Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: xsJ/A89pznHDHeOw6FEDjceVC5BWTo/5KmNbjnyLk1I=
Subject key identifier: 64:EC:68:2B:4E:1D:B3:39:EA:98:96:20:03:07:7B:90:96:85:36:CE
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 01A02732F738808DD10BAF1F05FAAE894519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 021F
Signing time: Sat 22 Aug 2026 02:00:46 +0000
Manifest this update: Sat 22 Aug 2026 02:00:46 +0000
Manifest next update: Sun 23 Aug 2026 02:00:46 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: iIy5wqJCpW3oy/RWypU0tDIpS3n3pGboQgrzWE1zqfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:32:f7:38:80:8d:d1:0b:af:1f:05:fa:ae:89:45:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Aug 22 02:00:46 2026 GMT
Not After : Aug 23 02:00:46 2026 GMT
Subject: CN=64ec682b4e1db339ea98962003077b90968536ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:64:31:e8:2a:5b:33:f5:bc:bb:4e:40:f4:
c6:79:85:69:5a:bc:b2:d3:15:e6:40:b5:ee:43:a8:
b2:d4:f0:18:c8:4c:22:1b:5b:e2:32:28:3c:16:c4:
be:eb:c0:88:6a:ff:9d:5a:d5:15:f5:60:9e:38:5e:
ab:75:6d:44:80:54:40:22:05:c5:b9:cc:e9:94:5b:
ba:a2:3e:89:59:fc:e1:bf:95:b8:87:5e:6b:6a:90:
34:03:8f:9b:20:99:4d:90:92:fa:93:99:de:e5:ae:
28:98:e1:04:15:5e:8a:10:40:27:0b:27:b7:85:e5:
b0:4c:c7:9a:1d:d1:97:fa:f5:2c:84:a3:41:92:48:
7b:97:75:a2:08:09:8e:fb:e7:b1:c5:72:8f:54:e8:
01:06:09:b7:3b:6d:9e:34:27:69:d7:6a:39:b5:a1:
7c:1d:16:c3:9b:b7:17:a6:c7:97:d8:0d:6a:99:9e:
13:3a:c2:2d:99:80:97:d8:29:c6:63:b3:28:68:25:
98:cc:25:75:4d:35:81:ce:a6:8a:ff:81:fe:61:75:
2f:f7:ea:a6:ea:86:e9:2b:57:0b:d6:69:57:21:3f:
e4:2a:76:80:2c:dd:de:d7:0d:87:bb:8c:18:2e:56:
b6:08:6b:e2:0f:3e:fe:53:ca:0d:b1:4a:87:60:22:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EC:68:2B:4E:1D:B3:39:EA:98:96:20:03:07:7B:90:96:85:36:CE
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2e:3d:d2:80:38:bd:e0:0a:6e:56:00:68:6c:6b:f5:db:88:
66:8b:21:cc:95:9a:f7:4e:22:3d:3a:30:74:a8:2f:3f:f6:82:
2c:5b:1f:78:35:ac:31:43:6e:ff:50:c7:23:fa:a7:58:47:bb:
13:28:18:13:4b:26:f8:63:04:22:15:47:61:24:d8:15:95:71:
37:9c:e7:29:56:14:7c:f3:a6:42:f2:95:d1:b5:01:8d:69:b6:
7f:dd:c3:3a:56:66:ae:81:18:fe:7d:f9:76:e2:ed:61:cb:41:
94:99:30:b3:0c:f6:ba:83:6a:fb:5d:7c:09:37:f4:53:9a:49:
5f:3c:42:69:93:44:34:62:0d:9b:07:05:12:39:0f:b9:e1:b5:
af:c6:0f:20:d8:08:19:4f:4e:88:58:b5:e9:49:ba:19:0d:c7:
fe:7c:e6:35:d6:6e:39:e2:f1:e9:0f:4d:7b:39:f1:9e:f1:80:
21:b8:8c:80:ad:fc:60:7a:7a:03:7b:48:cf:53:20:e8:62:90:
84:a5:36:1f:14:17:01:89:c6:50:5a:e5:75:fb:75:e8:1d:e8:
32:63:8b:0e:51:12:67:b2:01:8e:fd:31:3d:4d:0d:4b:e9:30:
84:de:ef:e2:22:1e:1b:71:49:a3:0e:36:40:7d:24:a5:5f:f3:
7b:6d:b2:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAnMvc4gI3RC68fBfquiUUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNTMzMDgxMzdiNDU1YjY1YTZjMjg5ZWIwM2M0ZDRlMGZi
NmZjZmUwHhcNMjYwODIyMDIwMDQ2WhcNMjYwODIzMDIwMDQ2WjAzMTEwLwYDVQQD
Eyg2NGVjNjgyYjRlMWRiMzM5ZWE5ODk2MjAwMzA3N2I5MDk2ODUzNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S1kMegqWzP1vLtOQPTGeYVpWryy
0xXmQLXuQ6iy1PAYyEwiG1viMig8FsS+68CIav+dWtUV9WCeOF6rdW1EgFRAIgXF
uczplFu6oj6JWfzhv5W4h15rapA0A4+bIJlNkJL6k5ne5a4omOEEFV6KEEAnCye3
heWwTMeaHdGX+vUshKNBkkh7l3WiCAmO++exxXKPVOgBBgm3O22eNCdp12o5taF8
HRbDm7cXpseX2A1qmZ4TOsItmYCX2CnGY7MoaCWYzCV1TTWBzqaK/4H+YXUv9+qm
6obpK1cL1mlXIT/kKnaALN3e1w2Hu4wYLla2CGviDz7+U8oNsUqHYCILRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTsaCtOHbM56piWIAMHe5CWhTbOMB8GA1UdIwQY
MBaAFCpTMIE3tFW2WmwonrA8TU4Ptvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgt
NzgyMjgxNTE1OTA3LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgtNzgyMjgxNTE1OTA3
LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy490oA4
veAKblYAaGxr9duIZoshzJWa904iPTowdKgvP/aCLFsfeDWsMUNu/1DHI/qnWEe7
EygYE0sm+GMEIhVHYSTYFZVxN5znKVYUfPOmQvKV0bUBjWm2f93DOlZmroEY/n35
duLtYctBlJkwswz2uoNq+118CTf0U5pJXzxCaZNENGINmwcFEjkPueG1r8YPINgI
GU9OiFi16Um6GQ3H/nzmNdZuOeLx6Q9NeznxnvGAIbiMgK38YHp6A3tIz1Mg6GKQ
hKU2HxQXAYnGUFrldft16B3oMmOLDlESZ7IBjv0xPU0NS+kwhN7v4iIeG3FJow42
QH0kpV/ze22yJg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 04:35:22 2026 by rpki-client