Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: v7ebVFgm6ON618oq2ewgMRy7RAvDNckEyLw9d9auCgE=
Subject key identifier: A3:B7:B6:63:0B:DF:0A:88:2C:A5:2E:CE:C3:05:BA:5C:F6:38:5A:67
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 019E4E45E3343EA3ECC559C214E9D850A0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 10DF
Signing time: Fri 22 May 2026 06:01:03 +0000
Manifest this update: Fri 22 May 2026 06:01:03 +0000
Manifest next update: Sat 23 May 2026 06:01:03 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: HIxVqlX9FcJPq6FFHmUpLtCg399cRLJvlDo7Pp/3/2E=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:45:e3:34:3e:a3:ec:c5:59:c2:14:e9:d8:50:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: May 22 06:01:03 2026 GMT
Not After : May 23 06:01:03 2026 GMT
Subject: CN=a3b7b6630bdf0a882ca52ecec305ba5cf6385a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:58:12:b2:28:5e:98:b6:5c:ef:0b:c9:7a:
d3:52:83:ba:cb:66:a7:f9:e7:1c:df:33:7c:28:c6:
7e:20:e2:74:23:4a:9d:a9:0b:2f:7d:30:b5:e5:59:
33:7e:b2:e6:71:6a:17:92:7c:db:54:e8:40:fc:0a:
af:9d:ca:56:68:e6:45:7e:ad:18:0f:3d:62:12:db:
5f:f7:e2:a8:ec:1a:ea:da:6d:97:94:6c:56:56:b6:
89:dc:61:bc:61:d4:21:f4:84:c9:c7:67:4a:ef:ce:
53:a0:93:e0:ee:2a:56:b2:41:77:74:84:50:d9:7e:
38:0c:8e:78:bc:c7:ed:7a:f7:72:a5:22:61:35:79:
44:d3:61:10:3c:ab:33:47:35:71:e9:45:25:b4:4d:
52:e7:f0:8f:90:f0:b1:2d:5f:11:4a:e3:02:c3:7d:
7d:52:f7:18:3b:bc:3b:e5:ff:21:e8:ee:03:91:92:
93:a4:57:e5:d5:f2:74:58:ab:46:5e:b7:b7:4f:5a:
fc:53:a0:23:10:f5:89:98:5e:e1:29:7e:09:f6:21:
d1:ac:35:5c:e6:5c:e6:63:5b:74:56:3c:41:ab:35:
d1:d3:e8:4c:77:c6:24:5a:a3:8d:01:bd:dc:aa:2e:
8d:9b:81:13:20:3f:fa:eb:8c:b1:5c:2f:23:5b:89:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B7:B6:63:0B:DF:0A:88:2C:A5:2E:CE:C3:05:BA:5C:F6:38:5A:67
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:77:c0:02:ba:a3:14:4d:c1:3a:90:68:80:34:88:c2:46:c1:
92:f9:8d:08:6a:a1:3c:d3:91:3c:4e:5a:2a:8b:6b:21:ca:a6:
1c:10:61:8b:df:ad:e7:86:29:41:99:7f:ee:b9:86:f1:6a:c4:
92:e8:de:4f:ca:f8:1d:cc:cf:0c:5f:e6:82:7f:ab:65:17:a8:
d4:cc:70:98:56:35:bc:ad:9a:23:69:fb:a4:eb:90:96:f3:22:
67:50:5f:4d:e4:30:31:c8:0e:a5:29:1a:ca:c3:f1:fd:09:2c:
a2:06:91:24:68:49:dd:90:26:96:2f:6e:99:57:da:76:ba:8b:
05:91:0d:c9:98:45:b9:58:de:26:70:89:a7:15:72:ea:43:25:
e4:b8:32:e9:c6:1b:3e:0b:76:b4:23:10:4e:1d:6e:03:bd:bc:
41:2e:ed:36:ff:10:fe:03:7e:f8:fb:4d:bb:c5:04:29:06:eb:
fe:85:72:de:2e:fd:e5:ce:c5:c9:82:80:33:b0:50:00:1c:ac:
17:a9:79:ee:86:20:5f:02:d3:bb:64:c5:4c:ae:9d:31:65:97:
9b:71:a1:23:55:75:5f:23:59:79:66:fd:93:d0:fd:50:af:a0:
f3:4f:5b:29:6a:dc:db:09:37:02:90:9b:67:32:02:b3:75:09:
34:ed:cb:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5OReM0PqPsxVnCFOnYUKDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjYwNTIyMDYwMTAzWhcNMjYwNTIzMDYwMTAzWjAzMTEwLwYDVQQD
EyhhM2I3YjY2MzBiZGYwYTg4MmNhNTJlY2VjMzA1YmE1Y2Y2Mzg1YTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzptYErIoXpi2XO8LyXrTUoO6y2an
+ecc3zN8KMZ+IOJ0I0qdqQsvfTC15VkzfrLmcWoXknzbVOhA/AqvncpWaOZFfq0Y
Dz1iEttf9+Ko7Brq2m2XlGxWVraJ3GG8YdQh9ITJx2dK785ToJPg7ipWskF3dIRQ
2X44DI54vMftevdypSJhNXlE02EQPKszRzVx6UUltE1S5/CPkPCxLV8RSuMCw319
UvcYO7w75f8h6O4DkZKTpFfl1fJ0WKtGXre3T1r8U6AjEPWJmF7hKX4J9iHRrDVc
5lzmY1t0VjxBqzXR0+hMd8YkWqONAb3cqi6Nm4ETID/664yxXC8jW4mHuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO3tmML3wqILKUuzsMFulz2OFpnMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXfAArqj
FE3BOpBogDSIwkbBkvmNCGqhPNORPE5aKotrIcqmHBBhi9+t54YpQZl/7rmG8WrE
kujeT8r4HczPDF/mgn+rZReo1MxwmFY1vK2aI2n7pOuQlvMiZ1BfTeQwMcgOpSka
ysPx/QksogaRJGhJ3ZAmli9umVfadrqLBZENyZhFuVjeJnCJpxVy6kMl5Lgy6cYb
Pgt2tCMQTh1uA728QS7tNv8Q/gN++PtNu8UEKQbr/oVy3i795c7FyYKAM7BQABys
F6l57oYgXwLTu2TFTK6dMWWXm3GhI1V1XyNZeWb9k9D9UK+g809bKWrc2wk3ApCb
ZzICs3UJNO3LyQ==
-----END CERTIFICATE-----
Generated at Fri May 22 15:11:20 2026 by rpki-client