqGxYdiRdCfL1cf48PxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTc4MjQzYTA4NjZiMDkxMjcyZDFlMWViNDUxZTcxZTQx
M2I5OWEwHhcNMjYwNjI0MjIwMjU4WhcNMjYwNjI1MjIwMjU4WjAzMTEwLwYDVQQD
Eyg4ODM0YTkwZDU5MDI1ODY2ZmUxZjA5MTdmZjBkMTczNjFlNGU0OWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlkISNBnv72epw+8IF8V+8atCXCo
YgNOYodicUBKvXzz5W7eAO9/2NhoPXCJrhPDBtts9H2nDvNRTG5qJ70OfeZ3txCA
R9azqHALnmcg6C6flsXFSpSx163qu6yhQZhnJY9u+tE3MMsiOxQgPMFDUgRD8zYf
YRZWuBDm4D1k71kJ0bnIoKA1VtsHyZR8GtT6yUh0tRAmLPeKldun/mAIb1BRU+rd
LbaddiXoeym0Q2LeRz4DizB+bC2mwyucIMNkRUUiN6xUp4EODxVyd87xHqQfyaYr
v85hU189+EktjdHABuFwrQuAo+8lyGsRUL3AvHHqBBOLOZdHc4vg5gf4aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg0qQ1ZAlhm/h8JF/8NFzYeTkncMB8GA1UdIwQY
MBaAFCgXgkOghmsJEnLR4etFHnHkE7maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzIt
NmNlM2MwM2ExMzRjLzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83NDdkYjgtYWM1Ny00NmE4LWI2MzItNmNlM2MwM2ExMzRj
LzEvS0JlQ1E2Q0dhd2tTY3RIaDYwVWVjZVFUdVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIdEyELP
3V4DbvqFOXu6oVyNlwPRz6n1d1ugWnGmflCisu9cLGcJWGW39U3076GbFRQ5xy+B
vm40FEsB439wVhZW90qDLn/BJI1NppvweF6FS8LFvx8PSAkoTriKunIvm2w7OI38
vhluY1ZCMLPkB48WnOs1VqRoCcf9ZlBWECGsLvh4bQiBLYXOFKb9pwVdEViAHmIX
5Zo4a7zCwDYRFady+n9aA1RBMy07fLE2EE0dIiOp3eae52stJz6sXVz2rYB+Jwao
/tISKLiW1Pk6YwMYgGTtVaFEnr+8K/3nzWLvJ9nKcYsg3erYTJI0BPZwTUbwts+s
AQEMKrSYhrLjkg==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:26 2026 by rpki-client