Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: i1kASv6/jwNq6eTxvqLOfeW/yhtH9iXtjnvV4OXqkJA=
Subject key identifier: A7:56:7F:7C:F7:37:37:B4:ED:31:1C:1E:BD:BE:18:8D:66:B4:3B:0B
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019F3905B5C5C59A4310EDB3C5D62A3DFBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0867
Signing time: Mon 06 Jul 2026 20:01:43 +0000
Manifest this update: Mon 06 Jul 2026 20:01:43 +0000
Manifest next update: Tue 07 Jul 2026 20:01:43 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: 6uNriePyQsvVrsq4cm+glQJAeT1xCrkcz06XikwWcmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:05:b5:c5:c5:9a:43:10:ed:b3:c5:d6:2a:3d:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jul 6 20:01:43 2026 GMT
Not After : Jul 7 20:01:43 2026 GMT
Subject: CN=a7567f7cf73737b4ed311c1ebdbe188d66b43b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:ad:3b:d6:15:93:94:2d:9b:83:4e:4b:dc:
b0:cd:a5:cc:2e:0c:8f:b8:a9:a9:8b:51:b4:41:ee:
f2:7a:97:d5:c4:47:81:b7:1c:8a:cb:cb:7d:55:87:
6b:49:d1:f1:dc:b6:95:6e:bf:09:68:f7:b7:23:f2:
78:cb:24:32:a0:ee:90:76:cc:8b:b0:24:1d:6f:f9:
22:73:57:f3:6c:2a:39:1b:f4:d9:85:ab:3b:e8:4d:
8e:d0:02:e9:16:fd:97:8d:6d:c7:56:c4:ea:80:23:
2d:e2:61:fc:8e:96:f6:36:3e:71:d9:93:1a:23:62:
04:a1:2d:60:39:26:0b:b7:d1:da:e1:af:54:c8:cd:
7d:59:5c:fa:f1:a2:49:44:e1:48:f5:8c:83:ab:ca:
0c:86:e7:15:71:16:89:c1:3c:5b:e9:b0:57:85:f3:
4e:ac:9d:14:b8:58:6a:19:4d:7a:ce:18:b6:d8:41:
d3:5d:2b:d7:bd:37:37:c4:a0:35:e2:40:d7:1f:45:
9c:7b:89:48:8c:f9:f1:c5:b7:31:9a:f7:30:6f:c6:
18:d9:51:0a:aa:c4:c2:aa:93:c7:d6:d7:24:98:13:
5d:6d:ca:94:67:f1:33:f3:47:ea:91:31:c6:0e:5b:
1f:e0:18:1e:6d:c5:f9:0a:1d:43:96:7a:68:7b:d6:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:7F:7C:F7:37:37:B4:ED:31:1C:1E:BD:BE:18:8D:66:B4:3B:0B
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:2c:28:72:e3:c1:3f:9d:3b:ea:c6:f5:87:95:0d:e2:b9:
1d:50:f6:3f:6c:c2:71:39:ae:c5:16:fd:6c:33:b8:54:d9:9a:
e2:79:da:ca:85:cc:51:1a:7b:bd:31:06:9a:54:0f:a3:a3:fe:
f0:a6:4e:79:00:9d:d1:d0:2e:5b:f8:c4:cb:b4:28:1d:6e:05:
bd:49:dd:89:b2:c1:b0:c1:56:20:96:28:06:03:61:a8:b9:b8:
5f:0a:4d:66:da:82:32:c5:10:07:da:b7:2c:13:c7:d4:7c:b4:
d4:13:da:5b:53:01:83:af:a4:e4:bb:c8:5b:d9:98:4f:90:46:
12:d0:30:4c:50:06:25:00:1f:ae:69:95:97:71:99:ba:76:aa:
bb:85:9b:5d:ef:d5:66:33:95:89:eb:5e:54:48:f8:64:e2:94:
0b:b6:11:d9:33:34:01:ef:bf:72:67:91:12:93:5b:cd:22:21:
cb:f8:1b:48:8d:d3:e8:db:26:e5:55:e0:80:00:c7:9c:72:0b:
f3:f8:43:c7:99:ae:e1:05:3d:ad:ed:1b:ca:41:d6:87:cc:f6:
34:f3:8c:28:31:a9:4a:81:26:de:13:ea:28:5b:1c:00:0f:e5:
0e:20:81:40:69:f4:16:5d:25:ab:a2:d1:e0:1d:34:49:15:dd:
55:18:f6:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ85BbXFxZpDEO2zxdYqPfuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjYwNzA2MjAwMTQzWhcNMjYwNzA3MjAwMTQzWjAzMTEwLwYDVQQD
EyhhNzU2N2Y3Y2Y3MzczN2I0ZWQzMTFjMWViZGJlMTg4ZDY2YjQzYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujStO9YVk5Qtm4NOS9ywzaXMLgyP
uKmpi1G0Qe7yepfVxEeBtxyKy8t9VYdrSdHx3LaVbr8JaPe3I/J4yyQyoO6QdsyL
sCQdb/kic1fzbCo5G/TZhas76E2O0ALpFv2XjW3HVsTqgCMt4mH8jpb2Nj5x2ZMa
I2IEoS1gOSYLt9Ha4a9UyM19WVz68aJJROFI9YyDq8oMhucVcRaJwTxb6bBXhfNO
rJ0UuFhqGU16zhi22EHTXSvXvTc3xKA14kDXH0Wce4lIjPnxxbcxmvcwb8YY2VEK
qsTCqpPH1tckmBNdbcqUZ/Ez80fqkTHGDlsf4BgebcX5Ch1Dlnpoe9YDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdWf3z3Nze07TEcHr2+GI1mtDsLMB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYgsKHLj
wT+dO+rG9YeVDeK5HVD2P2zCcTmuxRb9bDO4VNma4nnayoXMURp7vTEGmlQPo6P+
8KZOeQCd0dAuW/jEy7QoHW4FvUndibLBsMFWIJYoBgNhqLm4XwpNZtqCMsUQB9q3
LBPH1Hy01BPaW1MBg6+k5LvIW9mYT5BGEtAwTFAGJQAfrmmVl3GZunaqu4WbXe/V
ZjOVieteVEj4ZOKUC7YR2TM0Ae+/cmeREpNbzSIhy/gbSI3T6Nsm5VXggADHnHIL
8/hDx5mu4QU9re0bykHWh8z2NPOMKDGpSoEm3hPqKFscAA/lDiCBQGn0Fl0lq6LR
4B00SRXdVRj2aA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 23:19:46 2026 by rpki-client